AbuseIPDB » 85.208.139.55

85.208.139.55 was found in our database!

This IP was reported 81 times. Confidence of Abuse is 44%: ?

44%

ISP	HOST TELECOM LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS215540
Hostname(s)	49783.ip-ptr.tech
Domain Name	globconnex.com
Country	Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 85.208.139.55

Whois 85.208.139.55

IP Abuse Reports for 85.208.139.55:

This IP address has been reported a total of 81 times from 49 distinct sources. 85.208.139.55 was first reported on June 13th 2023, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Anonymous	2024-12-23 15:30:38 (3 weeks ago)	Intrusion Detect. SQL injection attempts with URL.	Hacking SQL Injection Web App Attack
Anonymous	2024-12-23 13:22:17 (3 weeks ago)	ALTB WEBFORM SPAM 85.208.139.55 (85.208.139.55)	Web Spam
sverson	2024-12-23 12:28:16 (3 weeks ago)	Abusive use detected	Hacking
gurnip	2024-12-23 10:14:25 (3 weeks ago)	Contact form spam of type 'other'.	Web Spam
oncord	2024-12-23 07:57:55 (3 weeks ago)	Form spam	Web Spam
oncord	2024-12-13 01:18:58 (1 month ago)	Form spam	Web Spam
LRob.fr	2024-12-13 00:45:04 (1 month ago)	WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail	Web App Attack
France Artisanat	2024-12-12 23:57:29 (1 month ago)	Hi Do you use Google Maps for finding companies / suppliers / clients? ... show moreHi Do you use Google Maps for finding companies / suppliers / clients? We grabbed all 25 million companies from google maps, including addresses, Industries, Phones, Emails, Websites, Lat/Long, many more.. Get it today for .99 https://b2bdata.mysellix.io/product/all-countries Start your 2025 off with a lot of clients in the bag. Offer valid today. show less	Web Spam
Anonymous	2024-12-12 23:02:05 (1 month ago)	ALTB WEBFORM SPAM 85.208.139.55 (85.208.139.55)	Web Spam
sverson	2024-12-12 22:02:52 (1 month ago)	Contact form spam	Web Spam
TPI-Abuse	2024-12-12 21:05:42 (1 month ago)	(mod_security) mod_security (id:217280) triggered by 85.208.139.55 (-): 1 in the last 300 secs; Port ... show more(mod_security) mod_security (id:217280) triggered by 85.208.139.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 12 16:05:35.071487 2024] [security2:error] [pid 12394:tid 12394] [client 85.208.139.55:60335] [client 85.208.139.55] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:\\\\n\|\\\\r)+(?:get\|post\|head\|options\|connect\|put\|delete\|trace\|propfind\|propatch\|mkcol\|copy\|move\|lock\|unlock)\\\\s+" at MATCHED_VAR. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "137"] [id "217280"] [rev "6"] [msg "COMODO WAF: HTTP Request Smuggling Attack\|\|www.kreweofblackbeardsrevenge.com\|F\|2"] [data "Matched Data: get found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "www.kreweofblackbeardsrevenge.com"] [uri "/contact_us.html"] [unique_id "Z1tQHyLP-l5l0y0EO5owBQAAAA4"], referer: https://www.kreweofblackbeardsrevenge.com/contact_us.html show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2024-12-12 19:33:57 (1 month ago)	(mod_security) mod_security (id:217280) triggered by 85.208.139.55 (-): 1 in the last 300 secs; Port ... show more(mod_security) mod_security (id:217280) triggered by 85.208.139.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 12 14:33:51.642778 2024] [security2:error] [pid 25737:tid 25737] [client 85.208.139.55:58940] [client 85.208.139.55] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:\\\\n\|\\\\r)+(?:get\|post\|head\|options\|connect\|put\|delete\|trace\|propfind\|propatch\|mkcol\|copy\|move\|lock\|unlock)\\\\s+" at MATCHED_VAR. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "137"] [id "217280"] [rev "6"] [msg "COMODO WAF: HTTP Request Smuggling Attack\|\|www.paguilar.com\|F\|2"] [data "Matched Data: get found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "www.paguilar.com"] [uri "/contact-me/"] [unique_id "Z1s6nwSWVhCOBRf6JFik7gAAAAQ"], referer: https://www.paguilar.com/contact-me/ show less	Brute-Force Bad Web Bot Web App Attack
el-brujo	2024-12-12 19:21:21 (1 month ago)	12/Dec/2024:20:21:20.934869 +0100Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client ... show more12/Dec/2024:20:21:20.934869 +0100Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 85.208.139.55] ModSecurity: Warning. Pattern match "(?i)(?:;\|\\\\\\\\{\|\\\\\\\\\|\|\\\\\\\\\|\\\\\\\\\|\|&\|&&\|\\\\\\\\n\|\\\\\\\\r\|`)\\\\\\\\s[\\\\\\\$,@\\\\\\\\'\\\\"\\\\\\\\s](?:[\\\\\\\\w'\\\\"\\\\\\\\./]+/\|[\\\\\\\\\\\\\\\\'\\\\"\\\\\\\\^]\\\\\\\\w[\\\\\\\\\\\\\\\\'\\\\"\\\\\\\\^]:.\\\\\\\\\\\\\\\\\|[\\\\\\\\^\\\\\\\\.\\\\\\\\w '\\\\"/\\\\\\\\\\\\\\\\]\\\\\\\\\\\\\\\$?[\\\\"\\\\\\\\^](?:s[\\\\"\\\\\\\\^](?:y[\\\\"\\\\\\\\^]s[\\\\"\\\\\\\\^](?:t[\\\\"\\\\\\\\^]e[\\\\"\\\\\\\\^]m[\\\\"\\\\\\\\^](?:p[\\\\"\\\\\\\\^]r[\\\\"\\\\\\\\^]o[\\\\"\\\\\\\\^]p[\\\\"\\\\\\\\^]*e ..." at ARGS:your-subject. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "295"] [id "932115"] [msg "Remote Command Execution: Windows Command Injection"] [data "Matched Data: \\\\x0d\\\\x0a\\\\x0d\\\\x0aStart your 2025 off with a lot of clients in the bag.\\\\x0d ... show less	Hacking Web App Attack
hc	2024-12-12 18:28:00 (1 month ago)	Frau Elissa Ballard 86 Glandovey Terrace Trelill 7025177951 <br / ... show moreFrau Elissa Ballard 86 Glandovey Terrace Trelill 7025177951 [email protected] Hi Do you use Google Maps for finding companies / suppliers / clients? We grabbed all 25 million companies from google maps, including addresses, Industries, Phones, Emails, Websites, Lat/Long, many more.. Get it today for $4.99 https://b2bdata.mysellix.io/product/all-countries Start your 2025 off with a lot of clients in the bag. Offer valid today. show less	Web Spam
backslash	2024-12-12 05:08:39 (1 month ago)		Web Spam