JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 206.62.136.85

206.62.136.85 was found in our database!

This IP was reported 28 times. Confidence of Abuse is 36%: ?

36%

ISP	SOMOS NETWORKS COLOMBIA S.A.S. BIC
Usage Type	Fixed Line ISP
ASN	AS271957
Domain Name	somos.com
Country	🇨🇴 Colombia
City	Medellin, Antioquia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 206.62.136.85

Whois 206.62.136.85

IP Abuse Reports for 206.62.136.85:

This IP address has been reported a total of 28 times from 20 distinct sources. 206.62.136.85 was first reported on July 3rd 2026, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-10-23 12:50:24 (3 hours ago)	(mod_security) mod_security (id:210350) triggered by 206.62.136.85 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 206.62.136.85 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 08:50:17.149591 2026] [security2:error] [pid 26511:tid 26511] [client 206.62.136.85:49366] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|boblog111.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "boblog111.com"] [uri "/"] [unique_id "attYCSSNuMkj3GE_TBPgRQAAAAE"], referer: https://isaac-albesa.blogspot.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-04 00:50:20 (2 weeks ago)	(mod_security) mod_security (id:210350) triggered by 206.62.136.85 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 206.62.136.85 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 03 20:50:14.428241 2026] [security2:error] [pid 1415998:tid 1416019] [client 206.62.136.85:35005] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|antidote-it.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "antidote-it.com"] [uri "/"] [unique_id "asGixr7i-UxtmsmRI84ibQAAAQ4"], referer: https://topbacklinks.site/dir/outreach-link-building-10659 show less	Brute-Force Bad Web Bot Web App Attack
🇵🇱 MatStef132	2026-09-29 22:30:03 (3 weeks ago)	MatShield L7: blocked on test-clean.mathost.eu (sec-fetch-dest-root-subresource)	DDoS Attack
🇲🇽 octageeks.com	2026-09-29 04:09:00 (3 weeks ago)	Wordpress malicious attack:[octawpauthor]	Web App Attack
🇩🇪 LRob	2026-09-23 09:22:07 (1 month ago)	This address is taking part in a large-scale, distributed L7 DDoS against an online shop: automated ... show more This address is taking part in a large-scale, distributed L7 DDoS against an online shop: automated requests to the shop's search, filter and sort pages — the most expensive pages to serve — sent with no referer and with no page asset loaded, so no browser is behind them. Each participating address sends only one or two such requests, but we count them by the million: a botnet, compromised devices, or abused proxies. The address is blocked. An investigation into what exactly sends these requests from your network (malware, an open proxy, a rented device) would help stop the attack at its source. \| path: /marque/5-winora \| query: order=product.price.asc&q=Disponibilit%C3%A9-En+stock/Cat%C3%A9gories-Femme-meilleur+v%C3%A9lo+entre+3000+et+4000+euros-Tout%5C- (+1 more) \| 2026-09-23 09:22 UTC show less	DDoS Attack Web App Attack
🇺🇸 鬼影233	2026-09-20 03:52:15 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇩🇪 Vegascosmetics	2026-09-17 03:00:42 (1 month ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after deep/obfuscated attack (encoding nest ... show more Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after deep/obfuscated attack (encoding nesting / CPU-drain risk). Evidence: High Priority: %25252F show less	Hacking Exploited Host Web App Attack
🇺🇸 鬼影233	2026-09-12 21:01:01 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 MPL	2026-08-30 13:32:23 (1 month ago)	tcp ports: 23,22 (5 or more attempts)	Port Scan
🇺🇸 NetVexor	2026-08-30 11:36:21 (1 month ago)	Attack source identified and submitted via NetVexor BGP Blackhole Network	Port Scan Hacking Brute-Force
🇺🇸 鬼影233	2026-08-26 02:46:17 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇫🇷 wiredalter	2026-08-26 00:57:22 (1 month ago)	Blocked by fail2ban on o2VPS [22/tcp] Source Port: 50850 TTL: 38 Packet Length: 60 TOS: 0x00 Analyz ... show more Blocked by fail2ban on o2VPS [22/tcp] Source Port: 50850 TTL: 38 Packet Length: 60 TOS: 0x00 Analyzed by https://ip.wiredalter.com show less	Brute-Force SSH
🇬🇧 adnscom.net	2026-08-25 22:57:04 (1 month ago)	IPS trigger: Brute force SSH scanning/attack	Brute-Force SSH
Anonymous	2026-08-25 20:25:21 (1 month ago)	SSH tarpit (endlessh) connection from 206.62.136.85	Brute-Force SSH
🇷🇸 Scan	2026-08-25 02:46:08 (1 month ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking

Showing 1 to 15 of 28 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇯🇴 176.28.249.157

🇺🇸 20.168.123.54

🇬🇧 200.138.46.158

🇺🇦 176.103.15.188

🇺🇸 146.70.173.35

🇫🇷 144.91.124.251

🇺🇸 134.33.64.214

🇮🇳 103.211.217.182

🇺🇸 100.28.191.174

🇩🇪 47.91.65.106

🇺🇸 45.41.86.226

🇺🇸 43.172.81.176

🇺🇸 40.119.28.55

🇺🇸 20.84.147.59

🇫🇷 217.182.253.249

🇸🇻 190.62.21.124

🇲🇽 189.149.254.122

🇳🇱 176.65.149.118

🇩🇪 167.172.111.28

🇺🇸 136.111.5.141