This IP address has been reported a total of
12
times from
10 distinct
sources.
181.59.148.35 was first reported on
October 27th 2024 , and the most recent report was
1 week ago United States of America
with 4
reports;
Germany
with 2
reports;
France
with 1
report.
The most common categories in these recent reports were:
Bad Web Bot
4
times;
Port Scan
3
times;
Web App Attack
2
times;
Brute-Force
2
times;
DDoS Attack
2
times;
Other
1
time.
Old Reports
The most recent abuse report for this IP address is from
1 week ago
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇩🇪
LRob
2026-09-25 02:56:31
(1 week ago)
This address requests our sites over plain http, is answered with a redirect to https, and never fol ...
show more
This address requests our sites over plain http, is answered with a redirect to https, and never follows it — over and over. A browser follows redirects; a scanner enumerating hosts does not. It reads nothing it asks for and only loads the server; blocked. Please check what runs on this address. | method: GET | path: / | 2026-09-25 02:56 UTC
show less
Bad Web Bot
🇺🇸
MPL
2026-09-23 12:52:39
(1 week ago)
tcp ports: 22,23 (6 or more attempts)
Port Scan
🇫🇷
security.rdmc.fr
2026-09-23 12:16:14
(1 week ago)
IP in Malicious Database
Web App Attack
2026-09-23 07:44:00
(1 week ago)
denied Telnet access attempt. destination port 23.
Port Scan
Brute-Force
🇳🇱
EGP Abuse Dept
2026-09-23 06:52:59
(1 week ago)
Unauthorized connection to Telnet port 23
Port Scan
Hacking
🇺🇸
TPI-Abuse
2026-09-19 03:50:55
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 181.59.148.35 (dynamic-ip-1815914835.cable.net. ...
show more
(mod_security) mod_security (id:210492) triggered by 181.59.148.35 (dynamic-ip-1815914835.cable.net.co): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 18 23:50:49.346674 2026] [security2:error] [pid 4207:tid 4207] [client 181.59.148.35:1768] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ufcmusic.com"] [uri "/.env.qa"] [unique_id "aq4GmdMGg41CZHp-hXj6JQAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-08-26 20:09:40
(1 month ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
🇺🇸
kosada.com
2026-08-11 08:55:39
(1 month ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
🇩🇪
SMARTNET
2026-05-27 06:03:53
(4 months ago)
Aisuru(Mirai variant) DDoS | Incident ID: 8969aafa-3f20-493f-8883-3bda65a2b909
DDoS Attack
🇸🇬
mypatricks
2026-04-29 13:47:02
(5 months ago)
181.59.148.35 | Port: 10688 | DNS: dynamic-ip-1815914835.cable.net.co 2026-04-29T21:47:01+08:00 Amer ...
show more
181.59.148.35 | Port: 10688 | DNS: dynamic-ip-1815914835.cable.net.co 2026-04-29T21:47:01+08:00 America/Bogota | DYN Data Center/Web Hosting/Transit Spam list | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.51 Safari/537.36 HTTP/1.1 443 GET | URL: /hashtag/witch/?a8183da1a7aa8c11=SGD&code=SGD | Ref: - | Country: CO/Colombia/−05:00 IP City: Bogotá Windows 9f3ec187bf32a64c-MIA/Miami, FL, United States 1 hits/0 secs Robots 4
show less
Brute-Force
Web App Attack
Blog Spam
Web Spam
Exploited Host
🇩🇪
SMARTNET
2025-11-26 02:37:10
(10 months ago)
Aisuru(Mirai variant) DDoS
DDoS Attack
🇳🇱
rroethof
2024-10-27 14:38:10
(1 year ago)
2024-10-27T15:38:04.219137+01:00 mx3 postfix/smtpd[453576]: NOQUEUE: reject: RCPT from unknown[181.5 ...
show more
2024-10-27T15:38:04.219137+01:00 mx3 postfix/smtpd[453576]: NOQUEUE: reject: RCPT from unknown[181.59.148.35]: 550 5.1.1 <[email protected] >: Recipient address rejected: undeliverable address: Recipient address lookup failed; from=<[email protected] > to=<[email protected] > proto=ESMTP helo=<dynamic-ip-1815914835.cable.net.co>
2024-10-27T15:38:09.776329+01:00 mx3 postfix/smtpd[453576]: NOQUEUE: reject: RCPT from unknown[181.59.148.35]: 550 5.1.1 <[email protected] >: Recipient address rejected: undeliverable address: Recipient address lookup failed; from=<[email protected] > to=<[email protected] > proto=ESMTP helo=<dynamic-ip-1815914835.cable.net.co>
...
show less
Email Spam
Showing 1 to
12
of 12 reports
