JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 74.244.85.1

74.244.85.1 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 24%: ?

24%

ISP	SpaceX Services, Inc.
Usage Type	Fixed Line ISP
ASN	AS14593
Hostname(s)	customer.mdrdesp1.isp.starlink.com
Domain Name	spacex.com
Country	🇸🇳 Senegal
City	Dakar, Dakar

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 74.244.85.1

Whois 74.244.85.1

IP Abuse Reports for 74.244.85.1:

This IP address has been reported a total of 16 times from 11 distinct sources. 74.244.85.1 was first reported on February 1st 2026, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 gui-ying233	2026-07-27 00:07:01 (3 days ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
Anonymous	2026-07-25 20:24:51 (4 days ago)	denied traffic to a non-approved destination port. destination port 24642.	Port Scan
🇺🇸 kosada.com	2026-06-29 10:52:36 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇩🇪 Vegascosmetics	2026-06-27 13:28:15 (1 month ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated redirect. Vegas Security	DDoS Attack Hacking Exploited Host
🇫🇮 iamxorum	2026-05-24 00:09:33 (2 months ago)	2026-05-24T00:09:33.287626+00:00 XRM-01 kernel: [TELNET-TRAP] IN=eth0 OUT= MAC=92:00:06:e6:da:95:d2: ... show more 2026-05-24T00:09:33.287626+00:00 XRM-01 kernel: [TELNET-TRAP] IN=eth0 OUT= MAC=92:00:06:e6:da:95:d2:74:7f:6e:37:e3:08:00 SRC=74.244.85.1 DST=46.62.222.43 LEN=40 TOS=0x00 PREC=0x00 TTL=50 ID=21982 PROTO=TCP SPT=34549 DPT=23 WINDOW=53428 RES=0x00 SYN URGP=0 ... show less	Port Scan IoT Targeted
🇬🇧 PeravixGroup	2026-05-23 23:06:29 (2 months ago)	Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: ME ... show more Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: MEDIUM. Aaran.cloud show less	IoT Targeted Brute-Force
🇺🇸 xmission.com	2026-05-12 16:53:19 (2 months ago)	Blocked by UFW (TCP on 9101) Source port: 29455 TTL: 109 Packet length: 52 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 9101) Source port: 29455 TTL: 109 Packet length: 52 TOS: 0x08 This report (for 74.244.85.1) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 Hiigara	2026-05-03 00:31:11 (2 months ago)	connection attempt : 74.244.85.1 on port : tcp/23 (Telnet)	Port Scan
Anonymous	2026-04-26 12:27:48 (3 months ago)	Unauthorized connection attempt on Port 23	Port Scan Hacking Exploited Host
🇺🇸 xmission.com	2026-04-17 19:06:08 (3 months ago)	Blocked by UFW (TCP on 9101) Source port: 29265 TTL: 109 Packet length: 52 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 9101) Source port: 29265 TTL: 109 Packet length: 52 TOS: 0x08 This report (for 74.244.85.1) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇸🇬 mypatricks	2026-03-24 10:04:30 (4 months ago)	74.244.85.1 \| Port: 13762 \| DNS: customer.lgosnga1.isp.starlink.com 2026-03-24T18:04:29+08:00 Africa ... show more 74.244.85.1 \| Port: 13762 \| DNS: customer.lgosnga1.isp.starlink.com 2026-03-24T18:04:29+08:00 Africa/Dakar \| Fake HTTP Protocol detected! \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36 HTTP/1.1 443 GET \| URL: /account/create/?1755669289-nofollow-177_241_44_218badbot= \| Ref: - \| Country: SN/Senegal/+00:00 IP City: Dakar Linux 9e14da13fc688c88-MAD/Madrid, Spain 1 hits/0 secs Robots 2 show less	Brute-Force Web App Attack Blog Spam Web Spam Exploited Host
🇺🇸 xmission.com	2026-03-21 20:26:08 (4 months ago)	Blocked by UFW (TCP on 9101) Source port: 64116 TTL: 108 Packet length: 52 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 9101) Source port: 64116 TTL: 108 Packet length: 52 TOS: 0x08 This report (for 74.244.85.1) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 TPI-Abuse	2026-03-18 03:53:52 (4 months ago)	(mod_security) mod_security (id:217210) triggered by 74.244.85.1 (customer.lgosnga1.isp.starlink.com ... show more (mod_security) mod_security (id:217210) triggered by 74.244.85.1 (customer.lgosnga1.isp.starlink.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 17 23:53:48.986730 2026] [security2:error] [pid 16635:tid 16635] [client 74.244.85.1:22223] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?i:(?:[a-z]{3,10}\\\\s+(?:\\\\w{3,7}?://[\\\\w\\\\-\\\\./](?::\\\\d+)?)?/[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S])?\|connect (?:\\\\d{1,3}\\\\.){3}\\\\d{1,3}\\\\.?(?::\\\\d+)?\|options \\\\)\\\\s+[\\\\w\\\\./]+\|get /[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "114"] [id "217210"] [rev "1"] [msg "COMODO WAF: Invalid HTTP Request Line\|\|moon7improvess.xyz\|F\|4"] [data "GET http://moon7improvess.xyz HTTP/1.1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "moon7improvess.xyz"] [uri "/"] [unique_id "abohzF7Yr4U4L_4a5JT2CQAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-03-15 00:21:12 (4 months ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇺🇸 matt	2026-03-04 03:30:45 (4 months ago)	DDOS attack with query parameters attempting to overload WordPress site.	DDoS Attack

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 204.10.161.70

🇨🇳 117.62.22.127

🇳🇱 85.11.167.16

🇬🇧 35.203.210.62

🇬🇧 35.203.210.39

🇮🇳 202.141.44.136

🇩🇪 194.37.80.157

🇳🇱 192.253.248.59

🇹🇷 176.233.244.114

🇮🇩 160.187.174.22

🇪🇸 158.158.105.63

🇻🇳 152.32.250.188

🇰🇪 102.210.149.236

🇨🇳 36.250.221.250

🇬🇧 35.203.211.183

🇷🇺 193.233.48.169

🇮🇳 172.253.230.154

🇷🇺 95.26.196.165

🇹🇷 94.154.43.233

🇬🇷 87.202.32.119