JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 85.121.5.42

85.121.5.42 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 56%: ?

56%

ISP	AlexHost SRL
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200019
Hostname(s)	test
Domain Name	alexhost.com
Country	🇲🇩 Moldova (the Republic of)
City	Chisinau, Chisinau Municipality

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 85.121.5.42

Whois 85.121.5.42

IP Abuse Reports for 85.121.5.42:

This IP address has been reported a total of 10 times from 10 distinct sources. 85.121.5.42 was first reported on July 28th 2026, and the most recent report was 15 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-07-31 23:39:42 (15 hours ago)	(mod_security) mod_security triggered on hostname [redacted] 85.121.5.42 (RO/Romania/test)	SQL Injection
🇨🇭 zynex	2026-07-31 22:22:10 (16 hours ago)	URL Probing: /uploads/.env	Web App Attack
🇨🇭 backslash	2026-07-31 20:03:04 (19 hours ago)	block ruleset 3D3AFA921A373ECE19B6BA285C2D722163304638	Bad Web Bot
🇩🇪 4server	2026-07-31 19:59:52 (19 hours ago)	[FriJul3121:59:47.3344822026][security2:error][pid573315:tid573350][client85.121.5.42:0]ModSecurity: ... show more [FriJul3121:59:47.3344822026][security2:error][pid573315:tid573350][client85.121.5.42:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\\|wget\\|python\\|nikto\\|sqlmap\\|acunetix\\|fimap\\|dirbuster\\|cmsmap\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"217\"][id\"990210\"][msg\"Suspicioususer-agentblocked\"][hostname\"www.akastudio.ch\"][uri\"/\"][unique_id\"amz-s69ROlByLe8VR0C5-gAAABc\"] show less	Port Scan Brute-Force Web App Attack
🇳🇱 0xffffffff	2026-07-28 11:21:39 (4 days ago)	[2026-07-28 14:21:38.217199] [authz_core:error] [pid 1113871:tid 129528174335680] [client 85.121.5.4 ... show more [2026-07-28 14:21:38.217199] [authz_core:error] [pid 1113871:tid 129528174335680] [client 85.121.5.42:60418] AH01630: client denied by server configuration: /var/www// , error_notes:wrong-host , URI:'/' [2026-07-28 14:21:38.274527] [authz_core:error] [pid 1113871:tid 129527489492672] [client 85.121.5.42:60418] AH01630: client denied by server configuration: /var/www//secret.json , error_notes:wrong-host , URI:'/secret.json' [2026-07-28 14:21:38.321170] [authz_core:error] [pid 1113871:tid 129528207906496] [client 85.121.5.42:60418] AH01630: client denied by server configuration: /var/www//.env.old , error_notes:backup-files , URI:'/.env.old' [2026-07-28 14:21:38.373042] [authz_core:error] [pid 1113871:tid 129528034723520] [client 85.121.5.42:60418] AH01630: client denied by server configuration: /var/www//.env.docker , error_notes:wrong-host , URI:'/.env.docker' [2026-07-28 14:21:38.423466] [authz_core:error] [pid 1113871:tid 129527481099968] [client 85.121.5.42:60418] AH01630: client denied by server conf show less	Web App Attack Bad Web Bot
🇳🇱 Roderic	2026-07-28 05:56:29 (4 days ago)	(apache_scanners-2) Failed apache-scanners trigger with match [redacted])	Port Scan
🇩🇪 onlyops.app	2026-07-28 04:00:07 (4 days ago)	Web application firewall (ModSecurity) detected malicious traffic \| detected by Fail2Ban (plesk-mods ... show more Web application firewall (ModSecurity) detected malicious traffic \| detected by Fail2Ban (plesk-modsecurity jail) \| onlyops.app show less	Exploited Host
Anonymous	2026-07-28 00:49:57 (4 days ago)	85.121.5.42 - - [27/Jul/2026:21:49:55 -0300] "GET /.env.bak HTTP/1.1" Dest:Port 443 HTTP_Status: 302 ... show more 85.121.5.42 - - [27/Jul/2026:21:49:55 -0300] "GET /.env.bak HTTP/1.1" Dest:Port 443 HTTP_Status: 302 ... show less	Web App Attack
🇩🇪 initsol	2026-07-28 00:44:06 (4 days ago)	[Tue Jul 28 02:44:05.097534 2026] [php:error] [pid 2005435:tid 2005435] [client 85.121.5.42:65046] s ... show more [Tue Jul 28 02:44:05.097534 2026] [php:error] [pid 2005435:tid 2005435] [client 85.121.5.42:65046] script '/var/www/html/config.php' not found or unable to stat [Tue Jul 28 02:44:05.126842 2026] [php:error] [pid 2005489:tid 2005489] [client 85.121.5.42:63578] script '/var/www/html/configuration.php' not found or unable to stat [Tue Jul 28 02:44:05.290026 2026] [php:error] [pid 2005435:tid 2005435] [client 85.121.5.42:65046] script '/var/www/html/info.php' not found or unable to stat ... show less	Brute-Force
🇮🇪 AutosOnShow	2026-07-28 00:41:05 (4 days ago)	blocked for webapp attack \| path requested: /.env \| seen at 2026-07-28 00:40:05.577 \|	Web App Attack

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 211.106.137.135

🇺🇸 173.252.82.41

🇸🇪 51.12.221.15

🇫🇷 185.177.72.29

🇺🇸 162.216.149.98

🇮🇳 157.48.228.228

🇨🇳 124.88.174.143

🇷🇴 92.118.39.209

🇷🇺 88.205.172.170

🇮🇹 82.56.115.101

🇺🇸 66.216.19.50

🇺🇸 47.251.104.244

🇰🇷 220.118.173.234

🇸🇬 185.200.116.77

🇺🇸 173.252.82.40

🇻🇳 113.179.221.223

🇺🇸 85.239.151.10

🇺🇸 74.7.230.24

🇨🇳 42.193.201.58

🇺🇸 34.125.25.249