This IP address has been reported a total of
16
times from
10 distinct
sources.
85.190.242.156 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 3
reports;
Greece
with 3
reports;
United States of America
with 3
reports.
The most common categories in these recent reports were:
Bad Web Bot
8
times;
Port Scan
5
times;
Web App Attack
4
times;
Brute-Force
2
times;
Hacking
1
time.
Old Reports
The most recent abuse report for this IP address is from
. It is possible that this IP is no
longer involved in abusive activities.
Fail2Ban: 85.190.242.156 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5 ...
show moreFail2Ban: 85.190.242.156 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36
show less
Not following 301 redirects — wasted requests | method: GET | path: /wp-content/uploads/2018/09/shee ...
show moreNot following 301 redirects — wasted requests | method: GET | path: /wp-content/uploads/2018/09/sheer-curtain-scarf-style-embroidered-window-gauze-voile-curtains-bedroom-bright-flowers-sheer-curta | ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 | 2026-10-01 17:34 UTC
show less
Repeated requests for suspicious nonexistent URLs, for example: /news-sitemap.xml (HTTP/1.1 port 443 ...
show moreRepeated requests for suspicious nonexistent URLs, for example: /news-sitemap.xml (HTTP/1.1 port 443, bogus vhost, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36")
show less
Web App Attack
Anonymous
Image scraping bot bypassing firewall/robots.txt restrictions in getImage.asp
This address requests our sites over plain http, is answered with a redirect to https, and never fol ...
show moreThis address requests our sites over plain http, is answered with a redirect to https, and never follows it — over and over. A browser follows redirects; a scanner enumerating hosts does not. It reads nothing it asks for and only loads the server; blocked. Please check what runs on this address. | method: GET | path: /wp-content/uploads/best-25-overarching-floor-lamp-ideas-on-pinterest-west-elm-dining.jpg | 2026-09-27 21:49 UTC
show less
Active Response: IP 85.190.242.156 Blocked via Firewall Drop. Threat Score: 3.9/10 (LOW). Confidence ...
show moreActive Response: IP 85.190.242.156 Blocked via Firewall Drop. Threat Score: 3.9/10 (LOW). Confidence: 30%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 40%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT
show less
Hacking
Web App Attack
Anonymous
Automated scraper: solved anti-bot JS/Turnstile challenge via residential proxy, then crawled produc ...
show moreAutomated scraper: solved anti-bot JS/Turnstile challenge via residential proxy, then crawled product pages without loading any page assets (CSS/JS/images) - consistent with headless scripted access rather than a real browser session.
show less
This address requests our sites over plain http, is answered with a redirect to https, and never fol ...
show moreThis address requests our sites over plain http, is answered with a redirect to https, and never follows it — over and over. A browser follows redirects; a scanner enumerating hosts does not. It reads nothing it asks for and only loads the server; blocked. Please check what runs on this address. | method: GET | path: /en/images/emailmarketing/castelbanner.jpg | 2026-09-22 19:28 UTC
show less
