JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 186.85.240.141

186.85.240.141 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 30%: ?

30%

ISP	Telmex Colombia S.A.
Usage Type	Fixed Line ISP
ASN	AS10620
Hostname(s)	static-ip-18685240141.cable.net.co
Domain Name	telmexla.net.co
Country	🇨🇴 Colombia
City	Bogota, Bogota D.C.

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 186.85.240.141

Whois 186.85.240.141

IP Abuse Reports for 186.85.240.141:

This IP address has been reported a total of 11 times from 8 distinct sources. 186.85.240.141 was first reported on November 20th 2025, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 el-brujo	2026-09-18 14:47:04 (2 days ago)	186.85.240.141 - - [18/Sep/2026:16:38:01 +0200] "GET /etsvagf06t HTTP/2.0" 404 15828 "-" "Mozilla/5. ... show more 186.85.240.141 - - [18/Sep/2026:16:38:01 +0200] "GET /etsvagf06t HTTP/2.0" 404 15828 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 186.85.240.141 - - [18/Sep/2026:16:38:01 +0200] "GET /tepzuii9be1wrs7 HTTP/2.0" 404 15828 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 186.85.240.141 - - [18/Sep/2026:16:38:01 +0200] "GET /eo2q713dapa HTTP/2.0" 404 15828 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 186.85.240.141 - - [18/Sep/2026:16:38:01 +0200] "GET /gx3mj HTTP/2.0" 404 15828 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" ... show less	Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-09-18 12:49:39 (2 days ago)	(mod_security) mod_security (id:210350) triggered by 186.85.240.141 (static-ip-18685240141.cable.net ... show more (mod_security) mod_security (id:210350) triggered by 186.85.240.141 (static-ip-18685240141.cable.net.co): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 18 08:49:32.851792 2026] [security2:error] [pid 3876:tid 3876] [client 186.85.240.141:3456] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|civilwarscout.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "civilwarscout.com"] [uri "/"] [unique_id "aq0zXCUpG80Ly_AW8_8v5QAAAAE"], referer: https://onlinedachecker.online/dir/website-growth-backlinks-40375 show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 backslash	2026-09-17 19:27:00 (2 days ago)	block ruleset A5EE6C8F745F0934168261886A3817E5C386412A	Bad Web Bot
Anonymous	2026-08-06 00:00:00 (1 month ago)	“HTTP Flood DDoS targeting domain.tld:443 via repeated GET requests to /[category]?q=Po%C4%8Det+stra ... show more “HTTP Flood DDoS targeting domain.tld:443 via repeated GET requests to /[category]?q=Po%C4%8Det+stran-[random-numbers] (e.g., /2-vsechny-produkty?q=Po%C4%8Det+stran-112-144-160-368-96). Uses spoofed Chrome/Safari/Googlebot UAs. Returns 403/404 errors due to fail2ban. Likely Layer 7 attack to exhaust server resources via pagination brute-forcing.“ show less	DDoS Attack
🇩🇪 LRob	2026-08-03 13:51:30 (1 month ago)	CrowdSec: Distributed L7 HTTP flood on WordPress 'The Events Calendar' AJAX endpoints (request_forma ... show more CrowdSec: Distributed L7 HTTP flood on WordPress 'The Events Calendar' AJAX endpoints (request_format~json) - DDoS \| req: /calendrier-2/action~agenda/cat_ids~190,640/tag_ids~726,792,585,453,449/request_format~json/ \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.67 Safari/537.36 show less	DDoS Attack Web App Attack
🇺🇸 TPI-Abuse	2026-05-09 00:37:03 (4 months ago)	(mod_security) mod_security (id:210730) triggered by 186.85.240.141 (static-ip-18685240141.cable.net ... show more (mod_security) mod_security (id:210730) triggered by 186.85.240.141 (static-ip-18685240141.cable.net.co): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 08 20:36:57.663794 2026] [security2:error] [pid 18057:tid 18057] [client 186.85.240.141:1182] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.raintechgutters.com\|F\|2"] [data ".raintechgutters.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.raintechgutters.com"] [uri "/gutter-contractors-near-me-orlando/ www.raintechgutters.com"] [unique_id "af6BqR90i7MWs9g_IEkPVAAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇦 polycoda	2026-02-15 13:13:16 (7 months ago)	🥶 Part of massive botnet scraping campaign that nearly turned into a DDoS on 2025-11-27	DDoS Attack
🇨🇭 backslash	2025-12-01 17:45:08 (9 months ago)	block ruleset A5EE6C8F745F0934168261886A3817E5C386412A	Bad Web Bot
Anonymous	2025-11-26 06:50:28 (9 months ago)	scanning http requests from known botnet	Web App Attack
🇩🇪 SMARTNET	2025-11-26 02:37:10 (9 months ago)	Aisuru(Mirai variant) DDoS	DDoS Attack
Anonymous	2025-11-20 08:10:31 (10 months ago)	scanning http requests from known botnet	Web App Attack

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 186.216.23.48

🇧🇷 186.204.88.21

🇧🇷 186.194.175.98

🇨🇳 112.85.196.165

🇺🇸 66.132.172.35

🇪🇬 41.128.181.199

🇨🇱 186.189.99.228

🇨🇱 186.189.97.49

🇦🇷 186.19.199.87

🇦🇷 186.19.196.146

🇦🇷 186.19.22.83

🇨🇳 117.26.110.46

🇧🇩 103.81.105.179

🇺🇸 74.82.47.4

🇳🇱 45.138.12.51

🇩🇪 34.40.33.207

🇨🇳 14.103.107.234

🇬🇧 5.226.140.91

🇨🇱 186.189.112.87

🇨🇱 186.189.101.195