85.155.14.58
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Solid Core Hosting LTD
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS199457
- Domain Name
- solidserver.io
- Country
- 🇻🇬 Virgin Islands (British)
- City
- Road Town
Abuse Reports
Total reports
34 from
31 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| Anonymous |
Fail2Ban: request for a known-malicious path (.env, .git, wp-login, actuator, ...) on a public web server; honeypot hit, banned on first attempt.
|
Web App Attack Bad Web Bot | |
| 🇧🇷 ICS Labs |
ICS Labs threat intelligence (ICS Feeds): Hacking. Last observed 2026-11-13 UTC.
|
Hacking | |
| 🇺🇸 Som1ght3n |
IP 85.155.14.58 attempted to access the sensitive /.env file on the server, triggering a crowdsecurity/http-sensitive-files scenario.
|
Hacking | |
| 🇺🇸 aks4226 |
Bot search, attacking common web applications.
|
Web App Attack | |
| 🇮🇪 AutosOnShow |
blocked for webapp attack | path requested: /.settings.json | seen at 2026-11-13 05:19:40.174 |
|
Web App Attack | |
| Anonymous |
IP banned by Fail2Ban in jail nginx-abusive-ips
|
Web App Attack Brute-Force Bad Web Bot | |
| 🇮🇹 mgarofano80 |
|
Brute-Force Web App Attack | |
| 🇫🇷 uthul |
T-Pot honeypot: 474 hits on ports [80, 443] (automated)
|
Port Scan Web App Attack | |
| 🇺🇸 tdamg |
Automated probing for secret and config files (.env, cloud credential files): 17 refused requests to 17 distinct paths (HTTP 403/404), 2026-11-12 23:55 to 23:55 UTC. Blocked at firewall.
|
Web App Attack Hacking | |
| Anonymous |
Fail2Ban: request for a known-malicious path (.env, .git, wp-login, actuator, ...) on a public web server; honeypot hit, banned on first attempt.
|
Web App Attack Bad Web Bot | |
| 🇺🇸 MakoWish |
Fuzzing for misconfigured web servers.
|
Hacking Web App Attack | |
| 🇺🇸 zwebvigil |
|
Web App Attack | |
| 🇧🇷 Vieira Filho |
85.155.14.58 - - [12/Nov/2026:05:00:35 -0300] [35.198.31.82:80] "35.198.31.82" "GET /.env HTTP/1.1" 404 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0" 0.000
...
|
Brute-Force Web App Attack Exploited Host | |
| 🇮🇪 AutosOnShow |
blocked for webapp attack | path requested: /.settings.local.json | seen at 2026-11-12 07:10:53.772 |
|
Web App Attack | |
| 🇺🇸 mnsf |
Too many Status 50X (50)
|
Brute-Force Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown