JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 198.46.129.85

198.46.129.85 was found in our database!

This IP was reported 31 times. Confidence of Abuse is 38%: ?

38%

ISP	HostPapa
Usage Type	Data Center/Web Hosting/Transit
ASN	AS36352
Hostname(s)	198-46-129-85-host.colocrossing.com
Domain Name	colocrossing.com
Country	🇺🇸 United States of America
City	Buffalo, New York

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 198.46.129.85

Whois 198.46.129.85

IP Abuse Reports for 198.46.129.85:

This IP address has been reported a total of 31 times from 15 distinct sources. 198.46.129.85 was first reported on March 28th 2026, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 CounterScrape	2026-07-05 01:01:45 (3 days ago)	CounterScrape Deception: Bot identified as EXPLOIT_SCANNER (Vulnerability / Exploit Scanning). Trapp ... show more CounterScrape Deception: Bot identified as EXPLOIT_SCANNER (Vulnerability / Exploit Scanning). Trapped in honeypot. Concurrency hits: 2. Bandwidth drained: 0.0 MB. show less	Bad Web Bot Port Scan
🇺🇸 CounterScrape	2026-07-03 00:02:32 (5 days ago)	CounterScrape Deception: Bot identified as EXPLOIT_SCANNER (Vulnerability / Exploit Scanning). Trapp ... show more CounterScrape Deception: Bot identified as EXPLOIT_SCANNER (Vulnerability / Exploit Scanning). Trapped in honeypot. Concurrency hits: 2. Bandwidth drained: 0.0 MB. show less	Bad Web Bot Port Scan
🇺🇸 CounterScrape	2026-07-01 22:01:06 (6 days ago)	CounterScrape Deception: Bot identified as EXPLOIT_SCANNER (Vulnerability / Exploit Scanning). Trapp ... show more CounterScrape Deception: Bot identified as EXPLOIT_SCANNER (Vulnerability / Exploit Scanning). Trapped in honeypot. Concurrency hits: 2. Bandwidth drained: 0.0 MB. show less	Bad Web Bot Port Scan
🇺🇸 CounterScrape	2026-06-30 22:00:24 (1 week ago)	CounterScrape Deception: Bot identified as EXPLOIT_SCANNER (Vulnerability / Exploit Scanning). Trapp ... show more CounterScrape Deception: Bot identified as EXPLOIT_SCANNER (Vulnerability / Exploit Scanning). Trapped in honeypot. Concurrency hits: 2. Bandwidth drained: 0.0 MB. show less	Bad Web Bot Port Scan
🇺🇸 CounterScrape	2026-06-29 21:03:44 (1 week ago)	CounterScrape Deception: Bot identified as EXPLOIT_SCANNER (Vulnerability / Exploit Scanning). Trapp ... show more CounterScrape Deception: Bot identified as EXPLOIT_SCANNER (Vulnerability / Exploit Scanning). Trapped in honeypot. Concurrency hits: 2. Bandwidth drained: 0.0 MB. show less	Bad Web Bot Port Scan
🇺🇸 TPI-Abuse	2026-06-29 12:47:00 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 198.46.129.85 (198-46-129-85-host.colocrossing. ... show more (mod_security) mod_security (id:210492) triggered by 198.46.129.85 (198-46-129-85-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 29 08:46:53.459135 2026] [security2:error] [pid 28563:tid 28563] [client 198.46.129.85:58639] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pecholobo.com"] [uri "/.env"] [unique_id "akJpPR68plmH4Q4YTXAmswAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-29 11:10:01 (1 week ago)	suspicious request in access.log	Web App Attack
🇳🇴 Bots.go.to.hell	2026-06-29 08:19:05 (1 week ago)	This IP was detected by CrowdSec triggering crowdsecurity/vpatch-env-access	Web App Attack Hacking
🇺🇸 CounterScrape	2026-06-28 20:03:35 (1 week ago)	CounterScrape Deception: Bot identified as EXPLOIT_SCANNER (Vulnerability / Exploit Scanning). Trapp ... show more CounterScrape Deception: Bot identified as EXPLOIT_SCANNER (Vulnerability / Exploit Scanning). Trapped in honeypot. Concurrency hits: 2. Bandwidth drained: 0.0 MB. show less	Bad Web Bot Port Scan
🇺🇸 TPI-Abuse	2026-06-28 06:57:57 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 198.46.129.85 (198-46-129-85-host.colocrossing. ... show more (mod_security) mod_security (id:210492) triggered by 198.46.129.85 (198-46-129-85-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 28 02:57:50.531543 2026] [security2:error] [pid 11425:tid 11425] [client 198.46.129.85:58116] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "happyjackmc.com"] [uri "/.env"] [unique_id "akDF7k-KlnYIFpLS7nAxggAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-28 06:20:36 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 198.46.129.85 (198-46-129-85-host.colocrossing. ... show more (mod_security) mod_security (id:210492) triggered by 198.46.129.85 (198-46-129-85-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 28 02:20:30.680532 2026] [security2:error] [pid 12638:tid 12638] [client 198.46.129.85:51368] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gsvgallery.perissosdigitalmarketing.com"] [uri "/.env"] [unique_id "akC9LnUSqtHUITck0nVpdwAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 CounterScrape	2026-06-27 19:21:50 (1 week ago)	CounterScrape Deception: Bot identified as EXPLOIT_SCANNER (Vulnerability / Exploit Scanning). Trapp ... show more CounterScrape Deception: Bot identified as EXPLOIT_SCANNER (Vulnerability / Exploit Scanning). Trapped in honeypot. Concurrency hits: 2. Bandwidth drained: 0.0 MB. show less	Bad Web Bot Port Scan
🇮🇹 VHosting	2026-06-27 15:00:11 (1 week ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇩🇪 Carsten	2026-06-27 12:32:46 (1 week ago)	GET [.env]	Port Scan
🇷🇴 iulianh	2026-06-14 21:48:25 (3 weeks ago)	25,465,587	Brute-Force SSH

Showing 1 to 15 of 31 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇰 202.47.32.51

🇫🇮 147.185.133.121

🇧🇷 128.201.9.152

🇻🇳 116.100.1.132

🇫🇷 91.231.89.95

🇳🇱 91.92.40.204

🇳🇱 45.148.10.141

🇮🇹 2.228.163.157

🇷🇴 193.46.255.86

🇺🇸 192.241.141.144

🇺🇸 185.198.240.78

🇨🇳 175.42.91.201

🇮🇹 72.146.184.66

🇳🇱 45.148.10.147

🇺🇸 173.239.240.25

🇨🇳 111.26.63.85

🇬🇧 109.180.75.23

🇮🇳 103.41.39.53

🇵🇱 94.26.88.31

🇬🇧 89.37.172.158