JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 85.121.127.132

85.121.127.132 was found in our database!

This IP was reported 150 times. Confidence of Abuse is 100%: ?

100%

ISP	Urban Network Solutions SRL
Usage Type	Data Center/Web Hosting/Transit
ASN	AS9009
Domain Name	urbannetworksolutions.nl
Country	🇳🇱 Netherlands
City	The Hague, South Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 85.121.127.132

Whois 85.121.127.132

IP Abuse Reports for 85.121.127.132:

This IP address has been reported a total of 150 times from 86 distinct sources. 85.121.127.132 was first reported on June 5th 2026, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Sling	2026-06-23 19:59:37 (3 hours ago)	Automated detection: IP accessed 4 sensitive endpoints within 30s on slingexe.com. Paths: /.env.prod ... show more Automated detection: IP accessed 4 sensitive endpoints within 30s on slingexe.com. Paths: /.env.production, /.env, /.git/HEAD, /.env.local. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 Edg/146.0.3856.109. show less	Web App Attack Bad Web Bot Hacking
Anonymous	2026-06-23 15:45:21 (7 hours ago)	85.121.127.132 - - [23/Jun/2026:17:45:18 +0200] "GET /env HTTP/1.1" 404 434 "-" "Mozilla/5.0 (Macint ... show more 85.121.127.132 - - [23/Jun/2026:17:45:18 +0200] "GET /env HTTP/1.1" 404 434 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 85.121.127.132 - - [23/Jun/2026:17:45:18 +0200] "GET /env HTTP/1.1" 404 241 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 85.121.127.132 - - [23/Jun/2026:17:45:18 +0200] "GET /api/.env HTTP/1.1" 404 434 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 85.121.127.132 - - [23/Jun/2026:17:45:18 +0200] "GET /api/.env HTTP/1.1" 404 241 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 85.121.127.132 - - [23/Jun/2026:17:45:19 +0200] "GET /.env HTTP/1.1" 404 434 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15" 85 ... show less	Bad Web Bot Web App Attack
🇩🇪 pigro	2026-06-23 12:47:59 (10 hours ago)	85.121.127.132 - - [23/Jun/2026:14:47:58 +0200] "GET /api/.env HTTP/1.1" 301 5 "-" "Mozilla/5.0 (Mac ... show more 85.121.127.132 - - [23/Jun/2026:14:47:58 +0200] "GET /api/.env HTTP/1.1" 301 5 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 85.121.127.132 - - [23/Jun/2026:14:47:59 +0200] "GET /backend/.env/ HTTP/1.1" 404 2187 "https://smtp.pigro.site/backend/.env" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 Edg/146.0.3856.109" ... show less	Web App Attack
🇫🇷 dynamix	2026-06-23 08:49:34 (14 hours ago)	Multiple WAF Violations	Web App Attack
🇺🇦 URAN Publishing Service	2026-06-23 08:10:43 (14 hours ago)	85.121.127.132 - - [23/Jun/2026:11:10:42 +0300] "GET /backend/.env HTTP/1.1" 404 722 "-" "Mozilla/5. ... show more 85.121.127.132 - - [23/Jun/2026:11:10:42 +0300] "GET /backend/.env HTTP/1.1" 404 722 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15.7; rv:149.0) Gecko/20100101 Firefox/149.0" ... show less	Web App Attack
🇺🇦 URAN Publishing Service	2026-06-23 07:08:31 (15 hours ago)	85.121.127.132 - - [23/Jun/2026:10:08:30 +0300] "GET /backend/.env HTTP/1.1" 404 732 "-" "Mozilla/5. ... show more 85.121.127.132 - - [23/Jun/2026:10:08:30 +0300] "GET /backend/.env HTTP/1.1" 404 732 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 85.121.127.132 - - [23/Jun/2026:10:08:31 +0300] "GET /.env HTTP/1.1" 404 732 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15" ... show less	Web App Attack
🇬🇧 sc user	2026-06-23 05:29:43 (17 hours ago)	Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad ... show more Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad bot behaviour. Technical log details and local server identifiers intentionally omitted for privacy. show less	Bad Web Bot Web App Attack Port Scan
🇩🇪 ghostwarriors	2026-06-22 11:20:03 (1 day ago)	Attempts against non-existent wp-login	Brute-Force Web App Attack
Anonymous	2026-06-22 11:17:34 (1 day ago)	Fail2Ban triggered	Web App Attack
🇩🇰 ScamAware	2026-06-22 08:07:52 (1 day ago)	Detected by Cloudflare Security Events via WordPress automation. Detection: sensitive_files (Sensiti ... show more Detected by Cloudflare Security Events via WordPress automation. Detection: sensitive_files (Sensitive files, source control, config, and backups). Hits from same IP in last 60 minutes: 1. Unique request paths counted internally: 1. Cloudflare action: block. Cloudflare source: firewallCustom. show less	Web App Attack
🇬🇧 sc user	2026-06-22 04:52:56 (1 day ago)	Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad ... show more Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad bot behaviour. Technical log details and local server identifiers intentionally omitted for privacy. show less	Bad Web Bot Web App Attack Port Scan
🇦🇹 neo72	2026-06-21 17:11:22 (2 days ago)	Blocked via IPShield	Brute-Force Web App Attack
🇪🇸 Francisco Vallejo	2026-06-21 11:44:04 (2 days ago)	[Sun Jun 21 13:44:01.148665 2026] [core:info] [pid 2324414:tid 137197730641600] [client 85.121.127.1 ... show more [Sun Jun 21 13:44:01.148665 2026] [core:info] [pid 2324414:tid 137197730641600] [client 85.121.127.132:41998] AH00128: File does not exist: /var/www/franvallejo/backend/.env [Sun Jun 21 13:44:01.264477 2026] [core:info] [pid 2324414:tid 137198787598016] [client 85.121.127.132:41998] AH00128: File does not exist: /var/www/franvallejo/.env [Sun Jun 21 13:44:02.052218 2026] [core:info] [pid 2324414:tid 137197755819712] [client 85.121.127.132:41998] AH00128: File does not exist: /var/www/franvallejo/env [Sun Jun 21 13:44:03.525399 2026] [core:info] [pid 2324414:tid 137197747427008] [client 85.121.127.132:41998] AH00128: File does not exist: /var/www/franvallejo/api/.env [Sun Jun 21 13:44:04.301048 2026] [core:info] [pid 2324414:tid 137198795990720] [client 85.121.127.132:41998] AH00128: File does not exist: /var/www/franvallejo/.env.production ... show less	Brute-Force SSH
Anonymous	2026-06-21 10:02:35 (2 days ago)	85.121.127.132 - - [21/Jun/2026:12:02:35 +0200] "GET /.git/config HTTP/1.1" 301 169 "-" "Mozilla/5.0 ... show more 85.121.127.132 - - [21/Jun/2026:12:02:35 +0200] "GET /.git/config HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 Edg/146.0.3856.109" show less	Web App Attack
🇵🇱 lns.bz	2026-06-20 20:12:03 (3 days ago)	Web app attack [PL.Lu]	Exploited Host Web App Attack

Showing 1 to 15 of 150 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 205.210.31.201

🇺🇸 205.210.31.32

🇲🇦 196.64.230.125

🇲🇰 185.193.240.246

🇮🇳 182.75.197.174

🇨🇳 121.26.29.66

🇰🇷 112.184.12.214

🇧🇷 45.191.31.25

🇺🇸 44.142.7.222

🇺🇸 216.25.89.83

🇧🇷 205.210.31.130

🇺🇸 162.216.149.31

🇩🇪 151.242.147.40

🇬🇧 123.58.207.140

🇨🇳 116.179.37.219

🇭🇰 103.210.21.178

🇩🇪 57.129.81.151

🇩🇪 44.149.26.194

🇳🇱 31.42.176.142

🇨🇳 116.179.37.118