JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 186.65.86.242

186.65.86.242 was found in our database!

This IP was reported 28 times. Confidence of Abuse is 46%: ?

46%

ISP	Sista S.A.
Usage Type	Fixed Line ISP
ASN	AS52380
Domain Name	sista.ar
Country	🇦🇷 Argentina
City	Ensenada, Buenos Aires

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 186.65.86.242

Whois 186.65.86.242

IP Abuse Reports for 186.65.86.242:

This IP address has been reported a total of 28 times from 21 distinct sources. 186.65.86.242 was first reported on September 7th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-18 01:32:04 (1 day ago)	(mod_security) mod_security (id:210350) triggered by 186.65.86.242 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 186.65.86.242 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 21:31:59.505881 2026] [security2:error] [pid 8721:tid 8737] [client 186.65.86.242:46948] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|velatorioslucenses.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "velatorioslucenses.com"] [uri "/"] [unique_id "aqyUj_aS5zHdf6Fq6XrcWAAAAE4"], referer: https://websitelinkschecker.website/dir/link-outreach-services-224589 show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 backslash	2026-09-17 03:03:04 (2 days ago)	block ruleset A5EE6C8F745F0934168261886A3817E5C386412A	Bad Web Bot
🇺🇸 gui-ying233	2026-09-14 16:04:28 (5 days ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 show less	Bad Web Bot
🇩🇪 SiyCah	2026-08-22 06:00:04 (4 weeks ago)	186.65.86.242 fell into Endlessh tarpit; 0/2 total connections are currently still open. Total time ... show more 186.65.86.242 fell into Endlessh tarpit; 0/2 total connections are currently still open. Total time wasted: 4s. Total bytes sent by tarpit: 340B. Report generated by Endlessh Report Generator v1.2.3 show less	Brute-Force Port Scan SSH Hacking
🇩🇪 SiyCah	2026-08-20 06:00:04 (4 weeks ago)	186.65.86.242 fell into Endlessh tarpit; 0/2 total connections are currently still open. Total time ... show more 186.65.86.242 fell into Endlessh tarpit; 0/2 total connections are currently still open. Total time wasted: 4s. Total bytes sent by tarpit: 340B. Report generated by Endlessh Report Generator v1.2.3 show less	Brute-Force Port Scan SSH Hacking
🇩🇪 SiyCah	2026-08-19 06:00:03 (1 month ago)	186.65.86.242 fell into Endlessh tarpit; 0/2 total connections are currently still open. Total time ... show more 186.65.86.242 fell into Endlessh tarpit; 0/2 total connections are currently still open. Total time wasted: 4s. Total bytes sent by tarpit: 340B. Report generated by Endlessh Report Generator v1.2.3 show less	Brute-Force Port Scan SSH Hacking
🇫🇷 sthoyer.de	2026-08-19 04:16:46 (1 month ago)	Aug 19 06:16:45 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ... show more Aug 19 06:16:45 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=186.65.86.242 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=55 ID=57182 DF PROTO=TCP SPT=46028 DPT=22 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 RAP	2026-08-18 12:27:58 (1 month ago)	2026-08-18 12:27:58 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇧🇷 noconex	2026-08-17 20:20:13 (1 month ago)	Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 186.65.86. ... show more Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 186.65.86.242 show less	Port Scan Brute-Force SSH
🇳🇱 EGP Abuse Dept	2026-08-17 08:26:01 (1 month ago)	Unauthorized connection to SSH port 22	Port Scan Hacking SSH
🇺🇸 RAP	2026-08-16 07:18:28 (1 month ago)	2026-08-16 07:18:28 UTC Unauthorized activity to TCP port 22. SSH	SSH
🇺🇸 ISPLtd	2026-08-15 23:02:21 (1 month ago)	Aug 15 20:02:07 186.65.86.242 TCP SPT=56584 DPT=22 SYN Aug 15 20:02:08 186.65.86.242 TCP SPT=56584 D ... show more Aug 15 20:02:07 186.65.86.242 TCP SPT=56584 DPT=22 SYN Aug 15 20:02:08 186.65.86.242 TCP SPT=56584 DPT=22 SYN ... show less	Port Scan SSH
Anonymous	2026-08-15 10:12:31 (1 month ago)	denied SSH access attempt. destination port 22.	Port Scan Brute-Force SSH
🇫🇷 security.rdmc.fr	2026-08-14 06:30:46 (1 month ago)	Port Scan Attack proto:TCP src:55464 dst:23	Port Scan
🇪🇸 el-brujo	2026-08-02 01:01:00 (1 month ago)	HTTP DDoS Attack Layer 7	DDoS Attack

Showing 1 to 15 of 28 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇿 213.172.73.149

🇦🇷 149.107.229.38

🇳🇱 195.178.110.30

🇺🇦 194.0.54.132

🇳🇱 185.242.226.80

🇺🇸 157.55.39.194

🇭🇰 152.32.240.167

🇭🇰 150.5.157.20

🇦🇷 148.222.217.19

🇬🇧 145.40.132.151

🇨🇳 110.41.54.112

🇨🇳 106.13.95.198

🇪🇸 79.151.234.151

🇺🇸 20.65.179.65

🇺🇸 20.46.228.235

🇰🇷 220.123.222.114

🇺🇸 216.189.159.208

🇹🇼 198.235.24.109

🇦🇱 185.38.194.175

🇨🇳 58.221.60.25