JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 181.79.85.242

181.79.85.242 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 30%: ?

30%

ISP	UFINET COLOMBIA, S. A.
Usage Type	Fixed Line ISP
ASN	AS52468
Domain Name	ufinet.com
Country	🇨🇴 Colombia
City	Bogota, Bogota D.C.

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 181.79.85.242

Whois 181.79.85.242

IP Abuse Reports for 181.79.85.242:

This IP address has been reported a total of 11 times from 9 distinct sources. 181.79.85.242 was first reported on May 27th 2026, and the most recent report was 23 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-29 17:59:37 (23 hours ago)	(mod_security) mod_security (id:210350) triggered by 181.79.85.242 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 181.79.85.242 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 13:59:20.924484 2026] [security2:error] [pid 17014:tid 17024] [client 181.79.85.242:45888] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|idealcentralvac.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "idealcentralvac.com"] [uri "/"] [unique_id "arv8eK8Aax7Evn6uB3DRVgAAAAk"], referer: https://markfavreau.com/websites show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 鬼影233	2026-09-17 16:32:58 (1 week ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-09-15 16:27:28 (2 weeks ago)	(mod_security) mod_security (id:210350) triggered by 181.79.85.242 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 181.79.85.242 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 12:27:22.338345 2026] [security2:error] [pid 1236829:tid 1236829] [client 181.79.85.242:54410] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|healthycaregiving.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "healthycaregiving.com"] [uri "/"] [unique_id "aqlx6jBXlzsCoUx34_3MCQAAAAw"], referer: https://war-relatedillnessandinjury.blogspot.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Sklurk	2026-09-14 00:44:28 (2 weeks ago)	Web App Attack	Web App Attack
🇺🇸 kosada.com	2026-08-27 01:13:03 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 鬼影233	2026-08-22 19:25:46 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 show less	Bad Web Bot
Anonymous	2026-08-18 23:00:14 (1 month ago)	\| Multiple SQL injection attempts from same source ip.(multiple servers)	Web App Attack Hacking SQL Injection
🇩🇪 LRob	2026-08-18 19:23:34 (1 month ago)	Application-layer flood: hammering search, login or AJAX endpoints far beyond any human use \| path: ... show more Application-layer flood: hammering search, login or AJAX endpoints far beyond any human use \| path: /131-gravel show less	DDoS Attack Web App Attack
Anonymous	2026-06-17 02:52:29 (3 months ago)	Unauthorized VPN login attempts	Hacking Brute-Force
🇨🇭 backslash	2026-06-14 00:09:33 (3 months ago)	block ruleset A5EE6C8F745F0934168261886A3817E5C386412A	Bad Web Bot
🇩🇪 SMARTNET	2026-05-27 06:03:53 (4 months ago)	Aisuru(Mirai variant) DDoS \| Incident ID: 5b730afc-5cec-4742-843f-18085cc64e5c	DDoS Attack

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇰 103.35.210.144

🇩🇪 196.251.121.107

🇺🇸 170.203.20.5

🇩🇪 165.227.141.54

🇨🇳 116.228.71.10

🇹🇼 114.43.127.24

🇺🇸 72.63.1.23

🇺🇸 50.30.203.248

🇳🇱 45.148.10.42

🇷🇺 5.172.178.253

🇬🇧 193.163.125.87

🇺🇸 184.105.139.68

🇩🇪 163.181.92.136

🇮🇩 160.22.126.54

🇩🇪 151.243.11.141

🇹🇼 111.70.49.181

🇸🇬 35.198.251.172

🇴🇲 212.146.181.176

🇺🇸 170.205.31.243

🇺🇸 148.59.129.27