AbuseIPDB » 85.120.217.95
85.120.217.95
This IP was reported 7 times. Confidence of
Abuse
is 15% : ?
ISP
AlexHost SRL
Usage Type
Data Center/Web Hosting/Transit
ASN
AS200019
Hostname(s)
srv1.coolaidbeans.com
Domain Name
alexhost.com
Country
🇷🇴
Romania
City
Bucharest, Bucharest
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 85.120.217.95 :
This IP address has been reported a total of
7
times from
2 distinct
sources.
85.120.217.95 was first reported on
July 17th 2026 , and the most recent report was
3 hours ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇦🇺
paulshipley.com.au
2026-07-19 16:50:30
(3 hours ago)
[Mon Jul 20 02:50:28.877777 2026] [security2:error] [pid 1101] [client 85.120.217.95:36680] [client ...
show more
[Mon Jul 20 02:50:28.877777 2026] [security2:error] [pid 1101] [client 85.120.217.95:36680] [client 85.120.217.95] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "valueaddedpromotions.com.au"] [uri "/"] [unique_id "al0AVN3CDUHGqT8ROw9WXQAAAAA"]
...
show less
Web App Attack
🇦🇺
paulshipley.com.au
2026-07-19 04:34:19
(16 hours ago)
[Sun Jul 19 14:34:18.614321 2026] [security2:error] [pid 870410] [client 85.120.217.95:58768] [clien ...
show more
[Sun Jul 19 14:34:18.614321 2026] [security2:error] [pid 870410] [client 85.120.217.95:58768] [client 85.120.217.95] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dance4fitness.com.au"] [uri "/"] [unique_id "alxTyuPzOQbe8KVF8pmP1wAAABU"]
...
show less
Web App Attack
🇦🇺
paulshipley.com.au
2026-07-18 19:54:10
(1 day ago)
[Sun Jul 19 05:54:09.078352 2026] [security2:error] [pid 803073] [client 85.120.217.95:46458] [clien ...
show more
[Sun Jul 19 05:54:09.078352 2026] [security2:error] [pid 803073] [client 85.120.217.95:46458] [client 85.120.217.95] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ccideas.com.au"] [uri "/"] [unique_id "alvZ4eyUsAzEgaCQn_PbgwAAAAY"]
...
show less
Web App Attack
🇦🇺
paulshipley.com.au
2026-07-18 14:32:47
(1 day ago)
[Sun Jul 19 00:32:46.820925 2026] [security2:error] [pid 788847] [client 85.120.217.95:39680] [clien ...
show more
[Sun Jul 19 00:32:46.820925 2026] [security2:error] [pid 788847] [client 85.120.217.95:39680] [client 85.120.217.95] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "paulshipley.com.au"] [uri "/"] [unique_id "aluOjpUw_v4G1ndvwo6TugAAAAs"]
...
show less
Web App Attack
🇦🇺
paulshipley.com.au
2026-07-18 10:37:26
(1 day ago)
[Sat Jul 18 20:37:26.000523 2026] [security2:error] [pid 726881] [client 85.120.217.95:36704] [clien ...
show more
[Sat Jul 18 20:37:26.000523 2026] [security2:error] [pid 726881] [client 85.120.217.95:36704] [client 85.120.217.95] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "bermanfamily.com.au"] [uri "/"] [unique_id "altXZW_Xp2beADbJ4o4s6AAAAAI"]
...
show less
Web App Attack
🇦🇺
paulshipley.com.au
2026-07-18 03:31:04
(1 day ago)
[Sat Jul 18 13:31:03.319241 2026] [security2:error] [pid 692357] [client 85.120.217.95:48780] [clien ...
show more
[Sat Jul 18 13:31:03.319241 2026] [security2:error] [pid 692357] [client 85.120.217.95:48780] [client 85.120.217.95] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "angleseaarthouse.com.au"] [uri "/"] [unique_id "alrzd88bhE9n6zlODpuvoAAAAAQ"]
...
show less
Web App Attack
🇨🇦
Anytech
2026-07-17 08:03:42
(2 days ago)
Blocked by Conn-Monitor: http-bad-user-agent
Web App Attack
Bad Web Bot
Showing 1 to
7
of 7 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: