JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 85.121.215.238

85.121.215.238 was found in our database!

This IP was reported 44 times. Confidence of Abuse is 73%: ?

73%

ISP	Urban Network Solutions SRL
Usage Type	Data Center/Web Hosting/Transit
ASN	AS9009
Domain Name	urbannetworksolutions.nl
Country	🇺🇸 United States of America
City	New York City, New York

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 85.121.215.238

Whois 85.121.215.238

IP Abuse Reports for 85.121.215.238:

This IP address has been reported a total of 44 times from 33 distinct sources. 85.121.215.238 was first reported on May 26th 2026, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 masterguru	2026-05-28 16:09:50 (3 weeks ago)	Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-195)	Hacking Web App Attack
🇦🇹 SchiWaGoA	2026-05-28 13:54:25 (4 weeks ago)	This IP was detected by CrowdSec trigger from crowdsecurity/appsec-vpatch	Web App Attack
🇩🇪 ger-stg-sifi1	2026-05-28 13:22:33 (4 weeks ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
🇮🇳 walkintoadmin	2026-05-28 13:14:57 (4 weeks ago)	scanner — AbuseIPDB Data Center	Bad Web Bot Web App Attack
🇺🇸 CBJ	2026-05-28 12:33:29 (4 weeks ago)	fail2ban: apache-filepath-recon ...	Web App Attack
Anonymous	2026-05-28 11:59:17 (4 weeks ago)	85.121.215.238 - - [28/May/2026:11:59:16 +0000] "GET /.git/config HTTP/1.1" 404 49975 "-" "Mozilla/5 ... show more 85.121.215.238 - - [28/May/2026:11:59:16 +0000] "GET /.git/config HTTP/1.1" 404 49975 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 Edg/146.0.3856.109" ... show less	Bad Web Bot Web App Attack
🇺🇦 URAN Publishing Service	2026-05-28 11:10:22 (4 weeks ago)	85.121.215.238 - - [28/May/2026:14:10:21 +0300] "GET /.env HTTP/1.1" 404 3297 "-" "Mozilla/5.0 (Wind ... show more 85.121.215.238 - - [28/May/2026:14:10:21 +0300] "GET /.env HTTP/1.1" 404 3297 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 Edg/146.0.3856.109" ... show less	Web App Attack
🇬🇧 Aetherweb Ark	2026-05-28 10:31:26 (4 weeks ago)	(mod_security) mod_security (id:949110) triggered by 85.121.215.238 (RO/Romania/-): N in the last X ... show more (mod_security) mod_security (id:949110) triggered by 85.121.215.238 (RO/Romania/-): N in the last X secs show less	Web App Attack
Anonymous	2026-05-28 07:49:23 (4 weeks ago)	Scenarios: http-sensitive-files Total requests: 15 [28/May/2026:07:49:17 +0000] [Client: 85.121.215. ... show more Scenarios: http-sensitive-files Total requests: 15 [28/May/2026:07:49:17 +0000] [Client: 85.121.215.238] HEAD [405] "/" User-Agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 Edg/146.0.3856.109" [28/May/2026:07:49:18 +0000] [Client: 85.121.215.238] HEAD [405] "/" User-Agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 Edg/146.0.3856.109" [28/May/2026:07:49:21 +0000] [Client: 85.121.215.238] GET [404] "/.git/HEAD" User-Agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:149.0) Gecko/20100101 Firefox/149.0" [28/May/2026:07:49:21 +0000] [Client: 85.121.215.238] GET [405] "/.env" User-Agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15" show less	Web App Attack
🇧🇪 cmbplf	2026-05-28 07:42:05 (4 weeks ago)	100 requests with url.path .git/	Brute-Force Bad Web Bot
🇺🇸 TPI-Abuse	2026-05-28 06:36:39 (4 weeks ago)	(mod_security) mod_security (id:210492) triggered by 85.121.215.238 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 85.121.215.238 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 28 02:36:31.534204 2026] [security2:error] [pid 16218:tid 16218] [client 85.121.215.238:36620] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "triplejrealty.com.summithost.com"] [uri "/.git/config"] [unique_id "ahfib8UUzBtjoxBFGpSgcAAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-05-28 06:11:43 (4 weeks ago)	Excessive 404 errors - web scanning/probing	Bad Web Bot
🇺🇸 mnsf	2026-05-28 06:05:01 (4 weeks ago)	Scanning/Probing (11)	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-05-28 03:44:12 (4 weeks ago)	(mod_security) mod_security (id:949110) triggered by 85.121.215.238 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:949110) triggered by 85.121.215.238 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 27 23:44:05.262942 2026] [security2:error] [pid 22472:tid 22472] [client 85.121.215.238:57180] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "toxicnation.com"] [uri "/.git/HEAD"] [unique_id "ahe6BTRI6RRDD296ZH8WWAAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-05-28 03:26:17 (4 weeks ago)	Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-196)	Hacking Web App Attack

Showing 1 to 15 of 44 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.25.89.155

🇮🇶 169.224.4.116

🇺🇸 152.32.205.206

🇨🇦 142.185.244.29

🇮🇶 65.20.138.46

🇰🇷 218.51.148.194

🇮🇶 185.75.224.138

🇨🇳 180.153.236.221

🇺🇸 172.253.214.122

🇺🇸 162.216.149.96

🇨🇳 123.7.155.236

🇬🇧 45.82.76.126

🇺🇸 35.243.240.202

🇳🇱 195.178.110.30

🇺🇸 165.227.73.86

🇳🇱 158.94.210.228

🇮🇩 140.213.6.38

🇨🇳 123.123.204.158

🇨🇳 106.120.42.242

🇺🇸 91.230.168.232