JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 118.179.85.0

118.179.85.0 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 36%: ?

36%

ISP	Amber IT Limited
Usage Type	Fixed Line ISP
ASN	AS23956
Domain Name	amberit.com.bd
Country	🇧🇩 Bangladesh
City	Sylhet, Sylhet Division

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 118.179.85.0

Whois 118.179.85.0

IP Abuse Reports for 118.179.85.0:

This IP address has been reported a total of 12 times from 10 distinct sources. 118.179.85.0 was first reported on September 1st 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-10-16 14:38:14 (1 day ago)	(mod_security) mod_security (id:225170) triggered by 118.179.85.0 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 118.179.85.0 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 10:38:01.161193 2026] [security2:error] [pid 2996:tid 2996] [client 118.179.85.0:36186] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.ferrarapanfitness.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.ferrarapanfitness.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atI2yRBtVvlAokEYAF-U7wAAAAk"], referer: https://ferrarapanfitness.com/wp-json/wp/v2/users/me show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-10-15 14:15:21 (2 days ago)	Large-scale coordinated botnet (8M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/S ... show more Large-scale coordinated botnet (8M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim\|LIS\|MOW]): Retaliation after theft; Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]): Employed by Angara Technologies Group \| Offpeak: Sessionless Catalog Access Blocked: /communications/shopby/manufacturer-cisco-aastra-grandstream-audiocodes-netgear-crestron-bosch-dis-bxb-sony-xclaim-fortinet-huawei-spectralink-unify.html \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.51 Safari/537.36 Edg/99.0.1150.30 \| (Magento Site) show less	Hacking Bad Web Bot
🇲🇽 octageeks.com	2026-10-15 04:20:21 (2 days ago)	Wordpress malicious attack:[octawpauthor]	Web App Attack
🇺🇸 鬼影233	2026-09-24 14:00:31 (3 weeks ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-18 16:09:54 (4 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 show less	Bad Web Bot
🇺🇸 鬼影233	2026-08-22 11:14:47 (1 month ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇧🇾 sashan	2026-08-21 13:25:06 (1 month ago)	2026-08-21T16:25:05.456609+03:00 gate kernel: nftables: JAIL-SSH IN=wan OUT= MAC= SRC=118.179.85.0 D ... show more 2026-08-21T16:25:05.456609+03:00 gate kernel: nftables: JAIL-SSH IN=wan OUT= MAC= SRC=118.179.85.0 DST=xxx.xxx.xxx.xxx LEN=60 TOS=0x00 PREC=0x00 TTL=41 ID=10156 DF PROTO=TCP SPT=54140 DPT=22 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇫🇷 Zkillu	2026-08-19 22:29:28 (1 month ago)	UDP flood (DDoS) vs AS215599: 105454 pkts / 150.8 MB to UDP 80/8443 across 359 dst IP(s), 2026-08-19 ... show more UDP flood (DDoS) vs AS215599: 105454 pkts / 150.8 MB to UDP 80/8443 across 359 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host
🇫🇷 dmallet	2026-08-19 22:29:28 (1 month ago)	UDP flood (DDoS) vs AS215599: 105454 pkts / 150.8 MB to UDP 80/8443 across 359 dst IP(s), 2026-08-19 ... show more UDP flood (DDoS) vs AS215599: 105454 pkts / 150.8 MB to UDP 80/8443 across 359 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host
🇺🇸 kosada.com	2026-08-18 22:53:54 (1 month ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
Anonymous	2026-02-23 01:03:20 (7 months ago)	Web App Attack	Brute-Force Exploited Host Web App Attack
🇳🇱 exxos	2025-09-01 01:03:01 (1 year ago)	Attacks with Bad user agents	Hacking

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇳 197.1.45.189

🇺🇸 185.223.152.8

🇪🇸 172.68.134.12

🇯🇵 138.3.211.255

🇧🇩 103.253.247.254

🇷🇴 80.94.92.234

🇵🇱 2a02:26f0:3780:f8f::356e

🇷🇴 193.46.255.86

🇨🇴 179.32.213.29

🇺🇸 172.169.249.152

🇨🇦 172.83.162.139

🇳🇱 138.226.239.10

🇨🇳 116.78.14.206

🇨🇦 85.217.149.73

🇦🇺 20.193.50.139

🇺🇸 20.106.51.109

🇰🇷 14.53.202.223

🇺🇸 172.234.21.101

🇨🇦 142.93.146.244

🇫🇷 141.95.162.162