JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 179.1.125.4

179.1.125.4 was found in our database!

This IP was reported 76 times. Confidence of Abuse is 11%: ?

11%

ISP	WAYIRA NET S.A.S.
Usage Type	Fixed Line ISP
ASN	AS18678
Domain Name	wayiranet.com
Country	🇨🇴 Colombia
City	Bogota, Bogota D.C.

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 179.1.125.4

Whois 179.1.125.4

IP Abuse Reports for 179.1.125.4:

This IP address has been reported a total of 76 times from 38 distinct sources. 179.1.125.4 was first reported on August 29th 2025, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇷🇴 INTEQ	2026-04-18 20:13:44 (1 month ago)	Web attack from 179.1.125.4	Web App Attack
🇺🇸 mnsf	2026-04-18 17:05:19 (1 month ago)	Login Too Frequent (7)	Brute-Force Web App Attack
🇦🇺 screwlooseit.com.au	2026-04-17 21:25:19 (1 month ago)	Blocked by CSF 13 firewall - Rule: WPLOGIN CO/Colombia/-	Web App Attack
🇺🇸 kosada.com	2026-04-16 00:26:04 (1 month ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇺🇸 nodepile	2026-04-11 21:58:18 (2 months ago)	Requests denied due to proxy/VPN risk (tenant=82 method=GET path=/static/version1775170088/frontend/ ... show more Requests denied due to proxy/VPN risk (tenant=82 method=GET path=/static/version1775170088/frontend/Smartwave/porto/en_US/Magento_Ui/templates/modal/modal-slide.html ua='Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36') show less	Open Proxy VPN IP
🇺🇸 fortypoundhead	2026-04-07 14:01:53 (2 months ago)	SQL Injection Attempt	SQL Injection Web App Attack
🇮🇹 A000Z	2026-04-05 03:39:46 (2 months ago)	Fail2Ban: 179.1.125.4 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 ... show more Fail2Ban: 179.1.125.4 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 nodepile	2026-04-04 22:24:09 (2 months ago)	Requests denied due to proxy/VPN risk (tenant=82 method=GET path=/morimoto/off-road/vehicle-specific ... show more Requests denied due to proxy/VPN risk (tenant=82 method=GET path=/morimoto/off-road/vehicle-specific/a-pillar-led-light-system-ford-bronco-sport-21.html ua='Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36') show less	Open Proxy VPN IP
🇫🇷 Sklurk	2026-03-31 03:22:31 (2 months ago)	Web App Attack	Web App Attack
🇺🇸 kosada.com	2026-03-30 06:11:27 (2 months ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇺🇸 stechusa	2026-03-29 00:01:13 (2 months ago)	ELEVATED_THREAT \| country=CO \| ASN=INTERNEXA S.A. E.S.P \| 145 IPs targeting /brand/satco-products-in ... show more ELEVATED_THREAT \| country=CO \| ASN=INTERNEXA S.A. E.S.P \| 145 IPs targeting /brand/satco-products-inc.html \| URL template shared by 12 IPs: /brand/satco-products-inc.html?bulb_shape_type=&bulb_base=&bulb_type=*&mode=li \| Facet request during elevated threat (facet_ratio=0.94, unique_ips=539) show less	Bad Web Bot DDoS Attack
🇺🇸 TPI-Abuse	2026-03-27 05:18:09 (2 months ago)	(mod_security) mod_security (id:210730) triggered by 179.1.125.4 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210730) triggered by 179.1.125.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 27 01:18:03.505908 2026] [security2:error] [pid 1445:tid 1445] [client 179.1.125.4:35848] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.bahamascruisersguide.com\|F\|2"] [data ". capesantamaria.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.bahamascruisersguide.com"] [uri "/page78/page95/www. capesantamaria.com"] [unique_id "acYTC5JJCmTEWUGr_4FrUAAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 jasperedv.de	2026-03-25 22:59:09 (2 months ago)	Failed IMAP Login - Brutforcing	Email Spam Brute-Force
🇫🇷 Sklurk	2026-03-25 08:00:06 (2 months ago)	Web App Attack	Web App Attack
🇺🇸 stechusa	2026-03-24 20:50:52 (2 months ago)	country=CO \| ASN=INTERNEXA S.A. E.S.P \| 298 IPs targeting /brand.html \| URL template shared by 56 IP ... show more country=CO \| ASN=INTERNEXA S.A. E.S.P \| 298 IPs targeting /brand.html \| URL template shared by 56 IPs: /brand.html?bulb_shape_type=&bulb_shape=&bulb_type=&mode=list&p= \| Facet request during elevated threat (facet_ratio=0.87, unique_ips=569) show less	Bad Web Bot DDoS Attack

Showing 1 to 15 of 76 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 2405:201:301b:4867:14e1:6c2e:ced5:f387

🇧🇷 191.232.199.0

🇷🇺 188.187.87.105

🇳🇱 185.223.235.50

🇨🇭 179.43.168.58

🇳🇱 172.94.9.158

🇧🇪 130.211.111.254

🇮🇳 124.253.207.242

🇵🇹 85.244.8.67

🇮🇹 83.224.185.172

🇨🇳 180.167.128.203

🇳🇱 176.65.139.242

🇳🇱 176.65.131.192

🇮🇩 163.7.2.186

🇺🇸 104.43.242.4

🇩🇪 81.169.154.173

🇺🇸 66.132.186.168

🇱🇹 62.60.130.230

🇸🇬 20.157.117.15

🇭🇰 2404:6800:4005:c08::124