JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 206.84.81.105

206.84.81.105 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 26%: ?

26%

ISP	SOMOS NETWORKS COLOMBIA S.A.S. BIC
Usage Type	Fixed Line ISP
ASN	AS271957
Hostname(s)	Dinamic-Somos-206-84-81-105.somosinternet.co
Domain Name	somos.com
Country	🇨🇴 Colombia
City	Medellin, Antioquia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 206.84.81.105

Whois 206.84.81.105

IP Abuse Reports for 206.84.81.105:

This IP address has been reported a total of 16 times from 6 distinct sources. 206.84.81.105 was first reported on March 19th 2026, and the most recent report was 10 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-30 09:25:59 (10 hours ago)	(mod_security) mod_security (id:210350) triggered by 206.84.81.105 (Dinamic-Somos-206-84-81-105.somo ... show more (mod_security) mod_security (id:210350) triggered by 206.84.81.105 (Dinamic-Somos-206-84-81-105.somosinternet.co): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 05:25:52.236663 2026] [security2:error] [pid 26122:tid 26122] [client 206.84.81.105:34050] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|i4agency.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "i4agency.com"] [uri "/"] [unique_id "arzVoDSiDojbQKtw3MhLzgAAABE"], referer: https://onlinebacklinkgenerator.store/dir/custom-link-building-97356 show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 鬼影233	2026-09-30 00:22:42 (19 hours ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-09-30 00:18:46 (19 hours ago)	(mod_security) mod_security (id:210350) triggered by 206.84.81.105 (Dinamic-Somos-206-84-81-105.somo ... show more (mod_security) mod_security (id:210350) triggered by 206.84.81.105 (Dinamic-Somos-206-84-81-105.somosinternet.co): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 20:18:42.972263 2026] [security2:error] [pid 20041:tid 20041] [client 206.84.81.105:34154] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|limbertree.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "limbertree.com"] [uri "/"] [unique_id "arxVYro1U1cu-6_pU49cuQAAACg"], referer: https://profilebacklink.store/dir/custom-seo-backlinks-122355 show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-29 19:24:41 (1 day ago)	(mod_security) mod_security (id:210350) triggered by 206.84.81.105 (Dinamic-Somos-206-84-81-105.somo ... show more (mod_security) mod_security (id:210350) triggered by 206.84.81.105 (Dinamic-Somos-206-84-81-105.somosinternet.co): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 15:24:37.537300 2026] [security2:error] [pid 27548:tid 27563] [client 206.84.81.105:43600] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|giere.us\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "giere.us"] [uri "/"] [unique_id "arwQdVSV7nSbFARv9_VZ5QAAAAk"], referer: https://giere.us/?c=s;o=a show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-28 06:54:01 (2 days ago)	(mod_security) mod_security (id:210350) triggered by 206.84.81.105 (Dinamic-Somos-206-84-81-105.somo ... show more (mod_security) mod_security (id:210350) triggered by 206.84.81.105 (Dinamic-Somos-206-84-81-105.somosinternet.co): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 02:53:55.997285 2026] [security2:error] [pid 27098:tid 27098] [client 206.84.81.105:46590] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|nationalenq.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "nationalenq.com"] [uri "/"] [unique_id "aroPA2yhgpM4PPyn4BR24wAAAAo"], referer: https://constructionloansfunding.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-22 11:14:16 (1 week ago)	(mod_security) mod_security (id:210350) triggered by 206.84.81.105 (Dinamic-Somos-206-84-81-105.somo ... show more (mod_security) mod_security (id:210350) triggered by 206.84.81.105 (Dinamic-Somos-206-84-81-105.somosinternet.co): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 07:14:09.020289 2026] [security2:error] [pid 28450:tid 28450] [client 206.84.81.105:36828] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.beach98.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.beach98.com"] [uri "/403.shtml"] [unique_id "arJjAR5di_iLJPfTT6hykQAAAAQ"], referer: https://greatwebmakers.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-20 02:06:11 (1 week ago)	(mod_security) mod_security (id:210350) triggered by 206.84.81.105 (Dinamic-Somos-206-84-81-105.somo ... show more (mod_security) mod_security (id:210350) triggered by 206.84.81.105 (Dinamic-Somos-206-84-81-105.somosinternet.co): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 22:06:05.705910 2026] [security2:error] [pid 2203666:tid 2203666] [client 206.84.81.105:47142] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|sublimetiles.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "sublimetiles.com"] [uri "/"] [unique_id "aq8_jdOwu0CMmJ1um_DH4wAAAAI"], referer: https://backlinks-checker.com/share/19543 show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-18 08:58:09 (1 week ago)	(mod_security) mod_security (id:210350) triggered by 206.84.81.105 (Dinamic-Somos-206-84-81-105.somo ... show more (mod_security) mod_security (id:210350) triggered by 206.84.81.105 (Dinamic-Somos-206-84-81-105.somosinternet.co): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 18 04:58:03.627228 2026] [security2:error] [pid 6310:tid 6310] [client 206.84.81.105:58078] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|convoyforkids.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "convoyforkids.com"] [uri "/"] [unique_id "aqz9GzijIuTQTP8gqxFlyAAAABM"], referer: https://g7logisticsnetworks.com/csr show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 鬼影233	2026-09-08 23:10:55 (3 weeks ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 ipblock.com	2026-08-29 04:55:00 (1 month ago)	IPBlock protected site ID [4055-d][s=07]. Persistent 404, vulnerability scanner	Hacking Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-08-26 19:52:48 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 ipblock.com	2026-08-26 14:17:00 (1 month ago)	IPBlock protected site ID [4055-d][s=07]. Persistent 404, vulnerability scanner	Hacking Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-08-05 00:29:49 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇦🇺 MAGIC	2026-04-09 02:23:54 (5 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇨🇭 backslash	2026-03-21 15:51:13 (6 months ago)	block ruleset A5EE6C8F745F0934168261886A3817E5C386412A	Bad Web Bot

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇧 196.3.219.36

🇧🇧 196.3.218.244

🇫🇷 169.40.142.231

🇸🇬 138.75.119.240

🇮🇩 125.162.165.233

🇳🇱 109.160.32.102

🇨🇦 85.217.149.26

🇺🇸 18.116.52.158

🇹🇳 196.237.43.36

🇿🇦 196.210.234.131

🇪🇹 196.189.157.41

🇪🇹 196.188.225.51

🇬🇧 193.163.125.161

🇺🇸 184.153.171.150

🇩🇪 167.94.145.31

🇩🇪 94.183.174.99

🇳🇱 91.92.47.186

🇺🇸 68.227.77.109

🇷🇴 2.57.121.25

🇳🇱 204.76.203.4