JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 138.186.23.34

138.186.23.34 was found in our database!

This IP was reported 78 times. Confidence of Abuse is 55%: ?

55%

ISP	UFINET COLOMBIA, S. A.
Usage Type	Fixed Line ISP
ASN	AS52468
Hostname(s)	host-138-186-23-34.ufinet.com.co
Domain Name	ufinet.com
Country	🇨🇴 Colombia
City	Bogota, Bogota D.C.

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 138.186.23.34

Whois 138.186.23.34

IP Abuse Reports for 138.186.23.34:

This IP address has been reported a total of 78 times from 40 distinct sources. 138.186.23.34 was first reported on April 3rd 2026, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇿🇦 vanderhost	2026-10-27 08:27:19 (5 hours ago)	[Laravel HoneypotPlus] Automated report - Honeypot access detected on path: /wp-content/uploads/2019 ... show more [Laravel HoneypotPlus] Automated report - Honeypot access detected on path: /wp-content/uploads/2019/03/ispa-code-of-conduct.png via rule: /wp-content show less	Web App Attack Bad Web Bot
🇫🇷 MatStef132	2026-10-23 22:41:30 (3 days ago)	MatShield L7: blocked on mathost.eu (ua-quarantined)	Bad Web Bot
🇺🇸 francelink.fr	2026-10-23 04:13:27 (4 days ago)	Azure WAF blocked a request. Rule: 949110. Observed at: 2026-10-22T09:41:41.000Z.	Web App Attack
🇬🇧 Silly Development	2026-10-22 18:52:24 (4 days ago)	Malicious activity detected from 52468 UFINET PANAMA S.A. towards host sillydev.co.uk (GET HTTP/2) @ ... show more Malicious activity detected from 52468 UFINET PANAMA S.A. towards host sillydev.co.uk (GET HTTP/2) @ 2026-10-22T18:52:24Z (2 occurrences) show less	DDoS Attack Exploited Host
🇵🇱 MatStef132	2026-10-21 20:46:50 (5 days ago)	MatShield L7: blocked on panel.averisca.cloud (ua-quarantined)	Bad Web Bot
🇵🇱 MatStef132	2026-10-20 19:53:07 (6 days ago)	MatShield L7: blocked on politempire.org (ua-quarantined)	Bad Web Bot
🇩🇪 Phenix Info	2026-10-16 16:26:22 (1 week ago)	SmallGuard.fr/Prestashop Massive 403	Web App Attack
🇺🇸 SX Communications	2026-10-09 14:16:33 (2 weeks ago)	Web spam bot from 138.186.23.34: automated HTTPS requests for fake pharmacy / prescription / drug SE ... show more Web spam bot from 138.186.23.34: automated HTTPS requests for fake pharmacy / prescription / drug SEO URLs (bbs and blog product-style paths). 4 hits; paths: /blogs/addictselastic/Pharmacy-Online-Asthma-Inhalers">Prescription. show less	Web Spam Blog Spam Bad Web Bot
🇨🇭 ALPHANET	2026-10-04 00:20:36 (3 weeks ago)	Botnet or web spider not respecting robots.txt	DDoS Attack Exploited Host
🇺🇸 TPI-Abuse	2026-10-03 17:03:12 (3 weeks ago)	(mod_security) mod_security (id:210350) triggered by 138.186.23.34 (host-138-186-23-34.ufinet.com.co ... show more (mod_security) mod_security (id:210350) triggered by 138.186.23.34 (host-138-186-23-34.ufinet.com.co): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 03 13:03:05.372804 2026] [security2:error] [pid 25231:tid 25231] [client 138.186.23.34:55378] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|hshr.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hshr.com"] [uri "/"] [unique_id "asE1SRNNPiTbORtctVRGbAAAAAE"], referer: https://linkbuildingspecialist.online/dir/google-ranking-backlinks-95923 show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 鬼影233	2026-09-29 06:22:17 (4 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 show less	Bad Web Bot
🇩🇪 LRob	2026-09-29 04:00:50 (4 weeks ago)	Shop search flood (L7 DDoS) \| path: /111-bons-plan-vtt \| query: order=product.name.desc&productListV ... show more Shop search flood (L7 DDoS) \| path: /111-bons-plan-vtt \| query: order=product.name.desc&productListView=grid&q=Famille-Overvolt/Taille-M \| 2026-09-29 04:00 UTC show less	DDoS Attack Web App Attack
🇫🇷 Sklurk	2026-09-28 02:03:34 (4 weeks ago)	Web App Attack	Web App Attack
🇩🇪 LRob	2026-09-27 20:47:26 (4 weeks ago)	This address requests our sites over plain http, is answered with a redirect to https, and never fol ... show more This address requests our sites over plain http, is answered with a redirect to https, and never follows it — over and over. A browser follows redirects; a scanner enumerating hosts does not. It reads nothing it asks for and only loads the server; blocked. Please check what runs on this address. \| method: GET \| path: /realisation \| 2026-09-27 20:47 UTC show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-24 06:17:30 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 show less	Bad Web Bot

Showing 1 to 15 of 78 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 184.105.139.116

🇬🇧 157.254.222.237

🇭🇰 154.194.251.172

🇺🇸 162.252.55.66

🇰🇷 125.143.200.150

🇩🇪 118.193.58.120

🇮🇳 103.207.9.246

🇩🇪 102.220.163.245

🇸🇬 101.100.194.181

🇷🇺 91.144.158.231

🇮🇳 49.43.3.152

🇰🇿 37.151.81.19

🇬🇧 35.203.210.218

🇧🇷 35.198.30.19

🇺🇸 34.172.63.252

🇫🇷 13.106.134.161

🇺🇸 199.165.159.29

🇨🇴 181.79.159.3

🇮🇳 157.48.92.87

🇺🇸 149.19.244.238