JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 181.59.148.135

181.59.148.135 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 26%: ?

26%

ISP	Telmex Colombia S.A.
Usage Type	Fixed Line ISP
ASN	AS10620
Domain Name	telmexla.net.co
Country	🇨🇴 Colombia
City	Soacha, Cundinamarca

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 181.59.148.135

Whois 181.59.148.135

IP Abuse Reports for 181.59.148.135:

This IP address has been reported a total of 15 times from 7 distinct sources. 181.59.148.135 was first reported on August 31st 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 security.rdmc.fr	2026-10-20 23:47:19 (1 day ago)	Port Scan Attack proto:TCP src:29280 dst:23	Port Scan
Anonymous	2026-10-15 01:41:26 (1 week ago)	denied Telnet access attempt. destination port 23.	Port Scan Brute-Force
🇺🇸 鬼影233	2026-09-24 20:49:30 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-24 06:34:23 (3 weeks ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-24 05:37:19 (4 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-21 13:43:25 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-20 04:53:23 (1 month ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-17 15:10:49 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-09-16 19:46:44 (1 month ago)	(mod_security) mod_security (id:210350) triggered by 181.59.148.135 (dynamic-ip-18159148135.cable.ne ... show more (mod_security) mod_security (id:210350) triggered by 181.59.148.135 (dynamic-ip-18159148135.cable.net.co): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 15:46:39.898944 2026] [security2:error] [pid 26972:tid 26972] [client 181.59.148.135:4448] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|gildemello.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gildemello.com"] [uri "/"] [unique_id "aqryH5qrARaFxKWEvhAM9QAAAAU"], referer: https://seoauditchecker.space/dir/premium-link-building-81831 show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 鬼影233	2026-09-09 22:17:13 (1 month ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-01 09:20:45 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 show less	Bad Web Bot
🇩🇪 LRob	2026-08-06 13:55:07 (2 months ago)	CrowdSec: REPEAT OFFENDER (previously banned, came back) - distributed L7 HTTP flood on WordPress 'T ... show more CrowdSec: REPEAT OFFENDER (previously banned, came back) - distributed L7 HTTP flood on WordPress 'The Events Calendar' AJAX endpoints (request_format~json) - DDoS \| req: /calendrier-2/action~agenda/page_offset~1/time_limit~1764370800/cat_ids~136,152,140/tag_ids~210,701,702,474,617/request_format~json/ \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36 show less	DDoS Attack Web App Attack
🇩🇪 EGP Abuse Dept	2026-07-14 00:57:22 (3 months ago)	Scanning for port/service exploits on tpc-027.mach3builders.nl	Port Scan Hacking
🇺🇸 TPI-Abuse	2026-03-14 00:04:25 (7 months ago)	(mod_security) mod_security (id:210831) triggered by 181.59.148.135 (dynamic-ip-18159148135.cable.ne ... show more (mod_security) mod_security (id:210831) triggered by 181.59.148.135 (dynamic-ip-18159148135.cable.net.co): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 13 20:04:16.848082 2026] [security2:error] [pid 24070:tid 24070] [client 181.59.148.135:21803] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|arroceraomoa.com\|F\|4"] [data "Gecko/25"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "arroceraomoa.com"] [uri "/recetas/pupusas-de-arroz/"] [unique_id "abSmAHex-GZ-Z6_q5wP6cQAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 exxos	2025-08-31 04:03:01 (1 year ago)	http-no-verb	Hacking

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2604:a940:302:118:0:42::

🇮🇳 2400:6180:100:d0:0:1:4774:c001

🇺🇸 216.180.246.155

🇧🇪 198.235.24.246

🇺🇸 195.184.76.226

🇨🇴 190.0.63.226

🇧🇷 187.50.194.182

🇧🇷 186.251.198.189

🇲🇽 170.78.211.81

🇫🇮 147.185.133.117

🇬🇧 89.37.172.153

🇱🇹 77.90.185.20

🇮🇶 65.20.204.254

🇧🇷 45.234.105.32

🇻🇳 45.119.81.245

🇮🇳 43.225.192.26

🇺🇸 40.119.45.117

🇹🇭 27.254.192.185

🇺🇸 2604:a940:302:118:0:26::

🇨🇳 219.139.62.186