85.155.14.49
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Solid Core Hosting LTD
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS199457
- Domain Name
- solidserver.io
- Country
- 🇩🇪 Germany
- City
- Aachen, North Rhine-Westphalia
Abuse Reports
Total reports
149 from
132 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇩🇪 Skyrider |
crowdsecurity/http-sensitive-files
|
Web App Attack | |
| 🇩🇪 NxtGenIT |
Tanner Honeypot hit, Event Type: index, HTTP Method: GET, User Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15, URI: /.bashrc
|
SSH | |
| 🇩🇪 derLoosi |
HV1.2 Blocked by UFW
|
Port Scan | |
| 🇪🇨 CYBER-SECURITY-MM |
Detected and banned by CrowdSec. Scenario: crowdsecurity/http-sensitive-files. HTTP 404. Path: /.development.env. Evidence: 1 matching alerts.
|
Web App Attack | |
| 🇺🇸 Aurealize |
firewall port scanning detected. 2 or more observation(s) from 2026-11-10T11:13:05.000Z through 2026-11-10T11:13:06.000Z.
|
Port Scan | |
| 🇬🇧 thetomtaylor.co.uk |
Fail2Ban - [WEB]Custom exploit pattern detected on customexploits ... [ice01,ice02,wa01,wa02]
|
Hacking Brute-Force Bad Web Bot Web App Attack | |
| 🇩🇪 D3vNu11 |
Level: (LOW): Mail Abuse via CitrixHoneypot IOC Country: Germany 1x -> Target Country: Frankreich HTTPS
|
Hacking Web App Attack | |
| 🇬🇧 consul.to |
Web attack/malicious scanning detected
|
Web App Attack | |
| Anonymous |
CrowdSec blocked IP for crowdsecurity/http-sensitive-files on localhost
|
Web App Attack | |
| 🇳🇱 Alt255 |
|
Bad Web Bot Web App Attack | |
| 🇸🇬 WMK965 |
|
Port Scan Web App Attack | |
| Anonymous |
85.155.14.49 - - [10/Nov/2026:10:54:00 +0100] "GET /.development.env HTTP/1.1" 402 829 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" ...
|
Web App Attack | |
| 🇳🇱 sembeek |
probing for exposed files and admin pages: 16 attempts within 1 minute, seen by web server log and CrowdSec (reported by RemotePower)
|
Web App Attack | |
| Anonymous |
Honeypot wireguard: source IP triggered 3+ blocked attempts in 24h (ports: 443/tcp (HTTPS))
|
Port Scan | |
| 🇩🇪 23p02732 |
Automated web scanning and malicious probing
|
Brute-Force Bad Web Bot Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown