JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

85.211.246.245

Recent Activity

Abuse Confidence Score

61% Elevated

12 reports

12 reporters · latest 4 days ago

ISP: Microsoft Limited
Usage Type: Data Center/Web Hosting/Transit
ASN: AS8075
Domain Name: microsoft.com
Country: 🇲🇾 Malaysia
City: Kuala Lumpur, Kuala Lumpur

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

12 from 12 distinct reporters

First reported

November 4th 2026

Most recent report

4 days ago

Last 60 days

Top reporter locations 🇩🇪 Germany 9 🇫🇮 Finland 2 🇺🇸 United States of America 1

Most common categories Web App Attack 10 Hacking 3 Brute-Force 3 Port Scan 1 Bad Web Bot 1

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 MarKup	2026-11-07 21:16:16 UTC · (4 days ago)	85.211.246.245 - - [07/Nov/2026:22:15:23 +0100] "GET /.env.swp%00 HTTP/1.1" 404 557 "https://91.15.176.30/" "Mozilla/5.0 (iPhone; CPU iPhone OS 19_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/19.0 Mobile/15E148 Safari/604.1" 85.2 ... show more 85.211.246.245 - - [07/Nov/2026:22:15:23 +0100] "GET /.env.swp%00 HTTP/1.1" 404 557 "https://91.15.176.30/" "Mozilla/5.0 (iPhone; CPU iPhone OS 19_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/19.0 Mobile/15E148 Safari/604.1" 85.211.246.245 - - [07/Nov/2026:22:15:57 +0100] "GET /config.php.old HTTP/1.1" 404 6428 "-" "ExposureScanner/1.0 (internal-security-audit)" ... show less	Hacking Web App Attack
🇺🇸 sistemacapital	2026-11-07 17:36:30 UTC · (4 days ago)	HTTP: probing for sensitive files and common application endpoints.	Web App Attack
🇫🇮 albionfreemarket.com	2026-11-07 12:52:10 UTC · (4 days ago)	85.211.246.245 - - [07/Nov/2026:12:52:07 +0000] "GET /configuration.php HTTP/1.1" 403 153 "https://157.180.2.41/" "Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)" 0.000 "-" "-" 85.211.246.245 - - [07/Nov/2026:12:52:08 +0000] ... show more 85.211.246.245 - - [07/Nov/2026:12:52:07 +0000] "GET /configuration.php HTTP/1.1" 403 153 "https://157.180.2.41/" "Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)" 0.000 "-" "-" 85.211.246.245 - - [07/Nov/2026:12:52:08 +0000] "GET /configuration.php HTTP/1.1" 403 153 "https://157.180.2.41/" "Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)" 0.000 "-" "-" ... show less	Bad Web Bot Web App Attack
Anonymous	2026-11-07 06:24:00 UTC · (4 days ago)	2026-11-07T06:23:59.423591+00:00 gotosocial caddy[86195]: {"level":"info","ts":1794032639.4234445,"logger":"http.log.access","msg":"handled request","request":{"remote_ip":"85.211.246.245","remote_port":"47777","client_ip":"85.211.246.245","proto":"H ... show more 2026-11-07T06:23:59.423591+00:00 gotosocial caddy[86195]: {"level":"info","ts":1794032639.4234445,"logger":"http.log.access","msg":"handled request","request":{"remote_ip":"85.211.246.245","remote_port":"47777","client_ip":"85.211.246.245","proto":"HTTP/1.1","method":"GET","host":"142.132.177.172","uri":"/.env;","headers":{"Connection":["keep-alive"],"Sec-Fetch-Dest":["document"],"Accept-Language":["en-US,en;q=0.9"],"Sec-Fetch-Site":["same-origin"],"Referer":["https://142.132.177.172/"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/160.0.0.0 Safari/537.36 Edg/160.0.0.0"],"Accept-Encoding":["identity"],"Cache-Control":["no-cache"],"Origin":["https://142.132.177.172"],"Sec-Fetch-Mode":["navigate"],"Upgrade-Insecure-Requests":["1"],"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8"]}},"bytes_read":0,"user_id":"","duration":0.00008916,"size":0,"status":308,"resp_headers":{"Server":["Caddy"],"Connection":["clo ... show less	Hacking Web App Attack
🇩🇪 MarkGGN	2026-11-07 03:15:51 UTC · (4 days ago)	Web attack. 85.211.246.245 - - [07/Nov/2026:04:15:42 +0100] "GET /.[HOST] HTTP/1.1" 301 162 "-" "ExposureScanner/1.0 (internal-security-audit)" 85.211.246.245 - - [07/Nov/2026:04:15:50 +0100] "GET /[HOST] HTTP/1.1" 301 162 "-" "ExposureScanner/1.0 (i ... show more Web attack. 85.211.246.245 - - [07/Nov/2026:04:15:42 +0100] "GET /.[HOST] HTTP/1.1" 301 162 "-" "ExposureScanner/1.0 (internal-security-audit)" 85.211.246.245 - - [07/Nov/2026:04:15:50 +0100] "GET /[HOST] HTTP/1.1" 301 162 "-" "ExposureScanner/1.0 (internal-security-audit)" show less	Web App Attack
Anonymous	2026-11-06 07:41:04 UTC · (5 days ago)	85.211.246.245 - - [06/Nov/2026:07:41:02 +0000] "GET /shared/.env HTTP/1.1" 301 17 "-" "-" 148787 "http-catchall@file" "-" 0ms 85.211.246.245 - - [06/Nov/2026:07:41:02 +0000] "GET /.aws/credentials HTTP/1.1" 301 17 "-" "-" 148789 "http-catchall@file" ... show more 85.211.246.245 - - [06/Nov/2026:07:41:02 +0000] "GET /shared/.env HTTP/1.1" 301 17 "-" "-" 148787 "http-catchall@file" "-" 0ms 85.211.246.245 - - [06/Nov/2026:07:41:02 +0000] "GET /.aws/credentials HTTP/1.1" 301 17 "-" "-" 148789 "http-catchall@file" "-" 0ms ... show less	Web App Attack
🇩🇪 CK_beats	2026-11-06 00:00:57 UTC · (5 days ago)	Blocked by os-abuseipdb on OPNsense firewall KN-FW01; 5 hits, proto=tcp, ports=443	Port Scan Brute-Force
🇩🇪 ut-addicted.com	2026-11-05 13:05:12 UTC · (6 days ago)	\[05/Nov/2026:14:05:06 +0100\] aux-AkXG0Wx4YUA3G1XEQgAAAAc 85.211.246.245 40879 78.46.187.162 80 \[05/Nov/2026:14:05:06 +0100\] aux-Aq5awWRKnfh4MSyMugAAANg 85.211.246.245 54551 78.46.187.162 80 \[05/Nov/2026:14:05:07 +0100\] aux-A0XG0Wx4YUA3G1XERgAAA ... show more \[05/Nov/2026:14:05:06 +0100\] aux-AkXG0Wx4YUA3G1XEQgAAAAc 85.211.246.245 40879 78.46.187.162 80 \[05/Nov/2026:14:05:06 +0100\] aux-Aq5awWRKnfh4MSyMugAAANg 85.211.246.245 54551 78.46.187.162 80 \[05/Nov/2026:14:05:07 +0100\] aux-A0XG0Wx4YUA3G1XERgAAAAY 85.211.246.245 40879 78.46.187.162 80 show less	Brute-Force Web App Attack
🇫🇮 sibahota	2026-11-05 09:56:11 UTC · (6 days ago)	85.211.246.245 - - [05/Nov/2026:09:56:08 +0000] 157.180.42.246 "GET /.env.backup HTTP/1.1" 403 37 0.000 "https://157.180.42.246/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/160.0.0.0 Safari/537.36 Edg/160 ... show more 85.211.246.245 - - [05/Nov/2026:09:56:08 +0000] 157.180.42.246 "GET /.env.backup HTTP/1.1" 403 37 0.000 "https://157.180.42.246/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/160.0.0.0 Safari/537.36 Edg/160.0.0.0" - - - "http://157.180.42.246" ... show less	Web App Attack Brute-Force
🇩🇪 dbmwebdesign	2026-11-04 23:55:08 UTC · (6 days ago)	WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail	Web App Attack
Anonymous	2026-11-04 20:52:05 UTC · (1 week ago)	[news.tmg.gr] httpd-config-scan: sites=global; logs=/var/log/httpd/access_log; samples=/.env \| /.env.docker \| /wp-config.php.save	Hacking Web App Attack
🇩🇪 netclix.gr	2026-11-04 13:56:38 UTC · (1 week ago)	(mod_security) mod_security triggered on hostname [redacted] 85.211.246.245 (MY/Malaysia/-)	SQL Injection

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇱🇹 78.56.248.165

🇧🇷 34.95.162.98

🇨🇳 113.31.115.157

🇷🇴 92.118.39.181

🇫🇷 91.196.152.197

🇧🇬 91.191.209.98

🇷🇴 80.94.95.115

🇦🇪 74.243.250.30

🇺🇸 34.187.179.164

🇬🇧 193.32.209.241

🇧🇷 179.185.227.77

🇵🇱 162.158.102.120

🇮🇳 106.214.3.72

🇷🇴 92.118.39.49

🇷🇴 80.94.95.116

🇳🇱 64.205.72.243

🇩🇪 185.201.163.255

🇨🇳 129.204.5.238

🇭🇰 103.43.191.43

🇩🇪 94.194.71.226