JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 181.55.22.254

181.55.22.254 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 15%: ?

15%

ISP	Telmex Colombia S.A.
Usage Type	Fixed Line ISP
ASN	AS10620
Hostname(s)	dynamic-ip-18155022254.cable.net.co
Domain Name	telmexla.net.co
Country	🇨🇴 Colombia
City	Bucaramanga, Santander Department

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 181.55.22.254

Whois 181.55.22.254

IP Abuse Reports for 181.55.22.254:

This IP address has been reported a total of 11 times from 7 distinct sources. 181.55.22.254 was first reported on August 29th 2022, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-10-10 23:34:07 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 181.55.22.254 (dynamic-ip-18155022254.cable.net ... show more (mod_security) mod_security (id:225170) triggered by 181.55.22.254 (dynamic-ip-18155022254.cable.net.co): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 19:34:00.333351 2026] [security2:error] [pid 16415:tid 16415] [client 181.55.22.254:5921] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|pcga.golf\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "pcga.golf"] [uri "/wp-json/wp/v2/users/me"] [unique_id "asrLaD10eLlXkq_4Jdt6wgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-26 15:50:40 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 181.55.22.254 (dynamic-ip-18155022254.cable.net ... show more (mod_security) mod_security (id:210492) triggered by 181.55.22.254 (dynamic-ip-18155022254.cable.net.co): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 11:50:34.325114 2026] [security2:error] [pid 18923:tid 18923] [client 181.55.22.254:6874] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "coretherapyassoc.com.praemiumtech.com"] [uri "/store/.env.development"] [unique_id "arfpyp_DlWv5Ahp-LEMnMwAAABs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 鬼影233	2026-09-20 15:21:34 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-20 03:47:33 (1 month ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇫🇷 Sklurk	2026-09-12 03:49:13 (1 month ago)	Web App Attack	Web App Attack
🇩🇪 LRob	2026-08-19 02:32:55 (2 months ago)	L7 DDoS: distributed flood on a shop's faceted search — automated requests to search/sort URLs, one ... show more L7 DDoS: distributed flood on a shop's faceted search — automated requests to search/sort URLs, one or two per address from thousands of addresses, no page assets loaded \| path: /29-meilleur-velo-entre-1000-et-2000-euros \| query: order=product.name.desc&q=Type+de+v%C3%A9lo-Musculaire-%C3%89lectrique&resultsPerPage=99999 show less	DDoS Attack Web App Attack
Anonymous	2026-08-03 18:24:30 (2 months ago)	denied traffic to a honeypot network. destination port 23.	Port Scan Hacking
Anonymous	2026-08-03 18:04:52 (2 months ago)	denied Telnet access attempt. destination port 23.	Port Scan Brute-Force
🇮🇹 VHosting	2025-12-24 02:40:17 (9 months ago)	Detected attack and reported by a human	DDoS Attack Brute-Force Bad Web Bot Exploited Host Web App Attack SSH
🇸🇬 Sean64	2022-08-30 16:30:53 (4 years ago)	Aug 31 04:30:52 sean postfix/smtpd[1537860]: NOQUEUE: reject: RCPT from unknown[181.55.22.254]: 554 ... show more Aug 31 04:30:52 sean postfix/smtpd[1537860]: NOQUEUE: reject: RCPT from unknown[181.55.22.254]: 554 5.7.1 Service unavailable; Client host [181.55.22.254] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/181.55.22.254; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<dynamic-ip-18155022254.cable.net.co> ... show less	Email Spam Brute-Force
🇸🇬 Sean64	2022-08-29 20:13:03 (4 years ago)	Aug 30 08:12:37 sean postfix/smtpd[1393084]: NOQUEUE: reject: RCPT from unknown[181.55.22.254]: 554 ... show more Aug 30 08:12:37 sean postfix/smtpd[1393084]: NOQUEUE: reject: RCPT from unknown[181.55.22.254]: 554 5.7.1 <[email protected]>: Sender address rejected: Access denied; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<dynamic-ip-18155022254.cable.net.co> Aug 30 08:12:53 sean postfix/smtpd[1394105]: NOQUEUE: reject: RCPT from unknown[181.55.22.254]: 554 5.7.1 <[email protected]>: Sender address rejected: Access denied; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<dynamic-ip-18155022254.cable.net.co> Aug 30 08:13:02 sean postfix/smtpd[1394105]: NOQUEUE: reject: RCPT from unknown[181.55.22.254]: 554 5.7.1 <[email protected]>: Sender address rejected: Access denied; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<dynamic-ip-18155022254.cable.net.co> ... show less	Email Spam Brute-Force

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2a03:2880:15ff:52::

🇰🇷 218.155.74.4

🇺🇸 165.154.255.63

🇫🇷 140.248.41.27

🇹🇼 110.25.107.172

🇩🇪 109.160.32.144

🇫🇷 91.196.152.196

🇫🇷 85.217.140.50

🇳🇱 45.134.225.48

🇨🇳 43.226.39.182

🇬🇧 35.203.211.87

🇺🇸 31.134.2.84

🇺🇸 216.180.246.209

🇲🇽 201.141.110.187

🇺🇸 195.184.76.187

🇺🇸 153.75.83.180

🇨🇳 111.21.60.158

🇺🇸 103.143.231.24

🇯🇴 86.108.18.34

🇮🇶 65.20.189.52