JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 85.192.56.190

85.192.56.190 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 58%: ?

58%

ISP	AEZA GROUP Ltd
Usage Type	Data Center/Web Hosting/Transit
ASN	AS216246
Domain Name	aeza.ru
Country	🇷🇺 Russian Federation
City	Moscow, Moscow

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 85.192.56.190

Whois 85.192.56.190

IP Abuse Reports for 85.192.56.190:

This IP address has been reported a total of 14 times from 13 distinct sources. 85.192.56.190 was first reported on July 4th 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇾 maxdcy	2026-07-05 08:00:30 (1 week ago)	Blocked by IPFire firewall/IPS: 3 hostile probe/scan attempts to public HTTPS/HTTP on Jul 5. Listed ... show more Blocked by IPFire firewall/IPS: 3 hostile probe/scan attempts to public HTTPS/HTTP on Jul 5. Listed on threat-intel feeds (Spamhaus/Dshield/CINS). Origin: AS216246 - Aeza Group LLC. show less	Port Scan Hacking
🇫🇷 ISPLtd	2026-07-05 01:05:31 (1 week ago)	Jul 4 22:05:27 85.192.56.190 TCP SPT=64302 DPT=3000 SYN Jul 4 22:05:28 85.192.56.190 TCP SPT=64302 ... show more Jul 4 22:05:27 85.192.56.190 TCP SPT=64302 DPT=3000 SYN Jul 4 22:05:28 85.192.56.190 TCP SPT=64302 DPT=3000 SYN Jul 4 22:05:30 85.192.56.190 TCP SPT=64302 ... show less	Port Scan
🇺🇸 xxkodedxx	2026-07-04 22:32:23 (1 week ago)	[Zorvexus edge-defense] Edge-block (probe URI / bad UA / hostile vhost) Trigger: 4× edge-block in 10 ... show more [Zorvexus edge-defense] Edge-block (probe URI / bad UA / hostile vhost) Trigger: 4× edge-block in 10m window. Origin: RU / AS216246 Aeza Group LLC Active: 22:32:13→22:32:14 UTC Volume: 4 HTTP req Probed: /_next/static/, /index, /, /_next Status mix: 444×4 Vhost fishing: 67.217.240.72 UA: "Mozilla/5.0" Auto-banned 30d. zorvexus-banner. show less	Bad Web Bot Web App Attack
🇩🇪 VentryShield	2026-07-04 20:48:57 (1 week ago)	p0t honeypot: unknown connection on port 8080/tcp, 101 bytes received from client	Port Scan
Anonymous	2026-07-04 18:41:15 (1 week ago)	"POST /cgi-bin/php-cgi?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input+%ADd+display_ ... show more "POST /cgi-bin/php-cgi?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input+%ADd+display_errors%3d0 HTTP/1.0" show less	Hacking Web App Attack
🇩🇪 shodanki	2026-07-04 14:07:09 (1 week ago)	[Sat Jul 04 16:07:08.925855 2026] [cgi:error] [pid 18921] [client 85.192.56.190:57909] script not fo ... show more [Sat Jul 04 16:07:08.925855 2026] [cgi:error] [pid 18921] [client 85.192.56.190:57909] script not found or unable to stat: /var/www/cgi-bin/php-cgi [Sat Jul 04 16:07:08.925907 2026] [cgi:error] [pid 17251] [client 85.192.56.190:57901] script not found or unable to stat: /var/www/cgi-bin/php-cgi.exe [Sat Jul 04 16:07:08.929819 2026] [cgi:error] [pid 14465] [client 85.192.56.190:57900] script not found or unable to stat: /var/www/cgi-bin/php-cgi.exe [Sat Jul 04 16:07:08.964914 2026] [cgi:error] [pid 8891] [client 85.192.56.190:57910] script not found or unable to stat: /var/www/cgi-bin/php-cgi [Sat Jul 04 16:07:08.980584 2026] [cgi:error] [pid 2232] [client 85.192.56.190:57903] script not found or unable to stat: /var/www/cgi-bin/php-cgi.exe ... show less	Brute-Force Web App Attack SSH
🇩🇪 vmd56152.contaboserver.net	2026-07-04 13:48:03 (1 week ago)	[Sat Jul 04 15:48:00.555112 2026] [cgid:error] [pid 1682451:tid 140210868311808] [client 85.192.56.1 ... show more [Sat Jul 04 15:48:00.555112 2026] [cgid:error] [pid 1682451:tid 140210868311808] [client 85.192.56.190:61413] AH01264: script not found or unable to stat: /var/www/cgi-bin/php-cgi.exe [Sat Jul 04 15:48:00.600085 2026] [cgid:error] [pid 1682451:tid 140209802962688] [client 85.192.56.190:61503] AH01264: script not found or unable to stat: /var/www/cgi-bin/php-cgi.exe ... show less	Bad Web Bot
🇩🇪 getdk	2026-07-04 12:52:29 (1 week ago)	[Sat Jul 04 12:52:28.672610 2026] [security2:error] [pid 3564928] [client 85.192.56.190:56629] [clie ... show more [Sat Jul 04 12:52:28.672610 2026] [security2:error] [pid 3564928] [client 85.192.56.190:56629] [client 85.192.56.190] ModSecurity: Access denied with code 403 (ph ... show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 nyt	2026-07-04 12:22:09 (1 week ago)	Empty UA + error, CGI Probe, Empty UA + POST	Web App Attack
🇫🇮 Kimmo Rieskaniemi	2026-07-04 12:15:41 (1 week ago)	CrowdSec triggered crowdsecurity/http-probing	Web App Attack Hacking
Anonymous	2026-07-04 12:04:11 (1 week ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing	Web App Attack Hacking
🇮🇪 AutosOnShow	2026-07-04 11:51:05 (1 week ago)	blocked for webapp attack \| path requested: /cgi-bin/php-cgi \| seen at 2026-07-04 11:50:34.106 \|	Web App Attack
🇮🇪 AutosOnShow	2026-07-04 11:29:05 (1 week ago)	blocked for webapp attack \| path requested: /cgi-bin/php-cgi \| seen at 2026-07-04 11:28:45.710 \|	Web App Attack
🇺🇸 brightenfield	2026-07-04 10:12:30 (1 week ago)	Web App Attack	Web App Attack

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 2a00:1450:4013:c06::12a

🇨🇴 181.119.84.131

🇮🇩 157.20.144.241

🇺🇸 104.248.124.16

🇺🇸 66.228.41.127

🇰🇷 211.186.115.35

🇹🇼 198.235.24.65

🇸🇬 146.190.103.103

🇩🇪 138.68.65.59

🇬🇧 35.203.210.86

🇬🇧 5.252.83.91

🇺🇸 3.220.214.93

🇩🇪 138.68.82.23

🇧🇩 103.214.201.174

🇨🇦 85.217.149.64

🇳🇱 45.148.10.157

🇺🇸 45.132.115.155

🇨🇳 223.100.248.64

🇰🇪 197.232.50.126

🇺🇸 147.185.132.151