JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 190.61.42.220

190.61.42.220 was found in our database!

This IP was reported 9 times. Confidence of Abuse is 17%: ?

17%

ISP	UFINET COLOMBIA, S. A.
Usage Type	Fixed Line ISP
ASN	AS52468
Hostname(s)	220-42-61-190.ufinet.com.co
Domain Name	ufinet.com
Country	🇨🇴 Colombia
City	Bogota, Bogota D.C.

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 190.61.42.220

Whois 190.61.42.220

IP Abuse Reports for 190.61.42.220:

This IP address has been reported a total of 9 times from 9 distinct sources. 190.61.42.220 was first reported on November 26th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 brianbgv	2026-07-21 19:35:45 (1 day ago)	Dovecot mail abuse detected by Fail2Ban	Port Scan Hacking SSH
Anonymous	2026-07-01 21:06:35 (3 weeks ago)	Attribution: mikhail-smirnov-79830323 (LinkedIn/profile ID) employed by Angara Technologies Group (E ... show more Attribution: mikhail-smirnov-79830323 (LinkedIn/profile ID) employed by Angara Technologies Group (Explicitly identified himself as enemy a week before attack began) \| Aggressive search filter manipulation / web scraper probe on port 443 \| URI: Heavy query parameter abuse: /multimedia/display/accessories.html?___SID=8647fe5d01b7665ab29a4f323a18b058U&dir=asc&limit=80&mode=grid&order=most_viewed \| UA: Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Mobile Safari/537.36 \| (Magento Site) show less	Hacking Bad Web Bot
🇺🇸 kosada.com	2026-06-25 22:06:07 (3 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇫🇷 security.rdmc.fr	2026-05-15 00:42:25 (2 months ago)	Port Scan Attack proto:TCP src:24297 dst:23	Port Scan
🇦🇹 urnilxfgbez	2026-05-14 22:45:00 (2 months ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇮🇹 A000Z	2026-05-08 18:09:55 (2 months ago)	Fail2Ban: 190.61.42.220 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5. ... show more Fail2Ban: 190.61.42.220 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Linux; Android 8.0; Pixel 2 Build/OPD3.170816.012) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/47.0.2106.1520 Mobile Safari/537.36 show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-05-07 07:59:20 (2 months ago)	(mod_security) mod_security (id:210381) triggered by 190.61.42.220 (220-42-61-190.ufinet.com.co): 1 ... show more (mod_security) mod_security (id:210381) triggered by 190.61.42.220 (220-42-61-190.ufinet.com.co): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 07 03:59:15.195648 2026] [security2:error] [pid 2029:tid 2047] [client 190.61.42.220:34150] ModSecurity: Access denied with code 403 (phase 2). Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "82"] [id "210381"] [rev "6"] [msg "COMODO WAF: URL Encoding Abuse Attack Attempt\|\|www.lawyerlouisiana.com\|F\|4"] [data "REQUEST_URI=/%stripbasekeyword%/"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.lawyerlouisiana.com"] [uri "/%stripbasekeyword%/"] [unique_id "afxGUzKYzDkPML0hG1955gAAAYs"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇦 polycoda	2026-05-05 13:42:01 (2 months ago)	🥶 Part of massive botnet scraping campaign that nearly turned into a DDoS on 2025-11-27	DDoS Attack
Anonymous	2025-11-26 03:29:44 (7 months ago)	scanning http requests from known botnet	Web App Attack

Showing 1 to 9 of 9 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇾 202.165.15.132

🇧🇷 170.238.37.134

🇫🇷 85.217.140.12

🇸🇪 20.91.139.228

🇷🇴 193.32.162.84

🇲🇽 189.133.73.55

🇺🇸 185.243.5.110

🇫🇮 147.185.133.113

🇵🇭 138.84.101.72

🇨🇳 118.182.166.128

🇨🇳 113.200.76.11

🇸🇦 109.82.10.222

🇫🇷 51.254.103.32

🇦🇷 45.65.225.73

🇬🇪 212.58.102.147

🇵🇰 202.63.202.62

🇺🇸 192.155.84.194

🇲🇽 187.144.113.184

🇫🇷 185.182.8.9

🇮🇩 182.11.153.135