181.79.85.94

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
37% Elevated
25 reports
17 reporters · latest 4 weeks ago
ISP
UFINET COLOMBIA, S. A.
Usage Type
Fixed Line ISP
ASN
AS52468
Domain Name
ufinet.com
Country
🇨🇴 Colombia
City
Bogota, Bogota D.C.
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
25 from 17 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 7 🇩🇪 Germany 2 🇫🇷 France 2
Most common categories Port Scan 16 Hacking 9 Brute-Force 7 Exploited Host 2 SSH 1
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
Anonymous
MikroTik Enterprise Honeypot
Port Scan
🇩🇪 Tsumugi Kotobuki
Port Scan on Honeypot | Ports: 23/Telnet | Proto: TCP(1) | Flags: all SYN | TTL: 50 | Len: 44B | Win: 60429(1) | F2B/ufw-honeypot@2026-10-09T23:01:37Z
Port Scan Hacking
🇫🇷 security.rdmc.fr
Port Scan Attack proto:TCP src:48663 dst:23
Port Scan
🇨🇦 dpinse
Brute-Force Hacking
Anonymous
181.79.85.94 - - [08/Oct/2026:08:39:48 +0200] "GET /boaform/admin/formLogin?username=user&psd=user HTTP/1.0" 404 162 "-" "-" ...
Port Scan Hacking Brute-Force Bad Web Bot Web App Attack SSH
🇺🇸 xmission.com
Blocked by UFW (TCP on 23) Source port: 48663 TTL: 50 Packet length: 40 TOS: 0x00 This report (for 181.79.85.94) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan Hacking Brute-Force
🇺🇸 xmission.com
Blocked by UFW (TCP on 23) Source port: 48663 TTL: 51 Packet length: 40 TOS: 0x00 This report (for 181.79.85.94) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan Hacking Brute-Force
🇦🇷 Bruno
Port Scanner: 181.79.85.94
Port Scan
🇸🇪 warriors
Hacking Brute-Force Exploited Host IoT Targeted
🇭🇰 mutebot.net
SRC=181.79.85.94, PROTO=TCP, SPT=48663, DPT=23
Port Scan
🇳🇿 Kiwi Bloke
Mozi.Botnet
Port Scan Hacking
🇫🇷 security.rdmc.fr
Port Scan Attack proto:TCP src:57941 dst:23
Port Scan
🇸🇪 warriors
Telnet honeypot observed this address advertised as a potential malware payload host in 97 compromise sessions from 1 source IP. Transfer methods: curl, wget. Observed ports: 3958. Requested paths: /i. Payload hosting was not independently verified.
Exploited Host
🇺🇸 NetVexor
Attack source identified and submitted via NetVexor BGP Blackhole Network
Port Scan Hacking Brute-Force
🇺🇸 MPL
tcp/23 (2 or more attempts)
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 165.154.163.10
🇨🇳 58.221.60.25
🇳🇱 213.209.159.236
🇺🇸 199.165.159.219
🇺🇸 195.184.76.195
🇺🇸 166.239.184.117
🇮🇳 125.20.230.46
🇰🇷 121.169.14.188
🇺🇸 74.249.194.1
🇨🇳 58.212.234.82
🇳🇱 45.148.10.240
🇲🇾 210.195.31.58
🇬🇹 190.56.171.219
🇳🇱 164.92.214.237
🇮🇹 151.32.124.23
🇫🇮 147.185.133.202
🇨🇳 111.10.160.168
🇸🇬 101.47.20.56
🇺🇸 98.175.205.145
🇳🇱 77.239.124.48
feedback