JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 181.55.21.191

181.55.21.191 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 4%: ?

ISP	Telmex Colombia S.A.
Usage Type	Fixed Line ISP
ASN	AS10620
Hostname(s)	dynamic-ip-18155021191.cable.net.co
Domain Name	telmexla.net.co
Country	🇨🇴 Colombia
City	Bucaramanga, Santander Department

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 181.55.21.191

Whois 181.55.21.191

IP Abuse Reports for 181.55.21.191:

This IP address has been reported a total of 21 times from 9 distinct sources. 181.55.21.191 was first reported on November 27th 2020, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-10-25 10:14:43 (1 day ago)	(mod_security) mod_security (id:210350) triggered by 181.55.21.191 (dynamic-ip-18155021191.cable.net ... show more (mod_security) mod_security (id:210350) triggered by 181.55.21.191 (dynamic-ip-18155021191.cable.net.co): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 06:14:36.896221 2026] [security2:error] [pid 17439:tid 17439] [client 181.55.21.191:2025] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|cbcfargo.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cbcfargo.com"] [uri "/resources/promise/true_joy.pdf"] [unique_id "at3WjKvJZG339R7prnEI7QAAABQ"], referer: https://cbcfargo.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-23 14:10:29 (3 days ago)	(mod_security) mod_security (id:210350) triggered by 181.55.21.191 (dynamic-ip-18155021191.cable.net ... show more (mod_security) mod_security (id:210350) triggered by 181.55.21.191 (dynamic-ip-18155021191.cable.net.co): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 10:10:25.652290 2026] [security2:error] [pid 9857:tid 9857] [client 181.55.21.191:2038] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|deborahbein.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "deborahbein.com"] [uri "/artblog/"] [unique_id "attq0SzCbuYV-6fxhmTpKQAAAA0"], referer: https://sdanewyorkminute.blogspot.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-22 23:14:10 (4 days ago)	(mod_security) mod_security (id:210350) triggered by 181.55.21.191 (dynamic-ip-18155021191.cable.net ... show more (mod_security) mod_security (id:210350) triggered by 181.55.21.191 (dynamic-ip-18155021191.cable.net.co): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 19:14:05.931895 2026] [security2:error] [pid 17740:tid 17762] [client 181.55.21.191:3519] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|dulemba.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dulemba.com"] [uri "/"] [unique_id "atqYvZSGYy_YKfhadA-NoQAAABE"], referer: https://fiberbubble.blogspot.com/2009/09/little-more-thankful.html show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 LRob	2026-08-20 00:45:54 (2 months ago)	L7 DDoS: distributed flood on a shop's faceted search — automated requests to search/sort URLs, one ... show more L7 DDoS: distributed flood on a shop's faceted search — automated requests to search/sort URLs, one or two per address from thousands of addresses, no page assets loaded \| path: /17-vtt \| query: q=Famille-Gambler-Zesty-Oiz show less	DDoS Attack Web App Attack
🇩🇪 FeG Deutschland	2026-02-19 23:18:42 (8 months ago)	Mail: - login with unknown user - bruteforce	Brute-Force
🇺🇸 xmission.com	2025-07-23 01:59:13 (1 year ago)	Blocked 12 connection attempts due to RBL reputation in the past hour.	Email Spam
🇳🇱 Cloud86 B.V.	2025-07-22 23:40:02 (1 year ago)	Email spam	Email Spam
🇳🇱 Cloud86 B.V.	2025-07-19 23:05:01 (1 year ago)	Email spam	Email Spam
🇲🇾 syokadmin	2021-05-07 21:17:32 (5 years ago)	(mod_security) mod_security (id:949110) triggered by 181.55.21.191 (CO/Colombia/dynamic-ip-181550211 ... show more (mod_security) mod_security (id:949110) triggered by 181.55.21.191 (CO/Colombia/dynamic-ip-18155021191.cable.net.co): 1 in the last 3600 secs show less	Brute-Force
🇲🇾 syokadmin	2021-05-04 22:52:41 (5 years ago)	(mod_security) mod_security (id:949110) triggered by 181.55.21.191 (CO/Colombia/dynamic-ip-181550211 ... show more (mod_security) mod_security (id:949110) triggered by 181.55.21.191 (CO/Colombia/dynamic-ip-18155021191.cable.net.co): 1 in the last 3600 secs show less	Brute-Force
🇳🇱 computerdoc	2021-05-03 17:24:48 (5 years ago)	xmlrpc attack	DDoS Attack Web App Attack
🇳🇱 computerdoc	2021-05-02 00:41:34 (5 years ago)	xmlrpc attack	DDoS Attack Web App Attack
🇬🇧 sdos.es	2021-05-01 14:12:00 (5 years ago)	"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:<?xml version ... show more "XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:<?xml version: <?xml version" show less	Web App Attack
🇲🇾 syokadmin	2021-04-28 18:50:24 (5 years ago)	(mod_security) mod_security (id:949110) triggered by 181.55.21.191 (CO/Colombia/dynamic-ip-181550211 ... show more (mod_security) mod_security (id:949110) triggered by 181.55.21.191 (CO/Colombia/dynamic-ip-18155021191.cable.net.co): 1 in the last 3600 secs show less	Brute-Force
🇬🇧 sdos.es	2021-04-28 15:18:18 (5 years ago)	"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:<?xml version ... show more "XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:<?xml version: <?xml version" show less	Web App Attack

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 209.38.214.95

🇮🇩 182.253.94.77

🇮🇶 169.224.100.36

🇨🇳 111.61.176.243

🇸🇪 104.222.169.254

🇺🇸 66.132.172.204

🇳🇱 45.156.128.64

🇺🇸 34.45.199.234

🇺🇸 24.208.184.234

🇷🇺 193.24.123.120

🇵🇪 190.12.83.134

🇯🇲 162.216.163.230

🇸🇪 104.222.169.217

🇸🇪 104.222.169.24

🇲🇦 102.102.107.67

🇪🇸 45.134.91.146

🇺🇸 37.19.65.210

🇫🇮 34.88.16.99

🇺🇸 20.83.44.180

🇷🇴 2.57.121.112