JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 181.54.0.58

181.54.0.58 was found in our database!

This IP was reported 31 times. Confidence of Abuse is 34%: ?

34%

ISP	Telmex Colombia S.A.
Usage Type	Fixed Line ISP
ASN	AS10620
Hostname(s)	static-ip-181540058.cable.net.co
Domain Name	telmexla.net.co
Country	🇨🇴 Colombia
City	Cali, Valle del Cauca Department

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 181.54.0.58

Whois 181.54.0.58

IP Abuse Reports for 181.54.0.58:

This IP address has been reported a total of 31 times from 21 distinct sources. 181.54.0.58 was first reported on June 15th 2023, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Vegascosmetics	2026-06-15 12:50:48 (2 days ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated redirect. Vegas Security	DDoS Attack Hacking Exploited Host
🇩🇪 Inamin	2026-06-15 03:08:06 (2 days ago)	181.54.0.58 - - [15/Jun/2026:09:41:25 +0800] "GET /index.php?hidemyself=1&limit=250&target=%E7%B5%A2 ... show more 181.54.0.58 - - [15/Jun/2026:09:41:25 +0800] "GET /index.php?hidemyself=1&limit=250&target=%E7%B5%A2%E7%80%AC%E7%B5%B5%E9%87%8C%2F%E6%9C%88%E3%82%88%E3%82%8A%E8%BF%91%E3%81%84%E5%A0%B4%E6%89%80%E3%81%A7&title=%E7%89%B9%E6%AE%8A%3A%E5%B7%B2%E9%80%A3%E7%B5%90%E7%9A%84%E6%9C%80%E8%BF%91%E8%AE%8A%E6%9B%B4 HTTP/2.0" 502 559 "-" "Mozilla/5.0 (compatible; MSIE 6.0; Windows NT 5.1; Trident/5.1)" 181.54.0.58 - - [15/Jun/2026:11:08:05 +0800] "GET /index.php?limit=100&title=%E7%89%B9%E6%AE%8A%3A%E9%80%A3%E5%85%A5%E9%A0%81%E9%9D%A2%2F%E7%9F%A2%E6%BE%A4%E3%81%AB%E3%81%93%2F%E4%BA%8C%E4%BA%BA%E3%81%A7%E3%81%AB%E3%81%A3%E3%81%93%E3%82%8A%E3%83%88%E3%83%A9%E3%83%99%E3%83%AB%E2%99%A1 HTTP/2.0" 499 0 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.0) AppleWebKit/535.11.7 (KHTML, like Gecko) Version/5.1 Safari/535.11.7" ... show less	Brute-Force
🇺🇸 kosada.com	2026-06-09 01:13:02 (1 week ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇮🇹 A000Z	2026-06-02 02:01:47 (2 weeks ago)	Fail2Ban: 181.54.0.58 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 ... show more Fail2Ban: 181.54.0.58 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.8782.1544 Mobile Safari/537.36 show less	Bad Web Bot
🇮🇹 A000Z	2026-05-30 01:01:41 (2 weeks ago)	Fail2Ban: 181.54.0.58 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 ... show more Fail2Ban: 181.54.0.58 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Linux; Android 8.0; Pixel 2 Build/OPD3.170816.012) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.7470.1508 Mobile Safari/537.36 show less	Bad Web Bot
🇩🇪 SMARTNET	2026-05-27 06:03:53 (3 weeks ago)	Aisuru(Mirai variant) DDoS \| Incident ID: eb7eac85-2c32-49f6-94ff-e8c25ad16083	DDoS Attack
🇹🇷 Threat.live	2026-05-15 12:55:16 (1 month ago)	Suspicious Connection Attempts	Brute-Force
🇺🇸 kosada.com	2026-03-21 11:17:38 (2 months ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-01-24 01:11:46 (4 months ago)	(mod_security) mod_security (id:210730) triggered by 181.54.0.58 (static-ip-181540058.cable.net.co): ... show more (mod_security) mod_security (id:210730) triggered by 181.54.0.58 (static-ip-181540058.cable.net.co): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 23 20:11:41.620856 2026] [security2:error] [pid 15780:tid 15780] [client 181.54.0.58:1525] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|criticalthinkingbook.com\|F\|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "criticalthinkingbook.com"] [uri "/WS_FTP.LOG"] [unique_id "aXQcTaVeO_85Bhxr2V0w7gAAABU"], referer: http://criticalthinkingbook.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇮🇩 hermawan	2026-01-17 21:24:35 (4 months ago)	[Sun Jan 18 04:24:36.107994 2026] [security2:error] [pid 113775:tid 139872701695680] [client 181.54. ... show more [Sun Jan 18 04:24:36.107994 2026] [security2:error] [pid 113775:tid 139872701695680] [client 181.54.0.58:1774] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.22.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "189"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: 7% found within SERVER_NAME: staklim-malang.info request_line = GET /index.php/profil/arsip-artikel?catid=480&id=1237%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-15-21-november-2016&start=180 HTTP/2.0 Request URI RAW = /index.php/profil/arsip-artikel?catid=480&id=1237%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-15-21-november-2016&start=18..."] [hostname "staklim-malang.info"] [uri "/index.php/profil/arsip-artikel"] [unique_id "aWv-FPew8YtDLox9 ... show less	Hacking Web App Attack
🇳🇱 EGP Abuse Dept	2026-01-12 00:15:47 (5 months ago)	Unauthorized connection to Telnet port 23	Port Scan Hacking
🇨🇭 Origon	2025-12-03 18:42:37 (6 months ago)	NOQUEUE - IP: 181.54.0.58 - Dec 3 19:42:37 plesk postfix/smtpd[2720690]: NOQUEUE: reject: RCPT from ... show more NOQUEUE - IP: 181.54.0.58 - Dec 3 19:42:37 plesk postfix/smtpd[2720690]: NOQUEUE: reject: RCPT from unknown[181.54.0.58]: 554 5.7.1 Service unavailable; Client host [181.54.0.58] blocked using dnsbl-1.uceprotect.net; IP 181.54.0.58 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=181.54.0.58; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<smtpclient.apple> show less	Email Spam
Anonymous	2025-11-20 07:52:31 (6 months ago)	scanning http requests from known botnet	Web App Attack
Anonymous	2025-11-12 18:08:18 (7 months ago)	SPAM EMAIL 181.54.0.58 (RBL_TRIGGER)	Email Spam
🇳🇱 soverin	2025-11-09 21:30:09 (7 months ago)	spam	Email Spam

Showing 1 to 15 of 31 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 184.168.21.211

🇷🇴 80.94.92.187

🇮🇳 2409:40f2:1183:79ca:a5f4:4014:e503:f6a8

🇮🇳 2405:201:5804:2068:51c2:3783:5b6b:fed9

🇧🇷 200.6.91.87

🇷🇺 188.234.242.48

🇫🇷 185.144.27.63

🇨🇳 180.76.105.165

🇳🇱 178.16.54.237

🇺🇸 173.255.223.89

🇩🇪 167.94.146.39

🇧🇩 103.146.150.98

🇫🇷 91.231.89.244

🇳🇱 81.19.216.93

🇳🇬 62.173.38.229

🇷🇺 46.39.254.221

🇳🇱 45.148.10.152

🇺🇸 216.73.216.94

🇲🇽 186.96.182.109

🇺🇸 172.105.128.12