JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 79.106.211.66

79.106.211.66 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 30%: ?

30%

ISP	ONE ALBANIA SH.A.
Usage Type	Fixed Line ISP
ASN	AS42313
Domain Name	one.al
Country	🇦🇱 Albania
City	Tirana, Tirana

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 79.106.211.66

Whois 79.106.211.66

IP Abuse Reports for 79.106.211.66:

This IP address has been reported a total of 10 times from 6 distinct sources. 79.106.211.66 was first reported on May 9th 2021, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-16 17:43:18 (2 days ago)	(mod_security) mod_security (id:210350) triggered by 79.106.211.66 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 79.106.211.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 13:43:15.141987 2026] [security2:error] [pid 27895:tid 27895] [client 79.106.211.66:26391] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|puckerbikinis.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "puckerbikinis.com"] [uri "/"] [unique_id "aqrVM8AxHBnXrGgg2WJ1bQAAACw"], referer: https://technicalseochecker.space/dir/seo-link-building-experts-168686 show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 gui-ying233	2026-09-10 22:30:25 (1 week ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 kosada.com	2026-09-08 14:22:09 (1 week ago)	Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B15% ... show more Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B15%5D=49&topics%5B16%5D=31&topics%5B17%5D=60&topics%5B18%5D=25 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0") show less	DDoS Attack Bad Web Bot
🇺🇸 gui-ying233	2026-08-28 16:08:47 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 gui-ying233	2026-08-26 20:08:08 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 kosada.com	2026-08-25 13:48:57 (3 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇩🇪 LRob	2026-08-20 00:06:37 (4 weeks ago)	L7 DDoS: distributed flood on a shop's faceted search — automated requests to search/sort URLs, one ... show more L7 DDoS: distributed flood on a shop's faceted search — automated requests to search/sort URLs, one or two per address from thousands of addresses, no page assets loaded \| path: /31-meilleur-velo-entre-3000-et-4000-euros \| query: order=product.position.asc&productListView=grid&q=Famille-Spark-Xelius&resultsPerPage=24 show less	DDoS Attack Web App Attack
🇩🇪 Vegascosmetics	2026-07-21 14:24:05 (1 month ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated encoding / deep attack. Vegas ... show more (Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated encoding / deep attack. Vegas Security show less	DDoS Attack Hacking Exploited Host
🇩🇪 Vegascosmetics	2026-07-21 11:12:29 (1 month ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated redirect. Vegas Security	DDoS Attack Hacking Exploited Host
🇩🇪 Richie	2021-05-09 23:05:00 (5 years ago)	May 10 05:04:25 host1 sshd[2367149]: Invalid user admin from 79.106.211.66 port 28377 May 10 05:04:2 ... show more May 10 05:04:25 host1 sshd[2367149]: Invalid user admin from 79.106.211.66 port 28377 May 10 05:04:26 host1 sshd[2367149]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.106.211.66 May 10 05:04:25 host1 sshd[2367149]: Invalid user admin from 79.106.211.66 port 28377 May 10 05:04:27 host1 sshd[2367149]: Failed password for invalid user admin from 79.106.211.66 port 28377 ssh2 May 10 05:04:59 host1 sshd[2367164]: Invalid user admin from 79.106.211.66 port 11453 ... show less	Brute-Force SSH

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇿 94.158.62.12

🇩🇪 213.209.159.133

🇧🇷 177.9.66.4

🇳🇱 164.92.211.98

🇧🇩 119.40.84.186

🇺🇸 103.143.239.75

🇩🇪 93.152.221.108

🇺🇸 91.230.168.163

🇫🇷 85.217.140.24

🇧🇬 78.128.113.46

🇱🇹 62.60.130.242

🇧🇷 45.4.122.218

🇰🇷 221.156.126.1

🇺🇸 207.168.23.231

🇧🇷 200.115.68.45

🇺🇸 195.184.76.210

🇵🇰 182.180.154.234

🇸🇪 171.25.158.24

🇺🇸 161.153.36.212

🇬🇧 159.65.92.248