JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 79.106.225.42

79.106.225.42 was found in our database!

This IP was reported 39 times. Confidence of Abuse is 50%: ?

50%

ISP	ONE ALBANIA SH.A.
Usage Type	Fixed Line ISP
ASN	AS42313
Domain Name	one.al
Country	🇦🇱 Albania
City	Sarande, Vlore County

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 79.106.225.42

Whois 79.106.225.42

IP Abuse Reports for 79.106.225.42:

This IP address has been reported a total of 39 times from 27 distinct sources. 79.106.225.42 was first reported on October 17th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 stechusa	2026-07-09 17:10:27 (1 day ago)	[Askari] \| Behavior: Slow-read attack, HTTP/1.1 over TLS, Concurrent page load during attack, Target ... show more [Askari] \| Behavior: Slow-read attack, HTTP/1.1 over TLS, Concurrent page load during attack, Targeting specific pages, URL template abuse show less	Bad Web Bot DDoS Attack
🇮🇹 A000Z	2026-07-09 05:19:58 (1 day ago)	Fail2Ban: 79.106.225.42 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5. ... show more Fail2Ban: 79.106.225.42 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 kosada.com	2026-07-07 20:07:19 (3 days ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 Hmorrin	2026-07-06 08:16:14 (4 days ago)		Port Scan
🇺🇸 factor1	2026-07-06 02:43:41 (4 days ago)	Fail2ban at sherman Reports Abuse.	Hacking Brute-Force
🇺🇸 kosada.com	2026-06-25 19:49:03 (2 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇸🇮 extremevital	2026-06-19 06:00:07 (3 weeks ago)	...	Bad Web Bot
Anonymous	2026-06-15 18:40:03 (3 weeks ago)	Web App Attack, Hacking	Hacking Web App Attack
Anonymous	2026-06-11 14:45:23 (4 weeks ago)	Botnet activity. Attribution: Angara Technologies Group / mikhail-smirnov-79830322 \| Attack Signatur ... show more Botnet activity. Attribution: Angara Technologies Group / mikhail-smirnov-79830322 \| Attack Signature Blocked: /wishlist/index/add/product/255/form_key/WIQJsOekaRF08IhF/ \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, li... show less	Hacking Bad Web Bot Web App Attack
🇺🇸 gui-ying233	2026-06-11 00:09:06 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 show less	Bad Web Bot
🇩🇪 Vegascosmetics	2026-06-10 02:58:49 (1 month ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated redirect. Vegas Security	DDoS Attack Hacking Exploited Host
🇨🇭 ALPHANET	2026-06-07 02:50:03 (1 month ago)	Botnet or web spider not respecting robots.txt	DDoS Attack Exploited Host
🇺🇸 TPI-Abuse	2026-05-08 10:13:12 (2 months ago)	(mod_security) mod_security (id:210730) triggered by 79.106.225.42 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 79.106.225.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 08 06:13:07.098776 2026] [security2:error] [pid 2476:tid 2476] [client 79.106.225.42:55534] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|homebuilt.org\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "homebuilt.org"] [uri "/directory/[email protected]"] [unique_id "af23M0oGd4cBgcL3pcuE2QAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇸🇬 mypatricks	2026-04-27 00:25:35 (2 months ago)	79.106.225.42 \| Port: 12520 \| DNS: 79.106.225.42 2026-04-27T08:25:33+08:00 Europe/Tirane \| Credentia ... show more 79.106.225.42 \| Port: 12520 \| DNS: 79.106.225.42 2026-04-27T08:25:33+08:00 Europe/Tirane \| Credential Forgery \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 HTTP/1.1 443 GET \| URL: /stacked-tiered-themed-cake/?48d581959f4dad94ff5e8e1ba3f62806=1777209684&646fd6e03c8c=enabled \| Ref: - \| Country: AL/Albania/+01:00 IP City: Kuçovë 9f29b0cecb5ee296-BEG/Belgrade, Serbia 1 hits/0 secs Robots 3 show less	Brute-Force Web App Attack Blog Spam Web Spam Exploited Host
Anonymous	2026-04-17 21:56:08 (2 months ago)	Automated bot traffic — residential proxy, fake browser fingerprint. UA="Mozilla/5.0 (Windows NT 10. ... show more Automated bot traffic — residential proxy, fake browser fingerprint. UA="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.81 Safari/537.36" show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 39 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 222.134.175.69

🇨🇦 209.89.227.116

🇧🇷 205.210.31.231

🇮🇷 194.5.176.86

🇸🇦 185.206.30.30

🇸🇬 184.168.124.4

🇹🇭 165.154.51.193

🇺🇸 162.216.149.141

🇺🇸 153.66.28.132

🇺🇸 147.185.132.246

🇨🇳 120.48.178.72

🇳🇱 91.92.40.239

🇺🇸 35.233.172.19

🇺🇸 2607:f8b0:4001:c0a::123

🇵🇱 176.53.159.197

🇸🇪 171.25.158.57

🇺🇸 162.216.149.216

🇸🇪 158.174.210.97

🇭🇰 152.32.186.240

🇯🇵 139.162.88.198