JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 85.121.55.153

85.121.55.153 was found in our database!

This IP was reported 42 times. Confidence of Abuse is 100%: ?

100%

ISP	Urban Network Solutions SRL
Usage Type	Data Center/Web Hosting/Transit
ASN	AS9009
Domain Name	urbannetworksolutions.nl
Country	🇳🇱 Netherlands
City	The Hague, South Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 85.121.55.153

Whois 85.121.55.153

IP Abuse Reports for 85.121.55.153:

This IP address has been reported a total of 42 times from 38 distinct sources. 85.121.55.153 was first reported on June 2nd 2026, and the most recent report was 37 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 masterguru	2026-06-03 09:54:27 (1 day ago)	Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-196)	Hacking Web App Attack
🇳🇱 Joop	2026-06-03 09:31:33 (1 day ago)	2026-06-03 11:31:30 +0200 s16 /.git/config	Web App Attack
🇯🇵 HeliJP	2026-06-03 06:45:59 (1 day ago)	2026-06-03T05:53:53Z - Recognized attacks\bad behavior from IP address 85.121.55.153 on port 443\80 ... show more 2026-06-03T05:53:53Z - Recognized attacks\bad behavior from IP address 85.121.55.153 on port 443\80 (15 daily hits): client denied by server configuration show less	Port Scan Hacking SQL Injection Brute-Force Web App Attack
🇩🇪 Martin Lundstrom	2026-06-03 06:05:12 (1 day ago)	https://www.eagleeye-intelligence.com — WordPress attack. Automatically detected and blocked.	Web App Attack
🇩🇪 4server	2026-06-03 06:03:57 (1 day ago)	[WedJun0308:03:52.1390202026][security2:error][pid1288830:tid1288895][client85.121.55.153:0]ModSecur ... show more [WedJun0308:03:52.1390202026][security2:error][pid1288830:tid1288895][client85.121.55.153:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"massimilianoparquet.ch\"][uri\"/.env.local\"][unique_id\"ah_DyIxwoUGpHIxRRgsAtwAAAFg\"] show less	Port Scan Brute-Force Web App Attack
🇧🇾 lns.bz	2026-06-03 05:02:33 (1 day ago)	.env scanning [BY]	Web App Attack
Anonymous	2026-06-03 04:34:14 (1 day ago)	T: f2b 404 5x	Web App Attack
🇮🇹 madaello	2026-06-03 04:14:55 (1 day ago)	85.121.55.153 - - [03/Jun/2026:06:14:53 +0200] "GET /.env HTTP/1.1" 404 94798 "-" "Mozilla/5.0 (Wind ... show more 85.121.55.153 - - [03/Jun/2026:06:14:53 +0200] "GET /.env HTTP/1.1" 404 94798 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 85.121.55.153 - - [03/Jun/2026:06:14:54 +0200] "GET /.git/HEAD HTTP/1.1" 404 98893 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15.7; rv:149.0) Gecko/20100101 Firefox/149.0" 85.121.55.153 - - [03/Jun/2026:06:14:54 +0200] "GET /env HTTP/1.1" 404 94795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 85.121.55.153 - - [03/Jun/2026:06:14:54 +0200] "GET /.git/config HTTP/1.1" 404 98903 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 Edg/146.0.3856.109" 85.121.55.153 - - [03/Jun/2026:06:14:54 +0200] "GET /config.json HTTP/1.1" 404 98904 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15.7; rv:149.0) Gecko/20100101 Firefox/149.0" 85.121.55.153 - - [03/Jun/2026:06 ... show less	Web App Attack
🇩🇪 peter678263	2026-06-03 04:00:18 (1 day ago)	...	Brute-Force FTP Brute-Force
🇨🇭 4server	2026-06-03 03:06:32 (1 day ago)	[WedJun0305:06:27.4529052026][security2:error][pid934915:tid935134][client85.121.55.153:0]ModSecurit ... show more [WedJun0305:06:27.4529052026][security2:error][pid934915:tid935134][client85.121.55.153:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"364\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"mdd-network.ch.81-17-25-250.cpanel.site\"][uri\"/.git/HEAD\"][unique_id\"ah-aM5bGgH_hqG8dSZpGbgAAAFI\"] show less	Hacking Web App Attack
Anonymous	2026-06-02 23:05:58 (1 day ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 98%, Country: NL, Attack patterns: Clou ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 98%, Country: NL, Attack patterns: Cloud secrets probing show less	Bad Web Bot Web App Attack
Anonymous	2026-06-02 19:09:55 (2 days ago)	(mod_security) mod_security triggered on hostname [redacted] 85.121.55.153 (-)	SQL Injection
🇩🇪 BlueWire Hosting	2026-06-02 17:17:42 (2 days ago)	Probing websites for vulnerabilities	Web App Attack SQL Injection
🇺🇸 kosada.com	2026-06-02 17:13:47 (2 days ago)	Web vulnerability probing: /.env.local	Web App Attack
🇺🇸 TPI-Abuse	2026-06-02 16:27:04 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 85.121.55.153 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 85.121.55.153 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 12:26:57.707458 2026] [security2:error] [pid 18270:tid 18397] [client 85.121.55.153:46392] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hearthandhomestudio.art"] [uri "/.git/config"] [unique_id "ah8EUfbbZROOXDwJsq8OqAAAAEE"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 16 to 30 of 42 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 141.11.100.13

🇰🇪 41.90.100.147

🇺🇸 216.239.34.223

🇳🇱 193.176.31.254

🇫🇮 147.185.133.13

🇺🇸 147.185.132.118

🇰🇷 119.201.59.224

🇨🇳 106.13.182.13

🇺🇸 104.22.42.143

🇹🇷 93.182.106.182

🇬🇧 92.23.164.195

🇵🇱 87.251.64.141

🇫🇷 82.65.16.176

🇮🇷 5.237.23.230

🇬🇧 193.163.125.22

🇮🇹 93.92.76.50

🇳🇱 81.19.216.110

🇩🇪 46.249.99.46

🇭🇰 36.255.220.145

🇰🇷 8.230.17.158