JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

191.95.54.70

Recent Activity

Abuse Confidence Score

4% Caution

8 reports

6 reporters · latest 1 day ago

ISP: Colombia Móvil
Usage Type: Mobile ISP
ASN: AS13489
Hostname(s): dinamic-tigo-191-95-54-70.tigo.com.co
Domain Name: tigo.com.co
Country: 🇨🇴 Colombia
City: Bogota, Bogota D.C.

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

8 from 6 distinct reporters

First reported

February 12th 2024

Most recent report

1 day ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 1

Most common categories Web App Attack 1 Bad Web Bot 1 Brute-Force 1

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-11-13 12:32:59 UTC · (1 day ago)	(mod_security) mod_security (id:210350) triggered by 191.95.54.70 (Dinamic-Tigo-191-95-54-70.tigo.com.co): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 07:32:52.895356 2026] [security2:error] [pid 15435:tid 15 ... show more (mod_security) mod_security (id:210350) triggered by 191.95.54.70 (Dinamic-Tigo-191-95-54-70.tigo.com.co): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 07:32:52.895356 2026] [security2:error] [pid 15435:tid 15435] [client 191.95.54.70:60268] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|inspiredsidekick.com\|F\|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "inspiredsidekick.com"] [uri "/"] [unique_id "avcDdKua-W7kyreIch6SFwAAAAw"], referer: https://1seoservices.com/dir/results-focused-backlinks-101282 show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-21 05:30:28 UTC · (11 months ago)	scanning http requests from known botnet	Web App Attack
🇨🇴 conexcol	2024-12-23 22:13:47 UTC · (1 year ago)	(imapd) Failed IMAP login from 191.95.54.70 (CO/Colombia/dinamic-tigo-191-95-54-70.tigo.com.co): 10 in the last 3600 secs	Brute-Force Web App Attack
🇨🇴 conexcol	2024-10-16 21:01:43 UTC · (2 years ago)	(imapd) Failed IMAP login from 191.95.54.70 (CO/Colombia/dinamic-tigo-191-95-54-70.tigo.com.co): 10 in the last 3600 secs	Brute-Force Web App Attack
🇩🇪 thefaxe	2024-04-15 12:22:09 UTC · (2 years ago)	Apr 15 14:12:12 ka01 sshd[227261]: Invalid user supos from 191.95.54.70 port 46214 Apr 15 14:12:57 ka01 sshd[227318]: Invalid user ftpuser from 191.95.54.70 port 22165 Apr 15 14:17:32 ka01 sshd[228076]: Invalid user user from 191.95.54.70 port 62299 ... show more Apr 15 14:12:12 ka01 sshd[227261]: Invalid user supos from 191.95.54.70 port 46214 Apr 15 14:12:57 ka01 sshd[227318]: Invalid user ftpuser from 191.95.54.70 port 22165 Apr 15 14:17:32 ka01 sshd[228076]: Invalid user user from 191.95.54.70 port 62299 Apr 15 14:19:06 ka01 sshd[228170]: Invalid user kian from 191.95.54.70 port 62328 Apr 15 14:19:48 ka01 sshd[228203]: Invalid user scan from 191.95.54.70 port 21211 Apr 15 14:21:18 ka01 sshd[228800]: Invalid user anirudh from 191.95.54.70 port 46227 Apr 15 14:22:08 ka01 sshd[228858]: Invalid user tomcat6 from 191.95.54.70 port 22157 show less	Brute-Force SSH
🇺🇸 bigscoots.com	2024-04-15 11:18:50 UTC · (2 years ago)	191.95.54.70 (CO/Colombia/Dinamic-Tigo-191-95-54-70.tigo.com.co), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Apr 15 11:17:44 23260 sshd[18318]: pam_unix(sshd:auth): authen ... show more 191.95.54.70 (CO/Colombia/Dinamic-Tigo-191-95-54-70.tigo.com.co), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Apr 15 11:17:44 23260 sshd[18318]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.154.30 user=root Apr 15 11:17:46 23260 sshd[18318]: Failed password for root from 134.209.154.30 port 54110 ssh2 Apr 15 11:18:41 23260 sshd[18388]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.219.53 user=root Apr 15 11:17:29 23260 sshd[18316]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.95.54.70 user=root Apr 15 11:17:31 23260 sshd[18316]: Failed password for root from 191.95.54.70 port 21311 ssh2 IP Addresses Blocked: 134.209.154.30 (IN/India/-) 128.199.219.53 (SG/Singapore/-) show less	Brute-Force SSH
🇩🇪 opcenter	2024-04-15 09:43:08 UTC · (2 years ago)	Apr 15 REMOVED sshd[4163304]: Failed password for invalid user rutk from 191.95.54.70 port 62273 ssh2 Apr 15 REMOVED sshd[4165022]: Invalid user ynii from 191.95.54.70 port 62321 Apr 15 REMOVED sshd[4165022]: pam_unix(sshd:auth): authenti ... show more Apr 15 REMOVED sshd[4163304]: Failed password for invalid user rutk from 191.95.54.70 port 62273 ssh2 Apr 15 REMOVED sshd[4165022]: Invalid user ynii from 191.95.54.70 port 62321 Apr 15 REMOVED sshd[4165022]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.95.54.70 show less	Brute-Force SSH
🇨🇴 conexcol	2024-02-12 16:09:45 UTC · (2 years ago)	(imapd) Failed IMAP login from 191.95.54.70 (CO/Colombia/dinamic-tigo-191-95-54-70.tigo.com.co): 10 in the last 3600 secs	Brute-Force Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇿 185.87.121.140

🇨🇭 179.43.153.18

🇺🇸 172.174.17.234

🇻🇳 103.177.111.164

🇩🇪 69.5.169.178

🇺🇸 192.119.82.85

🇰🇷 175.198.18.3

🇵🇱 172.64.200.138

🇷🇴 92.118.39.78

🇫🇷 89.117.52.135

🇷🇺 185.15.61.102

🇧🇷 172.71.234.88

🇸🇮 130.12.182.91

🇵🇰 124.29.194.226

🇩🇪 89.1.215.129

🇫🇮 35.228.125.138

🇨🇦 35.203.57.108

🇺🇸 18.116.101.220

🇲🇽 187.190.35.163

🇺🇸 89.187.180.30