JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 179.109.80.116

179.109.80.116 was found in our database!

This IP was reported 179 times. Confidence of Abuse is 0%: ?

ISP	PONTO SAT CONECT EIRELI ME
Usage Type	Fixed Line ISP
ASN	AS263582
Hostname(s)	speednet116.pstconnect.net.br
Domain Name	pontosat.net.br
Country	🇧🇷 Brazil
City	Imarui, Santa Catarina

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 179.109.80.116

Whois 179.109.80.116

IP Abuse Reports for 179.109.80.116:

This IP address has been reported a total of 179 times from 59 distinct sources. 179.109.80.116 was first reported on November 26th 2022, and the most recent report was 6 months ago.

Old Reports: The most recent abuse report for this IP address is from 6 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Cloud86 B.V.	2025-12-07 23:52:03 (6 months ago)	Email spam	Email Spam
Anonymous	2025-12-04 07:20:11 (6 months ago)	botnet	DDoS Attack
🇩🇪 Szymekk	2025-12-02 13:59:59 (6 months ago)	Fail2Ban: SSH brute force attempt [srv01]	Brute-Force SSH
🇺🇸 COMPLEX	2025-11-29 03:58:40 (6 months ago)	Triggered Cloudflare WAF (l7ddos) from BR. Action taken: BLOCK ASN: 263582 (PONTO SAT CONECT EIRELI ... show more Triggered Cloudflare WAF (l7ddos) from BR. Action taken: BLOCK ASN: 263582 (PONTO SAT CONECT EIRELI ME) Protocol: HTTP/2 (GET method) Endpoint: / show less	DDoS Attack Bad Web Bot
🇲🇾 syokadmin	2025-11-25 02:38:00 (6 months ago)	179.109.80.116 (BR/Brazil/speednet116.pstconnect.net.br), 5 distributed SMTP Logins on account [hell ... show more 179.109.80.116 (BR/Brazil/speednet116.pstconnect.net.br), 5 distributed SMTP Logins on account [[email protected]] in the last 300 secs show less	Brute-Force
🇺🇸 SuperEvilLuke	2025-11-22 20:17:14 (7 months ago)	Malicious activity detected from 263582 PONTO SAT CONECT EIRELI ME towards host dash.embotic.xyz (GE ... show more Malicious activity detected from 263582 PONTO SAT CONECT EIRELI ME towards host dash.embotic.xyz (GET HTTP/2) @ 2025-11-22T20:17:14Z (11 occurrences) show less	DDoS Attack Exploited Host
🇺🇸 SuperEvilLuke	2025-11-21 14:09:40 (7 months ago)	Malicious activity detected from 263582 PONTO SAT CONECT EIRELI ME towards host panel.embotic.xyz (G ... show more Malicious activity detected from 263582 PONTO SAT CONECT EIRELI ME towards host panel.embotic.xyz (GET HTTP/2) @ 2025-11-21T14:09:40Z (5 occurrences) show less	DDoS Attack Exploited Host
Anonymous	2025-11-20 19:52:41 (7 months ago)	scanning http requests from known botnet	Web App Attack
🇮🇩 hermawan	2025-11-16 00:29:11 (7 months ago)	[Sun Nov 16 07:25:39.354010 2025] [security2:error] [pid 1378532:tid 140212823799488] [client 179.10 ... show more [Sun Nov 16 07:25:39.354010 2025] [security2:error] [pid 1378532:tid 140212823799488] [client 179.109.80.116:56776] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "WOW64" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "247"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: WOW64 found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.66 Safari/537.36 request_line = GET /index.php/analisis-bulanan/175-analisis-distribusi-hujan/analisis-distribusi-sifat-hujan/analisis-distribusi-sifat-hujan-jawa-timur-bulanan/analisis-distribusi-sifat-hujan-jawa-timur-bulanan-tahun-2016/1084-analisis-distribusi-sifat-hujan-jawa-timur-bulan-juni-tahun-2016 HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/index.php/analisis-bulanan/175-analisis-distribusi-hujan/analisis-distribusi-sifat ... show less	Hacking Web App Attack
🇦🇺 GreyWatch - Honeypot Intelligence	2025-11-08 15:27:12 (7 months ago)	ASN: 263582 (PONTO SAT CONECT EIRELI ME) Botnet Zombie: This IP has been detected as a botnet zombie ... show more ASN: 263582 (PONTO SAT CONECT EIRELI ME) Botnet Zombie: This IP has been detected as a botnet zombie \| Outbound DDoS attack source \| Malicious show less	DDoS Attack Bad Web Bot
🇺🇸 COMPLEX	2025-11-07 19:57:34 (7 months ago)	Triggered Cloudflare WAF (l7ddos) from BR. Action taken: BLOCK ASN: 263582 (PONTO SAT CONECT EIRELI ... show more Triggered Cloudflare WAF (l7ddos) from BR. Action taken: BLOCK ASN: 263582 (PONTO SAT CONECT EIRELI ME) Protocol: HTTP/2 (GET method) Endpoint: / show less	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2025-10-25 19:41:37 (7 months ago)	(mod_security) mod_security (id:225170) triggered by 179.109.80.116 (speednet116.pstconnect.net.br): ... show more (mod_security) mod_security (id:225170) triggered by 179.109.80.116 (speednet116.pstconnect.net.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 25 15:41:32.952789 2025] [security2:error] [pid 32328:tid 32328] [client 179.109.80.116:36745] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|centrodentalsindolor.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "centrodentalsindolor.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aP0n7Exk_9Oo63jYBg6zvwAAAAs"], referer: https://centrodentalsindolor.com/wp-json/wp/v2/users/ show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 F242	2025-10-25 16:48:34 (7 months ago)	Wordpress Login or XMLRPC abuse	Web App Attack
🇲🇾 syokadmin	2025-10-13 17:42:21 (8 months ago)	179.109.80.116 (BR/Brazil/speednet116.pstconnect.net.br), 5 distributed SMTP Logins on account [hell ... show more 179.109.80.116 (BR/Brazil/speednet116.pstconnect.net.br), 5 distributed SMTP Logins on account [[email protected]] in the last 300 secs show less	Brute-Force
🇮🇹 VHosting	2025-10-06 19:16:33 (8 months ago)	Detected mail brute force attack from 4 different servers	Brute-Force

Showing 1 to 15 of 179 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.225

🇹🇭 203.154.158.195

🇺🇸 147.185.132.134

🇷🇴 80.94.92.130

🇰🇷 49.247.37.22

🇧🇪 34.53.213.227

🇺🇸 3.131.24.55

🇧🇷 179.83.134.101

🇭🇰 143.92.38.231

🇳🇱 142.93.143.25

🇳🇱 91.92.40.23

🇺🇸 65.34.231.225

🇺🇸 20.65.216.44

🇺🇸 17.246.19.129

🇰🇷 1.214.214.114

🇨🇳 202.105.98.252

🇰🇭 202.62.39.72

🇺🇸 192.227.144.61

🇦🇷 186.96.197.208

🇳🇱 176.65.139.235