JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 85.208.136.198

85.208.136.198

Neutral Activity

69 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

Neterra Ltd.

Usage Type

Data Center/Web Hosting/Transit

ASN

Unknown

Domain Name

neterra.net

Country

🇧🇬 Bulgaria

City

Sofia, Sofia-Capital

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

85.208.136.198 has been reported 69 times. The most recent report is from 3 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 85.208.136.198:

This IP address has been reported a total of 69 times from 48 distinct sources. 85.208.136.198 was first reported on April 11th 2023, and the most recent report was 3 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇯🇵 koji	2023-06-14 22:45:39 (3 years ago)		Web Spam Email Spam Blog Spam Bad Web Bot Web App Attack
🇸🇪 webbfabriken	2023-06-07 12:59:51 (3 years ago)	Attack reported by Webbfabiken Security API - WFSecAPI	Brute-Force
🇹🇭 Sawasdee	2023-06-07 10:03:09 (3 years ago)	Unwanted checking 80 or 443 port ...	Bad Web Bot
🇦🇺 FireGuard Server	2023-06-04 18:30:04 (3 years ago)	IP: 85.208.136.198 Ports affected HTTP protocol over TLS/SSL (443) World Wide Web HTTP ( ... show more IP: 85.208.136.198 Ports affected HTTP protocol over TLS/SSL (443) World Wide Web HTTP (80) Abuse Confidence rating 100% Found in DNSBL('s) ASN Details AS400377 AS-DC United States (US) CIDR 85.208.136.0/24 Log Date: 4/06/2023 6:19:53 PM UTC show less	Hacking Web App Attack
🇩🇪 Kreapptivo	2023-06-04 15:13:30 (3 years ago)	[04/Jun/2023:17:13:01 +0200] Web-Request: "GET /", User-Agent: "Mozlila/5.0 (Linux; Android 7.0; SM- ... show more [04/Jun/2023:17:13:01 +0200] Web-Request: "GET /", User-Agent: "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" [04/Jun/2023:17:13:29 +0200] Web-Request: "GET /", User-Agent: "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" show less	Bad Web Bot Web App Attack
🇦🇺 FireGuard Server	2023-06-04 00:30:56 (3 years ago)	IP: 85.208.136.198 Ports affected HTTP protocol over TLS/SSL (443) World Wide Web HTTP ( ... show more IP: 85.208.136.198 Ports affected HTTP protocol over TLS/SSL (443) World Wide Web HTTP (80) Abuse Confidence rating 100% Found in DNSBL('s) ASN Details AS400377 AS-DC United States (US) CIDR 85.208.136.0/24 Log Date: 3/06/2023 10:52:09 PM UTC show less	Hacking Web App Attack
🇺🇸 vestibtech	2023-05-30 03:24:19 (3 years ago)	[Mon May 29 21:23:50.045067 2023] [authz_core:error] [pid 3303505:tid 140711584331520] [client 85.20 ... show more [Mon May 29 21:23:50.045067 2023] [authz_core:error] [pid 3303505:tid 140711584331520] [client 85.208.136.198:58760] AH01630: client denied by server configuration: /home/vestibte/public_html/, referer: www.google.com [Mon May 29 21:23:50.048092 2023] [authz_core:error] [pid 3303505:tid 140711584331520] [client 85.208.136.198:58760] AH01630: client denied by server configuration: /home/vestibte/public_rsrc/ErrDocs/error.php, referer: www.google.com [Mon May 29 21:24:18.417573 2023] [authz_core:error] [pid 3307922:tid 140711508829952] [client 85.208.136.198:61669] AH01630: client denied by server configuration: /home/vestibte/public_html/, referer: www.google.com ... show less	Bad Web Bot
🇩🇪 SCHAPPY	2023-05-29 13:52:28 (3 years ago)	Bad bot identified by user agent	Bad Web Bot
Anonymous	2023-05-29 06:15:23 (3 years ago)	blocked by firewall for Known malicious User-Agents	Hacking Bad Web Bot Web App Attack
🇩🇪 psauxit	2023-05-29 06:09:03 (3 years ago)	Fail2Ban - NGINX heavily bad-bot, possible vulnerability scanning and excessive crawling/scraping	Web Spam Hacking Bad Web Bot Web App Attack
🇦🇺 Ross Wheatley	2023-05-25 12:36:46 (3 years ago)	GET /rindex.php?action=add HTTP/1.1 404 5250 www.google.com Mozlila/5.0 (Linux; Android 7.0; SM-G892 ... show more GET /rindex.php?action=add HTTP/1.1 404 5250 www.google.com Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36 show less	Brute-Force Web App Attack
🇳🇴 tmiland	2023-05-25 08:45:42 (3 years ago)	(wordpress_404) WordPress Plugins Honeypot Trap 85.208.136.198 (US/United States/-): 2 in the last 3 ... show more (wordpress_404) WordPress Plugins Honeypot Trap 85.208.136.198 (US/United States/-): 2 in the last 3600 secs show less	Blog Spam Brute-Force Web App Attack
Anonymous	2023-05-25 02:56:13 (3 years ago)	[24-May-2023 22:56:11 America/New_York] Page Not Found: t62.php [85.208.136.198] ...	Brute-Force
🇳🇿 physke	2023-05-25 01:29:35 (3 years ago)	REQUESTED PAGE: /wp-content/plugins/wp-daft/t62.php	Web App Attack
🇬🇧 SecondEdge	2023-05-24 11:21:19 (3 years ago)	A web attack was detected from 85.208.136.198 (United States / Virginia / Ashburn) against second-ed ... show more A web attack was detected from 85.208.136.198 (United States / Virginia / Ashburn) against second-edge.com (Wordpress,Wordpress Admin) over 1m16s. show less	Web App Attack

Showing 1 to 15 of 69 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇾 121.120.42.31

🇺🇦 95.158.16.92

🇺🇸 2602:80d:1008::74

🇮🇶 185.128.37.2

🇨🇦 85.217.149.31

🇪🇸 79.116.175.111

🇱🇹 62.60.130.201

🇰🇷 61.43.121.132

🇮🇷 5.232.190.179

🇨🇳 219.151.187.107

🇬🇧 194.164.126.222

🇧🇷 132.255.157.203

🇮🇪 46.51.195.0

🇵🇭 175.176.65.195

🇺🇸 147.185.132.48

🇲🇦 41.92.98.250

🇹🇷 31.145.131.202

🇰🇷 211.62.73.197

🇺🇸 198.44.58.3

🇩🇪 185.168.29.199