JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 85.121.240.109

85.121.240.109 was found in our database!

This IP was reported 108 times. Confidence of Abuse is 100%: ?

100%

ISP	1GSERVERS, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14315
Domain Name	1gservers.com
Country	🇺🇸 United States of America
City	Phoenix, Arizona

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 85.121.240.109

Whois 85.121.240.109

IP Abuse Reports for 85.121.240.109:

This IP address has been reported a total of 108 times from 69 distinct sources. 85.121.240.109 was first reported on March 9th 2026, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 geot	2026-06-03 15:18:40 (2 weeks ago)	GET /gcp-credentials.json HTTP/1.1 GET /api/v1/settings HTTP/1.1 GET /api/openapi.json HTTP/1.1 GET ... show more GET /gcp-credentials.json HTTP/1.1 GET /api/v1/settings HTTP/1.1 GET /api/openapi.json HTTP/1.1 GET /.well-known/jwks.json HTTP/1.1 GET /vault/secrets/config HTTP/1.1 show less	Hacking Bad Web Bot Web App Attack
🇬🇧 openstrike.co.uk	2026-06-03 05:14:27 (2 weeks ago)	6 attacks on config grabbing URLs (type 2), VC URLs, password grabbing URLs: GET /config.json HTTP/1 ... show more 6 attacks on config grabbing URLs (type 2), VC URLs, password grabbing URLs: GET /config.json HTTP/1.1 GET /.git/config HTTP/1.1 GET /.aws/credentials HTTP/1.1 show less	Hacking
🇫🇷 dynamix	2026-06-03 04:15:27 (2 weeks ago)	Multiple WAF Violations	Web App Attack
Anonymous	2026-06-03 02:38:16 (2 weeks ago)	(mod_security) mod_security triggered on hostname [redacted] 85.121.240.109 (US/United States/-)	SQL Injection
🇧🇷 Halux	2026-06-03 02:15:08 (2 weeks ago)	85.121.240.109 Probing protected path or service	Web App Attack
🇵🇱 nfsec.pl	2026-06-02 23:41:08 (2 weeks ago)	85.121.240.109 - - [02/Jun/2026:23:41:07 +0000] "GET /.git/config HTTP/2.0" 403 1671 "-" "meta-exter ... show more 85.121.240.109 - - [02/Jun/2026:23:41:07 +0000] "GET /.git/config HTTP/2.0" 403 1671 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" 85.121.240.109 - - [02/Jun/2026:23:41:07 +0000] "GET /secrets.yml HTTP/2.0" 404 24459 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot" 85.121.240.109 - - [02/Jun/2026:23:41:07 +0000] "GET /storage/logs/laravel.log HTTP/2.0" 404 24343 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)" 85.121.240.109 - - [02/Jun/2026:23:41:07 +0000] "GET /secrets.json HTTP/2.0" 404 24233 "-" "Mozilla/5.0 (compatible; cohere-ai/1.0; +https://cohere.com)" 85.121.240.109 - - [02/Jun/2026:23:41:07 +0000] "GET /application.yml HTTP/2.0" 404 24130 "-" "Mozilla/5.0 (compatible; cohere-ai/1.0; +https://cohere.com)" ... show less	Web App Attack Exploited Host
🇩🇪 on-com	2026-06-02 21:30:40 (2 weeks ago)	URL scan	Brute-Force Web App Attack
🇩🇪 maxpower	2026-06-02 19:57:12 (2 weeks ago)	(junkbot) REGOLA 8 - Junk Bot Blocked 85.121.240.109 (US/United States/-): 1 in the last 3600 secs; ... show more (junkbot) REGOLA 8 - Junk Bot Blocked 85.121.240.109 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 85.121.240.109 - - [02/Jun/2026:21:57:05 +0200] "GET /application.yml HTTP/2.0" 404 82095 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.2; +https://openai.com/gptbot" "-" host=studioegizi.it show less	Port Scan
🇳🇱 e.fierstra	2026-06-02 19:27:36 (2 weeks ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇩🇪 4server	2026-06-02 19:19:34 (2 weeks ago)	[TueJun0221:19:32.9225022026][security2:error][pid575142:tid575239][client85.121.240.109:0]ModSecuri ... show more [TueJun0221:19:32.9225022026][security2:error][pid575142:tid575239][client85.121.240.109:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"casacarmen.ch\"][uri\"/.git/config\"][unique_id\"ah8sxCRbptRVIX575MMCvAAAAME\"] show less	Port Scan Brute-Force Web App Attack
🇺🇸 interbiznw.com	2026-06-02 16:59:39 (2 weeks ago)	malicious-web-requests-vulnerability-scanning	Hacking Brute-Force Exploited Host Web App Attack
🇬🇧 consul.to	2026-06-02 16:43:19 (2 weeks ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 etu brutus	2026-06-02 15:19:02 (2 weeks ago)	85.121.240.109 Blocked by [Attack Vector List] ...	Hacking Brute-Force Exploited Host
🇺🇸 WellSpring	2026-06-02 08:44:15 (2 weeks ago)	env leak on 760.today/api/.env — WellSpr.ing/NetSentinel civic-AI security layer	Web App Attack
🇩🇪 pltcldvlpr	2026-06-02 08:28:21 (2 weeks ago)	CMS/framework probe: 85.121.240.109 - - [02/Jun/2026:10:28:20 +0200] "GET /secrets.json HTTP/2.0" 40 ... show more CMS/framework probe: 85.121.240.109 - - [02/Jun/2026:10:28:20 +0200] "GET /secrets.json HTTP/2.0" 404 94427 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ClaudeBot/1.0; +mailto:[email protected]" asn=14315 org="1GSERVERS, LLC" country=US ... show less	Web App Attack

Showing 1 to 15 of 108 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 198.235.24.232

🇺🇦 188.163.106.129

🇧🇷 187.72.128.177

🇺🇸 172.174.72.225

🇫🇮 147.185.133.68

🇳🇱 91.92.40.200

🇱🇹 81.30.98.49

🇷🇴 80.94.92.178

🇺🇸 45.156.131.12

🇺🇸 20.169.81.111

🇺🇸 162.216.149.5

🇺🇸 158.94.187.44

🇺🇸 143.198.147.188

🇱🇹 141.98.10.200

🇰🇷 118.194.249.8

🇺🇸 97.74.230.245

🇺🇸 216.25.89.65

🇭🇰 194.187.178.116

🇨🇳 183.56.198.150

🇺🇸 162.216.150.122