JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 186.122.11.104

186.122.11.104 was found in our database!

This IP was reported 9 times. Confidence of Abuse is 9%: ?

ISP	AMX Argentina S.A.
Usage Type	Mobile ISP
ASN	AS11664
Hostname(s)	host104.186-122-11.telmex.net.ar
Domain Name	claro.com.ar
Country	🇦🇷 Argentina
City	San Miguel de Tucuman, Tucuman

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 186.122.11.104

Whois 186.122.11.104

IP Abuse Reports for 186.122.11.104:

This IP address has been reported a total of 9 times from 8 distinct sources. 186.122.11.104 was first reported on July 23rd 2025, and the most recent report was 4 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 4 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 SMARTNET	2026-05-27 06:03:53 (4 weeks ago)	Aisuru(Mirai variant) DDoS \| Incident ID: f33ea243-b344-42fe-b994-8adedb9f85ca	DDoS Attack
🇺🇸 TPI-Abuse	2026-05-24 23:23:20 (1 month ago)	(mod_security) mod_security (id:217210) triggered by 186.122.11.104 (host104.186-122-11.telmex.net.a ... show more (mod_security) mod_security (id:217210) triggered by 186.122.11.104 (host104.186-122-11.telmex.net.ar): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 24 19:23:13.079148 2026] [security2:error] [pid 8937:tid 8937] [client 186.122.11.104:7872] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?i:(?:[a-z]{3,10}\\\\s+(?:\\\\w{3,7}?://[\\\\w\\\\-\\\\./](?::\\\\d+)?)?/[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S])?\|connect (?:\\\\d{1,3}\\\\.){3}\\\\d{1,3}\\\\.?(?::\\\\d+)?\|options \\\\)\\\\s+[\\\\w\\\\./]+\|get /[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "114"] [id "217210"] [rev "1"] [msg "COMODO WAF: Invalid HTTP Request Line\|\|davefortier.com\|F\|4"] [data "GET http://davefortier.com HTTP/1.1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "davefortier.com"] [uri "/"] [unique_id "ahOIYf0zBDJ6VDQqezfd-AAAACs"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Tamsy	2026-04-01 17:11:34 (2 months ago)	SMTP - Brute-force attack	Brute-Force
🇨🇦 polycoda	2026-02-15 13:13:16 (4 months ago)	🥶 Part of massive botnet scraping campaign that nearly turned into a DDoS on 2025-11-27	DDoS Attack
🇺🇸 kosada.com	2026-02-05 16:24:59 (4 months ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
Anonymous	2025-11-19 14:25:46 (7 months ago)	scanning http requests from known botnet	Web App Attack
Anonymous	2025-11-15 14:52:04 (7 months ago)	scanning http requests from known botnet	Web App Attack
🇮🇹 VHosting	2025-09-08 20:05:23 (9 months ago)	Detected mail brute force attack from 4 different servers	Brute-Force
🇫🇷 ᴀʀᴛ	2025-07-23 20:23:26 (11 months ago)	Triggered Cloudflare WAF (l7ddos) from AR. ASN: 11664 (Techtel LMDS Comunicaciones Interactivas S.A. ... show more Triggered Cloudflare WAF (l7ddos) from AR. ASN: 11664 (Techtel LMDS Comunicaciones Interactivas S.A.) Protocol: HTTP/2 (GET method) UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	DDoS Attack Bad Web Bot

Showing 1 to 9 of 9 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇾 190.135.0.129

🇲🇽 177.231.69.242

🇨🇱 152.173.93.229

🇺🇸 147.185.132.61

🇩🇰 146.70.197.200

🇻🇳 103.77.215.165

🇬🇧 101.36.97.74

🇸🇬 43.160.233.2

🇲🇿 41.220.201.62

🇬🇧 35.203.210.160

🇰🇷 220.80.232.225

🇺🇸 172.171.233.230

🇰🇷 121.131.220.168

🇨🇩 102.216.240.61

🇺🇸 100.29.192.121

🇷🇺 95.108.213.95

🇧🇬 78.128.113.22

🇲🇰 77.29.9.240

🇲🇺 41.136.138.226

🇺🇸 192.249.118.41