JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 186.158.120.64

186.158.120.64 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 23%: ?

23%

ISP	AMX Argentina S.A.
Usage Type	Fixed Line ISP
ASN	AS11664
Hostname(s)	host64.186-158-120.telmex.net.ar
Domain Name	claro.com.ar
Country	🇦🇷 Argentina
City	San Juan Bautista, Buenos Aires

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 186.158.120.64

Whois 186.158.120.64

IP Abuse Reports for 186.158.120.64:

This IP address has been reported a total of 12 times from 7 distinct sources. 186.158.120.64 was first reported on November 16th 2025, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-14 15:03:06 (2 days ago)	(mod_security) mod_security (id:210730) triggered by 186.158.120.64 (host64.186-158-120.telmex.net.a ... show more (mod_security) mod_security (id:210730) triggered by 186.158.120.64 (host64.186-158-120.telmex.net.ar): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 14 11:02:57.358166 2026] [security2:error] [pid 25722:tid 25722] [client 186.158.120.64:18557] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.dalessalesandservice.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.dalessalesandservice.com"] [uri "/about-us/[email protected]"] [unique_id "alZPoXcno1lUhPWh3xOPZgAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-06-29 10:49:19 (2 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇩🇪 Vegascosmetics	2026-06-26 12:19:51 (2 weeks ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated redirect. Vegas Security	DDoS Attack Hacking Exploited Host
🇨🇭 backslash	2026-05-22 13:06:00 (1 month ago)	block ruleset Badbot using very old user-agents 5CF3CDB778C7D82564405B86B9242E612F378C68	Bad Web Bot
🇺🇸 TPI-Abuse	2026-02-07 08:12:53 (5 months ago)	(mod_security) mod_security (id:210730) triggered by 186.158.120.64 (host64.186-158-120.telmex.net.a ... show more (mod_security) mod_security (id:210730) triggered by 186.158.120.64 (host64.186-158-120.telmex.net.ar): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 07 03:12:46.426671 2026] [security2:error] [pid 1321995:tid 1321995] [client 186.158.120.64:12759] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|vitalitywebb.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Hansen II/Thumbs.db"] [unique_id "aYbz_vx-DaN5_IJpn9kllQAAABc"], referer: https://vitalitywebb.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-01-25 00:02:10 (5 months ago)	(mod_security) mod_security (id:210730) triggered by 186.158.120.64 (host64.186-158-120.telmex.net.a ... show more (mod_security) mod_security (id:210730) triggered by 186.158.120.64 (host64.186-158-120.telmex.net.ar): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jan 24 19:02:04.311586 2026] [security2:error] [pid 14496:tid 14496] [client 186.158.120.64:36011] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.grupoporvenir.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.grupoporvenir.com"] [uri "/grain-group.com"] [unique_id "aXVdfJ2VIJFo1R0UBDPDBwAAAAA"], referer: http://www.grupoporvenir.com/ show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-01-04 08:13:03 (6 months ago)	scanning http requests from known botnet	Web App Attack
🇨🇦 polycoda	2025-12-26 17:02:18 (6 months ago)	🥶 Part of massive botnet scraping campaign that nearly turned into a DDoS on 2025-11-27	DDoS Attack
🇩🇪 SMARTNET	2025-11-26 07:00:13 (7 months ago)	Aisuru(Mirai variant) DDoS	DDoS Attack
Anonymous	2025-11-24 19:29:37 (7 months ago)	scanning http requests from known botnet	Web App Attack
Anonymous	2025-11-18 06:39:46 (7 months ago)	scanning http requests from known botnet	Web App Attack
Anonymous	2025-11-16 18:14:47 (7 months ago)	scanning http requests from known botnet	Web App Attack

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇦 184.68.64.98

🇩🇪 167.94.146.38

🇭🇰 154.221.23.59

🇺🇸 100.2.94.199

🇷🇴 92.118.39.212

🇳🇱 45.148.10.147

🇭🇰 43.161.240.26

🇧🇪 34.62.198.148

🇺🇸 20.228.193.165

🇦🇪 20.46.45.121

🇹🇼 219.84.226.137

🇸🇪 171.25.158.57

🇰🇷 106.246.224.218

🇷🇺 37.29.97.158

🇧🇪 34.140.210.53

🇮🇩 31.58.244.174

🇩🇪 195.201.228.157

🇩🇴 190.167.237.191

🇩🇪 181.214.99.176

🇺🇸 174.97.149.234