JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 198.46.246.181

198.46.246.181 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 0%: ?

ISP	HostPapa
Usage Type	Data Center/Web Hosting/Transit
ASN	AS36352
Hostname(s)	198-46-246-181-host.colocrossing.com
Domain Name	colocrossing.com
Country	🇺🇸 United States of America
City	Los Angeles, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 198.46.246.181

Whois 198.46.246.181

IP Abuse Reports for 198.46.246.181:

This IP address has been reported a total of 11 times from 5 distinct sources. 198.46.246.181 was first reported on August 17th 2023, and the most recent report was 4 months ago.

Old Reports: The most recent abuse report for this IP address is from 4 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-02-01 11:38:31 (4 months ago)	(mod_security) mod_security (id:240950) triggered by 198.46.246.181 (198-46-246-181-host.colocrossin ... show more (mod_security) mod_security (id:240950) triggered by 198.46.246.181 (198-46-246-181-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 01 06:32:55.920542 2026] [security2:error] [pid 16722:tid 16892] [client 198.46.246.181:47721] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\D" at TX:1. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "4530"] [id "240950"] [rev "2"] [msg "COMODO WAF: XSS & SQL injection vulnerability in Pragyan CMS 3.0 (CVE-2015-1471)\|\|cpcalendars.kettlehill.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "cpcalendars.kettlehill.net"] [uri "/secure/QueryComponentRendererValue!Default.jspa"] [unique_id "aX8558yMbG6v0xSDvGJdswAAAsY"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 raspi4	2025-12-31 19:23:30 (5 months ago)	Fail2Ban Ban Triggered	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2025-12-01 05:57:19 (6 months ago)	(mod_security) mod_security (id:210730) triggered by 198.46.246.181 (198-46-246-181-host.colocrossin ... show more (mod_security) mod_security (id:210730) triggered by 198.46.246.181 (198-46-246-181-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 01 00:55:43.002777 2025] [security2:error] [pid 26090:tid 26454] [client 198.46.246.181:48417] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|ftp.kettlehill.net\|F\|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ftp.kettlehill.net"] [uri "/error/error.log"] [unique_id "aS0t3gqR0geke5MRGl4LdgAAAIg"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-18 08:00:50 (7 months ago)	\| Common web attack.	Hacking SQL Injection Web App Attack
🇺🇸 TPI-Abuse	2025-10-28 22:04:19 (7 months ago)	(mod_security) mod_security (id:210730) triggered by 198.46.246.181 (198-46-246-181-host.colocrossin ... show more (mod_security) mod_security (id:210730) triggered by 198.46.246.181 (198-46-246-181-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 28 18:04:11.754521 2025] [security2:error] [pid 19115:tid 19115] [client 198.46.246.181:41485] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.nbcnewsradio.com\|F\|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.nbcnewsradio.com"] [uri "/404.php.bak"] [unique_id "aQE92721LbhEuo-HE_fy6QAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-10-01 15:22:38 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 198.46.246.181 (198-46-246-181-host.colocrossin ... show more (mod_security) mod_security (id:210492) triggered by 198.46.246.181 (198-46-246-181-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 01 11:22:31.008812 2025] [security2:error] [pid 31612:tid 31734] [client 198.46.246.181:46657] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kettlehill.net"] [uri "/.env."] [unique_id "aN1HN_VYIT9TWn2lWzKCdAAAAQc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-09-22 20:02:43 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 198.46.246.181 (198-46-246-181-host.colocrossin ... show more (mod_security) mod_security (id:210492) triggered by 198.46.246.181 (198-46-246-181-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 22 16:02:37.150677 2025] [security2:error] [pid 22975:tid 22975] [client 198.46.246.181:41463] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.deandobkin.com"] [uri "/.env"] [unique_id "aNGrXXNEbVdnP9K3ZKP3ZwAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-08-05 20:56:23 (10 months ago)	(mod_security) mod_security (id:210730) triggered by 198.46.246.181 (198-46-246-181-host.colocrossin ... show more (mod_security) mod_security (id:210730) triggered by 198.46.246.181 (198-46-246-181-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 05 16:56:18.490639 2025] [security2:error] [pid 3603:tid 3603] [client 198.46.246.181:58583] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|mail.nbcnewsradio.com\|F\|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mail.nbcnewsradio.com"] [uri "/log/error.log"] [unique_id "aJJv8nwA7vvAk1cE6H_ZewAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-06-01 08:01:56 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 198.46.246.181 (198-46-246-181-host.colocrossin ... show more (mod_security) mod_security (id:210730) triggered by 198.46.246.181 (198-46-246-181-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 01 04:01:47.995904 2025] [security2:error] [pid 2476985:tid 2477039] [client 198.46.246.181:56943] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|mail.kettlehill.net\|F\|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mail.kettlehill.net"] [uri "/..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\windows\\\\win.ini"] [unique_id "aDwI64WY4ssUEn37NuVSGQAAAYM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-10-08 07:22:25 (1 year ago)	Malicious activity detected	Hacking Brute-Force
🇺🇸 oncord	2023-08-17 07:37:53 (2 years ago)	Form spam	Web Spam

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 20.55.42.210

🇳🇱 172.71.102.103

🇩🇪 172.69.151.193

🇸🇬 152.42.164.202

🇩🇪 69.5.169.197

🇧🇷 43.164.194.33

🇬🇧 35.203.210.118

🇯🇵 13.114.93.146

🇫🇷 5.39.49.245

🇺🇸 205.210.31.109

🇨🇦 172.70.80.22

🇫🇮 147.185.133.105

🇩🇪 94.16.17.140

🇷🇺 89.23.113.208

🇸🇪 83.233.149.204

🇺🇸 73.108.121.121

🇺🇸 66.132.186.223

🇰🇷 59.24.133.197

🇸🇬 43.172.198.27

🇺🇸 43.153.13.30