AbuseIPDB » 206.84.81.133
206.84.81.133 was found in our database!
This IP was reported 7 times. Confidence of
Abuse
is 26% : ?
ISP
SOMOS NETWORKS COLOMBIA S.A.S. BIC
Usage Type
Fixed Line ISP
ASN
AS271957
Hostname(s)
Dinamic-Somos-206-84-81-133.somosinternet.co
Domain Name
somos.com
Country
๐จ๐ด
Colombia
City
Medellin, Antioquia
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 206.84.81.133 :
This IP address has been reported a total of
7
times from
5 distinct
sources.
206.84.81.133 was first reported on
June 10th 2026 , and the most recent report was
1 day ago .
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
๐ซ๐ท
Sklurk
2026-09-15 14:44:40
(1 day ago)
Web App Attack
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-14 19:58:11
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 206.84.81.133 (Dinamic-Somos-206-84-81-133.somo ...
show more
(mod_security) mod_security (id:210350) triggered by 206.84.81.133 (Dinamic-Somos-206-84-81-133.somosinternet.co): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 14 15:58:06.076514 2026] [security2:error] [pid 13478:tid 13478] [client 206.84.81.133:1597] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||janepopowich.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "janepopowich.com"] [uri "/"] [unique_id "aqhRzsycQhQO7XMBKi-KIQAAAAA"], referer: https://bye.fyi/report/11831
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-14 08:40:56
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 206.84.81.133 (Dinamic-Somos-206-84-81-133.somo ...
show more
(mod_security) mod_security (id:210350) triggered by 206.84.81.133 (Dinamic-Somos-206-84-81-133.somosinternet.co): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 14 04:40:49.359632 2026] [security2:error] [pid 29796:tid 29796] [client 206.84.81.133:39256] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||bostonlog.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "bostonlog.com"] [uri "/favorites"] [unique_id "aqezERNhapd1Pz1lCAIVlwAAAAU"], referer: https://bostonlog.com/bl-blog
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
DrLex0
2026-08-20 21:32:38
(3 weeks ago)
BnL006: Obvious dumb distributed botnet crawler stepping into honeypot trap, violating robots.txt an ...
show more
BnL006: Obvious dumb distributed botnet crawler stepping into honeypot trap, violating robots.txt and meta directives
206.84.81.133 443 - [20/Aug/2026:21:32:38 +0000] "GET [redacted] HTTP/1.1" 410 6204 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
show less
Bad Web Bot
Exploited Host
๐บ๐ธ
kosada.com
2026-08-17 03:36:53
(1 month ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
๐บ๐ธ
kosada.com
2026-06-29 13:14:22
(2 months ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
๐ฉ๐ช
Vegascosmetics
2026-06-10 20:41:28
(3 months ago)
(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated redirect. Vegas Security
DDoS Attack
Hacking
Exploited Host
Showing 1 to
7
of 7 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ
Recently Reported IPs: