JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 85.214.224.34

85.214.224.34 was found in our database!

This IP was reported 6 times. Confidence of Abuse is 0%: ?

ISP	Strato Rechenzentrum, Berlin
Usage Type	Data Center/Web Hosting/Transit
ASN	AS6724
Hostname(s)	h2931747.stratoserver.net
Domain Name	strato.de
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 85.214.224.34

Whois 85.214.224.34

IP Abuse Reports for 85.214.224.34:

This IP address has been reported a total of 6 times from 6 distinct sources. 85.214.224.34 was first reported on May 18th 2022, and the most recent report was 4 years ago.

Old Reports: The most recent abuse report for this IP address is from 4 years ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 NOC Monitoring KAI	2022-05-19 20:06:04 (4 years ago)	"103.54.225.191/../../../../../../../etc/passwd" "103.54.225.191/remote/fgt_lang?lang=/../../../../ ... show more "103.54.225.191/../../../../../../../etc/passwd" "103.54.225.191/remote/fgt_lang?lang=/../../../../dev/cmdb/sslvpn_websession" "103.54.225.191/e/ViewImg/index.html?url=javascript:alert(document.domain)" show less	Web App Attack
🇩🇰 vsaceur	2022-05-19 15:34:04 (4 years ago)	fail2ban	Port Scan Hacking Brute-Force Web App Attack
🇹🇷 baku.hosting	2022-05-19 06:40:43 (4 years ago)	(mod_security) mod_security (id:949110) triggered by 85.214.224.34 (DE/Germany/h2931747.stratoserver ... show more (mod_security) mod_security (id:949110) triggered by 85.214.224.34 (DE/Germany/h2931747.stratoserver.net): 8 in the last 3600 secs show less	Brute-Force
🇫🇷 Computech	2022-05-19 03:48:45 (4 years ago)	[Thu May 19 09:44:59.812570 2022] [:error] [pid 481529:tid 139635149760256] [client 85.214.224.34:33 ... show more [Thu May 19 09:44:59.812570 2022] [:error] [pid 481529:tid 139635149760256] [client 85.214.224.34:33670] [client 85.214.224.34] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "149.202.154.76"] [uri "/example.com"] [unique_id "YoX1e5N9RgowyzMoPlQCpQAAGA8"] [Thu May 19 09:45:05.026351 2022] [:error] [pid 481871:tid 139635359479552] [client 85.214.224.34:35620] [client 85.214.224.34] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL" ... show less	Brute-Force
🇦🇺 whirlpoole	2022-05-19 02:59:02 (4 years ago)	(mod_security) mod_security (id:949110) triggered by 85.214.224.34 (DE/Germany/h2931747.stratoserver ... show more (mod_security) mod_security (id:949110) triggered by 85.214.224.34 (DE/Germany/h2931747.stratoserver.net): 10 in the last 3600 secs show less	Brute-Force
Anonymous	2022-05-18 01:04:20 (4 years ago)	General application exploitation and scanning observed in manual log review.	Hacking Web App Attack

Showing 1 to 6 of 6 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 167.94.146.67

🇺🇸 130.51.22.28

🇺🇸 76.139.106.179

🇺🇸 20.127.185.37

🇩🇪 18.192.54.25

🇰🇷 14.38.177.105

🇧🇷 205.210.31.176

🇷🇴 193.32.162.84

🇺🇸 172.105.128.11

🇨🇳 171.37.46.249

🇫🇮 147.185.133.15

🇺🇸 45.156.129.133

🇬🇧 35.203.211.149

🇬🇧 35.203.210.83

🇬🇧 35.203.210.58

🇸🇬 20.188.116.111

🇸🇬 4.193.175.44

🇺🇸 208.84.102.90

🇺🇸 162.216.150.126

🇩🇪 159.89.12.166