85.215.46.59

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
476 reports
83 reporters · latest 4 hours ago
ISP
STRATO AG for IONOS SE
Usage Type
Data Center/Web Hosting/Transit
ASN
AS8560
Domain Name
ionos.com
Country
🇩🇪 Germany
City
Frankfurt am Main, Hesse
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
476 from 83 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 236 🇫🇷 France 60 🇩🇪 Germany 58
Most common categories Hacking 273 Brute-Force 262 Port Scan 137 Fraud VoIP 102 FTP Brute-Force 28
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇫🇷 ipfyx
Port scanning
Port Scan
🇩🇪 paneologist
Fraud VoIP Brute-Force
🇨🇴 ingentar
Fraud VoIP Brute-Force
🇨🇴 ingentar
Fraud VoIP Brute-Force
🇨🇴 ingentar
Fraud VoIP Brute-Force
🇺🇸 multitel.net
VoIP brute-force attack on port 5060, with User-Agent TAU-4M.IP/2.4.2.24 SN/VI4D011738 sofia-sip/1.21
Fraud VoIP Brute-Force
🇩🇪 defkev
Fraud VoIP
🇺🇸 mc4bbs
Fraud VoIP Brute-Force
🇩🇪 EnthecSolutions
Detected by Enthec Solutions. | Attempts: 1010 in 24h | Target port: 5060
Fraud VoIP Brute-Force
🇫🇷 uthul
T-Pot honeypot: 256 hits on ports [5060] (automated)
Port Scan Hacking
🇦🇺 dyln
Dyls honeypot brute-force: SIP (8323 total hits)
Hacking Brute-Force
🇫🇷 AmStaff
Honeypot: SIP/VoIP scanning. Targeted ports: SIP.
Fraud VoIP Port Scan
🇫🇷 uthul
T-Pot honeypot: 355 hits on ports [5060] (automated)
Port Scan Hacking
🇺🇸 drewf.ink
[09:49] SIP INVITE to 900442037694825 [premium rate] as 555522 (User-Agent: 'FreeSWITCH-mod_sofia/1.4.18+git~20170703T055955Z~e6e315989e~64bit')
Fraud VoIP Hacking
🇺🇸 drewf.ink
[09:10] SIP INVITE to 000442037694825 [external number] as 555511 (User-Agent: 'interconnect')
Brute-Force Hacking

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 136.107.60.30
🇳🇱 77.67.26.32
🇳🇱 193.47.62.168
🇮🇸 178.17.240.71
🇻🇳 123.31.31.125
🇳🇱 109.160.32.124
🇮🇳 103.170.54.29
🇺🇸 99.187.246.165
🇺🇸 198.74.56.135
🇩🇿 197.119.202.173
🇦🇷 186.22.253.141
🇺🇸 172.236.228.39
🇵🇱 172.64.200.201
🇵🇱 172.64.200.200
🇺🇸 147.185.132.208
🇺🇸 67.20.1.178
feedback