JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

167.249.55.179

Recent Activity

Abuse Confidence Score

11% Caution

19 reports

13 reporters · latest 19 hours ago

ISP: TECNET ARGENTINA S.A.
Usage Type: Fixed Line ISP
ASN: AS264738
Domain Name: tecnetmza.com.ar
Country: 🇦🇷 Argentina
City: Rio Gallegos, Santa Cruz

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

19 from 13 distinct reporters

First reported

December 29th 2025

Most recent report

19 hours ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 2

Most common categories Web App Attack 1 Bad Web Bot 1

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 ersei.net	2026-11-09 03:27:46 UTC · (19 hours ago)	Web app exploiting	Web App Attack
🇺🇸 鬼影233	2026-10-02 07:58:11 UTC · (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36	Bad Web Bot
Anonymous	2026-08-06 01:34:14 UTC · (3 months ago)	Attack detected: 167.249.55.179 [2026-08-06] Categories: 18 --- xmlrpc abuse (274 hits) --- 167.249.55.179 - - [04/Jun/2026:16:51:54 +0000] "POST /xmlrpc.php HTTP/1.1" 403 3045 "-" "WordPress.com; https://wordpress.com" 167.249.55.179 - - [04/Jun/202 ... show more Attack detected: 167.249.55.179 [2026-08-06] Categories: 18 --- xmlrpc abuse (274 hits) --- 167.249.55.179 - - [04/Jun/2026:16:51:54 +0000] "POST /xmlrpc.php HTTP/1.1" 403 3045 "-" "WordPress.com; https://wordpress.com" 167.249.55.179 - - [04/Jun/2026:16:52:05 +0000] "POST /xmlrpc.php HTTP/1.1" 403 3045 "-" "Jetpack by WordPress.com" 167.249.55.179 - - [04/Jun/2026:16:52:15 +0000] "POST /xmlrpc.php HTTP/1.1" 403 3046 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.2)" 167.249.55.179 - - [04/Jun/2026:16:52:26 +0000] "POST /xmlrpc.php HTTP/1.1" 403 3044 "-" "WordPress.com; https://wordpress.com" 167.249.55.179 - - [04/Jun/2026:16:52:37 +0000] "POST /xmlrpc.php HTTP/1.1" 403 3046 "-" "WordPress.com; https://wordpress.com" show less	Brute-Force
Anonymous	2026-07-22 00:43:31 UTC · (3 months ago)	Attack detected: 167.249.55.179 [2026-07-22] Categories: 18 --- xmlrpc abuse (274 hits) --- 167.249.55.179 - - [04/Jun/2026:16:51:54 +0000] "POST /xmlrpc.php HTTP/1.1" 403 3045 "-" "WordPress.com; https://wordpress.com" 167.249.55.179 - - [04/Jun/202 ... show more Attack detected: 167.249.55.179 [2026-07-22] Categories: 18 --- xmlrpc abuse (274 hits) --- 167.249.55.179 - - [04/Jun/2026:16:51:54 +0000] "POST /xmlrpc.php HTTP/1.1" 403 3045 "-" "WordPress.com; https://wordpress.com" 167.249.55.179 - - [04/Jun/2026:16:52:05 +0000] "POST /xmlrpc.php HTTP/1.1" 403 3045 "-" "Jetpack by WordPress.com" 167.249.55.179 - - [04/Jun/2026:16:52:15 +0000] "POST /xmlrpc.php HTTP/1.1" 403 3046 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.2)" 167.249.55.179 - - [04/Jun/2026:16:52:26 +0000] "POST /xmlrpc.php HTTP/1.1" 403 3044 "-" "WordPress.com; https://wordpress.com" 167.249.55.179 - - [04/Jun/2026:16:52:37 +0000] "POST /xmlrpc.php HTTP/1.1" 403 3046 "-" "WordPress.com; https://wordpress.com" show less	Brute-Force
🇺🇸 TPI-Abuse	2026-06-05 17:32:31 UTC · (5 months ago)	(mod_security) mod_security (id:240335) triggered by 167.249.55.179 (red.167.249.55.179.ssservicios.com.ar): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 13:32:23.614776 2026] [security2:error] [pid 15708:tid ... show more (mod_security) mod_security (id:240335) triggered by 167.249.55.179 (red.167.249.55.179.ssservicios.com.ar): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 13:32:23.614776 2026] [security2:error] [pid 15708:tid 15708] [client 167.249.55.179:20358] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 167.249.55.179 (+1 hits since last alert)\|smoothiessoupssalads.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "smoothiessoupssalads.com"] [uri "/xmlrpc.php"] [unique_id "aiMIJ32_cYYfK2OtrgqZPwAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-05 14:24:18 UTC · (5 months ago)	Attac	Brute-Force
🇫🇷 SpaceHost-Server	2026-06-04 22:27:47 UTC · (5 months ago)		Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-04 19:17:17 UTC · (5 months ago)	(mod_security) mod_security (id:240335) triggered by 167.249.55.179 (red.167.249.55.179.ssservicios.com.ar): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 15:17:09.209567 2026] [security2:error] [pid 4670:tid 4 ... show more (mod_security) mod_security (id:240335) triggered by 167.249.55.179 (red.167.249.55.179.ssservicios.com.ar): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 15:17:09.209567 2026] [security2:error] [pid 4670:tid 4670] [client 167.249.55.179:32946] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 167.249.55.179 (+1 hits since last alert)\|robotsinme.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "robotsinme.org"] [uri "/xmlrpc.php"] [unique_id "aiHPNYsw1DWlB-kcM3G5WAAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-04 04:51:20 UTC · (5 months ago)	(mod_security) mod_security (id:240335) triggered by 167.249.55.179 (red.167.249.55.179.ssservicios.com.ar): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 00:51:17.460333 2026] [security2:error] [pid 17647:tid ... show more (mod_security) mod_security (id:240335) triggered by 167.249.55.179 (red.167.249.55.179.ssservicios.com.ar): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 00:51:17.460333 2026] [security2:error] [pid 17647:tid 17647] [client 167.249.55.179:11094] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 167.249.55.179 (+1 hits since last alert)\|kaylamaclaincounseling.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "kaylamaclaincounseling.com"] [uri "/xmlrpc.php"] [unique_id "aiEERXSHpwK1N7cLpUPr9gAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-03 20:40:13 UTC · (5 months ago)	Attac	Brute-Force
Anonymous	2026-06-03 19:58:50 UTC · (5 months ago)	[ns41.kdns.gr] httpd-xmlrpc-post: sites=medisto.gr; logs=/var/log/httpd/domains/medisto.gr.log; samples=/xmlrpc.php	Brute-Force Web App Attack
🇩🇪 yvoictra	2026-06-03 19:26:19 UTC · (5 months ago)	167.249.55.179 - - [03/Jun/2026:21:25:26 +0200] "POST /xmlrpc.php HTTP/1.1" 200 416 "-" "Jetpack/12.0; WordPress/6.1; http://site87445881.com" 167.249.55.179 - - [03/Jun/2026:21:25:35 +0200] "POST /xmlrpc.php HTTP/1.1" 200 416 "-" "Jetpack/12.1; Word ... show more 167.249.55.179 - - [03/Jun/2026:21:25:26 +0200] "POST /xmlrpc.php HTTP/1.1" 200 416 "-" "Jetpack/12.0; WordPress/6.1; http://site87445881.com" 167.249.55.179 - - [03/Jun/2026:21:25:35 +0200] "POST /xmlrpc.php HTTP/1.1" 200 416 "-" "Jetpack/12.1; WordPress/6.2; http://site24277964.com" 167.249.55.179 - - [03/Jun/2026:21:25:46 +0200] "POST /xmlrpc.php HTTP/1.1" 200 416 "-" "WordPress.com; https://wordpress.com" 167.249.55.179 - - [03/Jun/2026:21:25:57 +0200] "POST /xmlrpc.php HTTP/1.1" 200 416 "-" "Jetpack/12.1; WordPress/6.2; http://site59880452.com" 167.249.55.179 - - [03/Jun/2026:21:26:08 +0200] "POST /xmlrpc.php HTTP/1.1" 200 416 "-" "Jetpack/12.1; WordPress/6.1; http://site50183049.com" 167.249.55.179 - - [03/Jun/2026:21:26:18 +0200] "POST /xmlrpc.php HTTP/1.1" 200 416 "-" "WordPress.com; https://wordpress.com" ... show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-03 16:52:11 UTC · (5 months ago)	(mod_security) mod_security (id:240335) triggered by 167.249.55.179 (red.167.249.55.179.ssservicios.com.ar): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 12:52:06.209531 2026] [security2:error] [pid 6969:tid 6 ... show more (mod_security) mod_security (id:240335) triggered by 167.249.55.179 (red.167.249.55.179.ssservicios.com.ar): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 12:52:06.209531 2026] [security2:error] [pid 6969:tid 6969] [client 167.249.55.179:30090] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 167.249.55.179 (+1 hits since last alert)\|lightningbug.farm\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "lightningbug.farm"] [uri "/xmlrpc.php"] [unique_id "aiBbth_HQivNDk8AHt6ZVwAAACA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TAY	2026-06-03 16:48:44 UTC · (5 months ago)	167.249.55.179 - - [04/Jun/2026:00:48:23 +0800] "POST /xmlrpc.php HTTP/1.1" 200 4398 "-" "WordPress.com; https://wordpress.com" 167.249.55.179 - - [04/Jun/2026:00:48:33 +0800] "POST /xmlrpc.php HTTP/1.1" 200 4398 "-" "Jetpack by WordPress.com" 167.24 ... show more 167.249.55.179 - - [04/Jun/2026:00:48:23 +0800] "POST /xmlrpc.php HTTP/1.1" 200 4398 "-" "WordPress.com; https://wordpress.com" 167.249.55.179 - - [04/Jun/2026:00:48:33 +0800] "POST /xmlrpc.php HTTP/1.1" 200 4398 "-" "Jetpack by WordPress.com" 167.249.55.179 - - [04/Jun/2026:00:48:44 +0800] "POST /xmlrpc.php HTTP/1.1" 200 4398 "-" "Jetpack/13.0; WordPress/6.4; http://site68879571.com" ... show less	Brute-Force
🇩🇪 Martin Lundstrom	2026-06-03 15:40:11 UTC · (5 months ago)	https://www.eagleeye-intelligence.com — WordPress attack. Automatically detected and blocked.	Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 147.185.132.153

🇦🇷 143.105.135.26

🇳🇱 93.123.109.9

🇳🇱 91.148.245.81

🇺🇸 66.132.172.150

🇺🇸 2602:80d:1007::d7

🇰🇷 220.116.117.213

🇳🇱 213.209.159.241

🇨🇭 185.156.175.171

🇩🇪 161.120.215.74

🇩🇪 139.59.136.184

🇻🇳 113.161.149.20

🇮🇳 103.84.130.68

🇬🇧 64.227.32.66

🇳🇱 45.148.10.157

🇬🇧 35.203.211.125

🇷🇺 31.173.86.134

🇨🇳 222.188.111.238

🇧🇷 205.210.31.220

🇳🇱 195.178.110.204