JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 170.81.191.158

170.81.191.158 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 18%: ?

18%

ISP	AONET SERVICOS DE COMUNICACAO LTDA
Usage Type	Fixed Line ISP
ASN	AS262755
Domain Name	aonet.com.br
Country	🇧🇷 Brazil
City	Bauru, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 170.81.191.158

Whois 170.81.191.158

IP Abuse Reports for 170.81.191.158:

This IP address has been reported a total of 17 times from 9 distinct sources. 170.81.191.158 was first reported on July 27th 2025, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-10-10 19:23:12 (5 days ago)	(mod_security) mod_security (id:210350) triggered by 170.81.191.158 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 170.81.191.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 15:23:05.845734 2026] [security2:error] [pid 19654:tid 19682] [client 170.81.191.158:31646] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|guitarprimer.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "guitarprimer.com"] [uri "/index.html"] [unique_id "asqQmUcEQ-mzzu1oBWRexwAAAFQ"], referer: https://guitarprimer.com/electro-acoustic-guitar.html show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 micropedro	2026-10-02 15:28:14 (2 weeks ago)	3 incidents: malicious activity. First: 2026-09-29 18:52, Last: 2026-10-02 11:28 UTC. Triggers: unkn ... show more 3 incidents: malicious activity. First: 2026-09-29 18:52, Last: 2026-10-02 11:28 UTC. Triggers: unknown. show less	Port Scan
🇺🇸 micropedro	2026-09-24 14:15:29 (3 weeks ago)	3 incidents: malicious activity. First: 2026-09-09 19:50, Last: 2026-09-24 10:15 UTC. Triggers: unkn ... show more 3 incidents: malicious activity. First: 2026-09-09 19:50, Last: 2026-09-24 10:15 UTC. Triggers: unknown. show less	Port Scan
🇺🇸 kosada.com	2026-09-07 00:11:56 (1 month ago)	Repeated requests classified as pathological web bot behavior, for example: /[redacted]/search?f%5B0 ... show more Repeated requests classified as pathological web bot behavior, for example: /[redacted]/search?f%5B0%5D=digest_key_terms%3A491&f%5B1%5D=digest_key_terms%3A507&f%5B2%5D=digest_key_terms%3A535&field_article_edition%5B504%5D=504&field_key_terms%5B329%5D=329 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36") show less	DDoS Attack Bad Web Bot
🇺🇸 micropedro	2026-09-06 12:17:39 (1 month ago)	3 incidents: malicious activity. First: 2026-08-25 17:09, Last: 2026-09-06 08:17 UTC. Triggers: unkn ... show more 3 incidents: malicious activity. First: 2026-08-25 17:09, Last: 2026-09-06 08:17 UTC. Triggers: unknown. show less	Port Scan
🇺🇸 micropedro	2026-08-20 10:47:28 (1 month ago)	3 incidents: port scanning. First: 2026-06-08 09:22, Last: 2026-08-20 06:47 UTC. Triggers: non-publi ... show more 3 incidents: port scanning. First: 2026-06-08 09:22, Last: 2026-08-20 06:47 UTC. Triggers: non-public-port,firewall-udp,unknown. show less	Port Scan
Anonymous	2026-08-15 05:25:07 (2 months ago)	denied Telnet access attempt. destination port 23.	Port Scan Brute-Force
🇳🇱 EGP Abuse Dept	2026-08-15 04:59:51 (2 months ago)	Unauthorized connection to Telnet port 23	Port Scan Hacking
🇺🇸 MPL	2026-08-14 22:47:21 (2 months ago)	tcp/23 (2 or more attempts)	Port Scan
🇺🇸 kosada.com	2026-07-29 06:17:13 (2 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-07-08 22:07:14 (3 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
Anonymous	2026-06-08 03:01:18 (4 months ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇮🇹 A000Z	2026-05-22 08:01:15 (4 months ago)	Fail2Ban: 170.81.191.158 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5 ... show more Fail2Ban: 170.81.191.158 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.3340.1429 Safari/537.36 show less	Bad Web Bot
🇳🇱 exxos	2025-09-01 00:03:01 (1 year ago)	http-no-verb	Hacking
🇳🇱 exxos	2025-08-20 18:03:01 (1 year ago)	Attacks with Bad user agents	Hacking

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 128.185.12.179

🇳🇱 77.239.124.138

🇮🇳 66.116.229.87

🇬🇧 35.203.211.176

🇦🇪 5.194.92.212

🇺🇸 2604:a940:302:118:0:26::

🇮🇳 2409:40e5:6:e76a:c87b:5094:d9db:35a5

🇧🇷 200.152.97.196

🇺🇸 67.205.28.4

🇵🇱 57.128.239.181

🇫🇷 45.80.27.169

🇺🇸 35.233.158.198

🇪🇸 34.175.68.117

🇩🇪 31.70.74.210

🇺🇸 216.73.216.74

🇺🇸 216.25.89.97

🇮🇱 193.169.229.6

🇬🇧 178.128.172.104

🇺🇸 162.216.149.95

🇭🇰 152.32.191.98