JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 153.75.85.209

153.75.85.209 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 98%: ?

98%

ISP	CLOUDZY A I INFORMATION TECHNOLOGY L.L.C
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14956
Domain Name	cloudzy.com
Country	🇳🇱 Netherlands
City	Zaandam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 153.75.85.209

Whois 153.75.85.209

IP Abuse Reports for 153.75.85.209:

This IP address has been reported a total of 20 times from 20 distinct sources. 153.75.85.209 was first reported on July 11th 2026, and the most recent report was 9 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-07-24 10:57:48 (9 hours ago)	153.75.85.209 - - [24/Jul/2026:12:57:47 +0200] "GET /cgi-bin/magicBox.cgi?action=getDeviceType HTTP/ ... show more 153.75.85.209 - - [24/Jul/2026:12:57:47 +0200] "GET /cgi-bin/magicBox.cgi?action=getDeviceType HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" ... show less	Brute-Force Web App Attack
🇩🇪 MaxMeier	2026-07-24 10:02:11 (10 hours ago)	153.75.85.209 - - [24/Jul/2026:12:01:10 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 1 ... show more 153.75.85.209 - - [24/Jul/2026:12:01:10 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 153.75.85.209 - - [24/Jul/2026:12:01:10 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 153.75.85.209 - - [24/Jul/2026:12:01:10 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 153.75.85.209 - - [24/Jul/2026:12:01:10 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 153.75.85.209 - - [24/Jul/2026:12:01:10 +0200] "GET /ISAPI/System/deviceInfo HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 153.75.85.209 - - [24/Jul/2026:12:01:10 +0200] "GET /ISAPI/System/deviceInfo HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 153.75.85.209 - - [24/Jul/2026:12:01:10 +0200] "GET /ISAPI/System/deviceInfo H ... show less	Bad Web Bot Web App Attack
🇳🇱 soverin	2026-07-24 09:25:28 (11 hours ago)	Network scan on port 80	Email Spam
Anonymous	2026-07-24 08:38:09 (11 hours ago)	fail2ban: Sensitive web probes detected	Web App Attack
🇳🇱 oisecnet	2026-07-23 21:01:56 (23 hours ago)	Automated report: Unauthorized vulnerability scanning detected on 2026-07-23. 6 requests from this I ... show more Automated report: Unauthorized vulnerability scanning detected on 2026-07-23. 6 requests from this IP. show less	Brute-Force Web App Attack SSH
🇩🇪 pltcldvlpr	2026-07-23 18:20:40 (1 day ago)	CMS/framework probe: 153.75.85.209 - - [23/Jul/2026:20:20:40 +0200] "GET /cgi-bin/magicBox.cgi?actio ... show more CMS/framework probe: 153.75.85.209 - - [23/Jul/2026:20:20:40 +0200] "GET /cgi-bin/magicBox.cgi?action=getDeviceType HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" asn=14956 org="RouterHosting LLC" country=NL ... show less	Web App Attack
Anonymous	2026-07-23 17:05:00 (1 day ago)	Http Port:80 (http_status:403) - Agent:Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) li ... show more Http Port:80 (http_status:403) - Agent:Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko show less	Web App Attack
🇳🇱 i-turnradio.nl	2026-07-22 04:07:30 (2 days ago)	2026-07-22 @ 06:07:29 (CET) ~ Blocked for trying to access: /ISAPI/System/deviceInfo	Web App Attack
🇳🇱 ReyhZhao	2026-07-22 04:03:20 (2 days ago)	Bunkerweb ModSecurity alert: Potential Remote Command Execution (RCE) detected. Unix shell code was ... show more Bunkerweb ModSecurity alert: Potential Remote Command Execution (RCE) detected. Unix shell code was identified within the request arguments, triggering a security rule designed to prevent application attacks. show less	Brute-Force
🇫🇮 6kilowatti	2026-07-22 02:25:25 (2 days ago)	153.75.85.209 - - [22/Jul/2026:02:25:20 +0000] "GET /cgi-bin/magicBox.cgi?action=getDeviceType HTTP/ ... show more 153.75.85.209 - - [22/Jul/2026:02:25:20 +0000] "GET /cgi-bin/magicBox.cgi?action=getDeviceType HTTP/1.1" 404 122 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" ... show less	Web App Attack
🇫🇷 GoodOldTOS	2026-07-22 00:59:22 (2 days ago)	Bad keywords detected in request: /cgi-bin/	Web App Attack
🇨🇭 Elysium Security	2026-07-21 18:54:08 (3 days ago)	Mass port scanning on a whole network	Port Scan
🇩🇪 Starburst SysOp Team	2026-07-19 04:26:44 (5 days ago)	Host header is a numeric IP address. Pattern match "(?:^( (920350-nue6-2)	Hacking Bad Web Bot
🇵🇱 UMP-PL	2026-07-19 04:01:29 (5 days ago)	Webserver scan (backups, phpadmin, etc.)	Web App Attack
🇸🇰 GOVCERT	2026-07-19 03:36:24 (5 days ago)	Excessive Firewall Denies	DDoS Attack Web Spam

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 205.210.31.200

🇺🇸 18.213.70.100

🇩🇪 193.124.20.253

🇺🇸 162.144.249.8

🇻🇳 123.16.213.84

🇦🇺 118.211.165.46

🇸🇬 101.47.27.73

🇫🇮 62.238.41.177

🇺🇸 51.81.171.148

🇲🇾 49.124.151.82

🇫🇮 31.76.77.218

🇮🇳 20.198.48.84

🇿🇦 129.151.191.139

🇸🇬 114.119.135.215

🇸🇬 51.79.180.231

🇲🇾 49.124.132.53

🇳🇱 45.148.10.141

🇨🇭 20.203.142.71

🇮🇷 5.159.49.46

🇺🇸 2607:f8b0:4004:1000::121