JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 200.55.245.155

200.55.245.155 was found in our database!

This IP was reported 141 times. Confidence of Abuse is 56%: ?

56%

ISP	AX INTERNET SA
Usage Type	Fixed Line ISP
ASN	AS27988
Domain Name	axinternet.com.br
Country	🇦🇷 Argentina
City	Corrientes, Corrientes

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 200.55.245.155

Whois 200.55.245.155

IP Abuse Reports for 200.55.245.155:

This IP address has been reported a total of 141 times from 68 distinct sources. 200.55.245.155 was first reported on August 4th 2024, and the most recent report was 8 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇬 mypatricks	2026-10-27 03:13:47 (8 hours ago)	200.55.245.155 \| Port: 11341 \| DNS: host155.200-55-245.syt.net 2026-10-27T11:13:46+08:00 America/Arg ... show more 200.55.245.155 \| Port: 11341 \| DNS: host155.200-55-245.syt.net 2026-10-27T11:13:46+08:00 America/Argentina/Cordoba \| HOST Data Center/Web Hosting/Transit Spam list \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 HTTP/1.1 443 GET \| URL: /?1792432143&cbdecfdfccdb=752 \| Ref: - \| Country: AR/Argentina/−03:00 IP City: Corrientes Windows a50e86d03a2ae845-EZE/Buenos Aires, Argentina 1 hits/0 secs Browser 2 show less	Brute-Force Web App Attack Blog Spam Web Spam Exploited Host
🇨🇭 ALPHANET	2026-10-24 21:26:15 (2 days ago)	Botnet or web spider not respecting robots.txt	DDoS Attack Exploited Host
🇲🇹 Malta	2026-10-24 01:00:21 (3 days ago)	200.55.245.155 - - [24/Oct/2026:03:00:21 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Macintos ... show more 200.55.245.155 - - [24/Oct/2026:03:00:21 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36" Brute-force password attempt show less	Hacking Web App Attack Brute-Force
🇺🇸 TPI-Abuse	2026-10-21 10:06:07 (6 days ago)	(mod_security) mod_security (id:225170) triggered by 200.55.245.155 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 200.55.245.155 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 06:05:59.660490 2026] [security2:error] [pid 5610:tid 5610] [client 200.55.245.155:49922] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|westernmassaa.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "westernmassaa.net"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atiOhwA51uTJT6jKVg9K8gAAAB8"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-10-14 23:21:59 (1 week ago)	IP matched detection query 20 more in short time bad rqs.	Brute-Force Web App Attack Hacking
🇩🇪 FeG Deutschland	2026-10-11 10:48:47 (2 weeks ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257	Exploited Host Web App Attack
🇩🇪 ger-stg-sifi1	2026-10-10 18:04:35 (2 weeks ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
🇫🇷 mrcrassi	2026-10-09 20:28:24 (2 weeks ago)	Triggered Cloudflare WAF (firewallCustom) from AR. Action taken: BLOCK Protocol: HTTP/2 (POST method ... show more Triggered Cloudflare WAF (firewallCustom) from AR. Action taken: BLOCK Protocol: HTTP/2 (POST method) Endpoint: /wp-login.php UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇪 FeG Deutschland	2026-10-09 13:08:04 (2 weeks ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 2	Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-10-09 03:31:37 (2 weeks ago)	(mod_security) mod_security (id:225170) triggered by 200.55.245.155 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 200.55.245.155 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 23:31:30.134361 2026] [security2:error] [pid 29650:tid 29650] [client 200.55.245.155:53264] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|lightupaustralia.com.au\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "lightupaustralia.com.au"] [uri "/wp-json/wp/v2/users/me"] [unique_id "ashgEtpnwGIOW52GtFVDdQAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇿 Countryman	2026-10-01 00:10:02 (3 weeks ago)	repeated unauthorized VPN login attempt, user sweep	VPN IP Hacking Brute-Force
🇺🇸 TPI-Abuse	2026-09-28 10:21:48 (4 weeks ago)	(mod_security) mod_security (id:210350) triggered by 200.55.245.155 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 200.55.245.155 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 06:21:39.630675 2026] [security2:error] [pid 15640:tid 15640] [client 200.55.245.155:41152] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.hvacmechanalysis.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hvacmechanalysis.com"] [uri "/"] [unique_id "aro_sxqMtyMPCftH162DbwAAABI"], referer: https://bulkbacklinkanalyzer.space/dir/strategic-seo-backlinks-96810 show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 SX Communications	2026-09-27 20:17:59 (4 weeks ago)	HTTP application-layer DoS / botnet traffic from 200.55.245.155: repeated high-cost dynamic page and ... show more HTTP application-layer DoS / botnet traffic from 200.55.245.155: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host. show less	DDoS Attack Bad Web Bot Exploited Host
🇺🇸 鬼影233	2026-09-27 09:04:20 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-26 12:28:49 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 show less	Bad Web Bot

Showing 1 to 15 of 141 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇪🇹 196.189.116.182

🇧🇷 131.100.242.102

🇰🇪 102.210.148.41

🇩🇪 93.152.221.34

🇮🇹 78.134.49.171

🇸🇬 47.82.54.211

🇮🇩 202.65.234.222

🇪🇨 200.24.150.15

🇩🇪 194.88.98.115

🇧🇴 190.186.21.187

🇧🇷 187.94.255.204

🇰🇿 176.124.88.29

🇺🇸 162.216.149.103

🇺🇸 129.121.140.234

🇨🇳 123.150.80.157

🇮🇩 103.60.182.22

🇸🇬 103.13.206.100

🇧🇪 66.249.78.163

🇨🇳 60.166.8.174

🇸🇬 47.82.51.163