JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 85.10.196.172

85.10.196.172 was found in our database!

This IP was reported 93 times. Confidence of Abuse is 14%: ?

14%

ISP	Hetzner Online AG
Usage Type	Data Center/Web Hosting/Transit
ASN	AS24940
Hostname(s)	static.85-10-196-172.clients.your-server.de
Domain Name	hetzner.com
Country	🇩🇪 Germany
City	Nuremberg, Bavaria

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 85.10.196.172

Whois 85.10.196.172

IP Abuse Reports for 85.10.196.172:

This IP address has been reported a total of 93 times from 34 distinct sources. 85.10.196.172 was first reported on January 31st 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-18 08:56:28 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 85.10.196.172 (static.85-10-196-172.clients.you ... show more (mod_security) mod_security (id:210730) triggered by 85.10.196.172 (static.85-10-196-172.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 04:56:25.935799 2026] [security2:error] [pid 25191:tid 25211] [client 85.10.196.172:48160] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.gafm.org\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.gafm.org"] [uri "/http/charteredfinancialmanager.com"] [unique_id "ajOyuREaxOVlXnrVHtUN5AAAAM8"], referer: https://www.gafm.org/http//charteredfinancialmanager.com show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-14 14:31:56 (1 month ago)	PSCDE WEBFORM SPAM 85.10.196.172 (static.85-10-196-172.clients.your-server.de)	Web Spam
Anonymous	2026-06-11 09:20:29 (1 month ago)	FortiWeb WAF: 4 attacks detected. Threat Score: 41250. Types: Client Management(2), Block IP List(2) ... show more FortiWeb WAF: 4 attacks detected. Threat Score: 41250. Types: Client Management(2), Block IP List(2). Origin: Germany. show less	Web App Attack
Anonymous	2026-06-08 12:04:48 (1 month ago)	ALTB WEBFORM SPAM 85.10.196.172 (static.85-10-196-172.clients.your-server.de)	Web Spam
Anonymous	2026-06-08 09:18:41 (1 month ago)	FortiWeb WAF: 407 attacks detected. Threat Score: 40850. Types: Block IP List(204), Client Managemen ... show more FortiWeb WAF: 407 attacks detected. Threat Score: 40850. Types: Block IP List(204), Client Management(203). Origin: Germany. show less	Web App Attack
Anonymous	2026-06-07 12:43:46 (1 month ago)	Banned by Fail2Ban on server	Web App Attack
Anonymous	2026-06-05 23:06:48 (1 month ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: DE, Attack patterns: Mali ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: DE, Attack patterns: Malicious User-Agent show less	Bad Web Bot Web App Attack
Anonymous	2026-06-04 22:09:38 (1 month ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: DE, Attack patterns: Mali ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: DE, Attack patterns: Malicious User-Agent show less	Bad Web Bot Web App Attack
🇩🇪 FeG Deutschland	2026-05-26 10:11:53 (2 months ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 268	Exploited Host Web App Attack
🇧🇪 taivas.nl	2026-05-23 07:02:10 (2 months ago)	Site scraper	Web App Attack
Anonymous	2026-05-20 12:14:38 (2 months ago)	Brute forcing Wordpress login	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-05-12 15:17:07 (2 months ago)	(mod_security) mod_security (id:210730) triggered by 85.10.196.172 (static.85-10-196-172.clients.you ... show more (mod_security) mod_security (id:210730) triggered by 85.10.196.172 (static.85-10-196-172.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 12 11:17:00.262949 2026] [security2:error] [pid 15418:tid 15418] [client 85.10.196.172:7686] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.coolwebsites.org\|F\|2"] [data ".cleveland.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.coolwebsites.org"] [uri "/http;/www.cleveland.com"] [unique_id "agNEbF9xUPXrLe2hKf7ORwAAAAA"], referer: https://www.coolwebsites.org/http;//www.cleveland.com show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Echobit	2026-05-02 17:49:23 (2 months ago)	Crawling, BadBot, Fake User-Agent, Ignore robots.txt	Hacking Bad Web Bot
Anonymous	2026-04-25 12:03:13 (3 months ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: DE, Attack patterns: Mali ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: DE, Attack patterns: Malicious User-Agent show less	Bad Web Bot Web App Attack
Anonymous	2026-04-24 11:02:30 (3 months ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: DE, Attack patterns: Mali ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: DE, Attack patterns: Malicious User-Agent show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 93 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇱🇻 196.196.53.4

🇳🇱 176.65.148.242

🇺🇸 136.108.44.153

🇮🇩 103.59.160.179

🇷🇴 92.118.39.49

🇫🇷 91.231.89.157

🇧🇷 205.210.31.245

🇺🇸 205.210.31.53

🇷🇴 193.32.162.76

🇧🇩 180.94.20.24

🇮🇳 168.144.189.224

🇸🇬 165.232.164.223

🇧🇷 144.22.238.238

🇦🇹 109.70.100.15

🇮🇩 2406:da19:776:6e01:5e45:e22e:8dd3:de5e

🇰🇷 220.124.236.239

🇧🇴 189.28.94.66

🇫🇷 54.38.241.200

🇷🇺 46.63.176.236

🇺🇸 20.40.216.95