JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 185.187.180.54

185.187.180.54 was found in our database!

This IP was reported 38 times. Confidence of Abuse is 70%: ?

70%

ISP	LYNTIA NETWORKS S.A.
Usage Type	Fixed Line ISP
ASN	AS8903
Domain Name	lyntia.com
Country	🇪🇸 Spain
City	Madrid, Madrid

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 185.187.180.54

Whois 185.187.180.54

IP Abuse Reports for 185.187.180.54:

This IP address has been reported a total of 38 times from 27 distinct sources. 185.187.180.54 was first reported on January 16th 2026, and the most recent report was 29 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 HJ5Ss4Ju	2026-10-27 10:17:54 (29 minutes ago)	Wordfence firewall block	Web App Attack
🇫🇷 tecnicorioja	2026-10-25 23:00:43 (1 day ago)	wp-login attack [25/Oct/2026:03:40:16	Brute-Force Web App Attack
🇩🇪 big-cloud.nl	2026-10-24 04:13:42 (3 days ago)	Try to access /xmlrpc.php	Web App Attack
🇩🇪 LRob	2026-10-23 16:47:26 (3 days ago)	Web exploit attempt \| method: POST, GET \| path: /wp-login.php \| ua: Mozilla/5.0 (X11; Linux x86_64) ... show more Web exploit attempt \| method: POST, GET \| path: /wp-login.php \| ua: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 \| 2026-10-23 16:47 UTC show less	Hacking Web App Attack
🇮🇹 CoreTech srl	2026-10-23 02:13:58 (4 days ago)	cloudlinux2 fail2ban: 2026-10-23 04:09:10,200 fail2ban.filter [1488]: INFO [plesk-wordpre ... show more cloudlinux2 fail2ban: 2026-10-23 04:09:10,200 fail2ban.filter [1488]: INFO [plesk-wordpress] Found 45.132.227.190 - 2026-10-23 04:09:08cloudlinux2 fail2ban: 2026-10-23 04:09:34,120 fail2ban.filter [1488]: INFO [plesk-modsecurity] Found 24.150.86.222 - 2026-10-23 04:09:34cloudlinux2 fail2ban: 2026-10-23 04:09:50,304 fail2ban.filter [1488]: INFO [plesk-wordpress] Found 209.87.169.51 - 2026-10-23 04:09:49cloudlinux2 fail2ban: 2026-10-23 04:09:59,141 fail2ban.filter [1488]: INFO [plesk-wordpress] Found 45.118.69.83 - 2026-10-23 04:09:56cloudlinux2 fail2ban: 2026-10-23 04:10:09,913 fail2ban.filter [1488]: INFO [plesk-wordpress] Found 45.230.33.118 - 2026-10-23 04:10:09cloudlinux2 fail2ban: 2026-10-23 04:10:39,181 fail2ban.filter [1488]: INFO [plesk-modsecurity] Found 35.240.132.253 - 2026-10-23 04:10:39cloudlinux2 fail2ban: 2026-10-23 04:10:39,197 fail2ban.filter [1488]: INFO [plesk-modsecurity] Found 35.240.132.253 - 2026-10-23 04:10:39c show less	Web App Attack
🇩🇪 LRob	2026-10-20 03:35:30 (1 week ago)	WordPress login brute force \| path: /wp-login.php \| ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) Ap ... show more WordPress login brute force \| path: /wp-login.php \| ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 \| 2026-10-20 03:35 UTC show less	Brute-Force Web App Attack
🇩🇪 neckaralb-admin.de	2026-10-15 08:55:07 (1 week ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
Anonymous	2026-10-13 05:39:48 (2 weeks ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇩🇪 ger-stg-sifi1	2026-10-11 08:17:46 (2 weeks ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
Anonymous	2026-10-11 03:29:25 (2 weeks ago)	WordPress Brute Force	Brute-Force
🇲🇽 octageeks.com	2026-10-10 04:18:15 (2 weeks ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇬🇧 Mendip_Defender	2026-10-09 08:58:59 (2 weeks ago)	[09/Oct/2026:09:58:58.315271 +0100] asis0jap0faG0lsRbo1Y4QAAAIA 185.187.180.54 52250 188.246.206.60 ... show more [09/Oct/2026:09:58:58.315271 +0100] asis0jap0faG0lsRbo1Y4QAAAIA 185.187.180.54 52250 188.246.206.60 7081 [09/Oct/2026:09:59:00.096647 +0100] asis1Dap0faG0lsRbo1Y4gAAAI0 185.187.180.54 52260 188.246.206.60 7081 ... show less	Brute-Force
🇺🇸 TPI-Abuse	2026-10-09 02:46:48 (2 weeks ago)	(mod_security) mod_security (id:225170) triggered by 185.187.180.54 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 185.187.180.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 22:46:45.724818 2026] [security2:error] [pid 14067:tid 14071] [client 185.187.180.54:49414] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|grupojdg.neotienda.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "grupojdg.neotienda.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "ashVlf5IcjALmwcezZCZcwAAAEA"] show less	Brute-Force Bad Web Bot Web App Attack
🇲🇽 octageeks.com	2026-09-30 04:16:04 (3 weeks ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇺🇸 TPI-Abuse	2026-09-29 10:51:16 (3 weeks ago)	(mod_security) mod_security (id:225170) triggered by 185.187.180.54 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 185.187.180.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 06:51:11.879556 2026] [security2:error] [pid 30141:tid 30141] [client 185.187.180.54:34366] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|support.leonardodecaprio.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "support.leonardodecaprio.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aruYHy8N8LiryYWMbuhcJQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 38 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 178.178.194.151

🇻🇳 152.32.163.183

🇩🇪 178.104.243.191

🇳🇱 164.92.155.32

🇩🇪 161.35.206.208

🇩🇪 151.243.11.49

🇺🇸 147.185.132.10

🇺🇸 143.198.161.227

🇳🇱 138.226.239.21

🇺🇸 129.121.115.239

🇺🇸 129.121.76.151

🇻🇳 117.2.125.84

🇨🇳 111.21.60.158

🇲🇦 105.77.202.159

🇧🇩 103.159.2.113

🇵🇰 103.49.139.116

🇷🇺 82.151.97.152

🇻🇳 79.108.220.136

🇩🇪 68.183.213.71

🇸🇬 43.98.162.26