JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 85.217.140.36

85.217.140.36 was found in our database!

This IP was reported 6,962 times. Confidence of Abuse is 100%: ?

100%

ISP	NL MODAT
Usage Type	Commercial
ASN	AS209334
Hostname(s)	o335.scanner.modat.io
Domain Name	modat.io
Country	🇫🇷 France
City	Gravelines, Hauts-de-France

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 85.217.140.36

Whois 85.217.140.36

IP Abuse Reports for 85.217.140.36:

This IP address has been reported a total of 6,962 times from 388 distinct sources. 85.217.140.36 was first reported on March 4th 2026, and the most recent report was 31 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇯🇵 mkaraki	2026-05-31 02:01:33 (4 days ago)	1780192891 # Service_probe # SIGNATURE_SEND # source_ip:85.217.140.36 # dst_port:23502 ...	Port Scan
🇵🇱 sefinek.net	2026-05-31 00:45:35 (4 days ago)	Honeypot hit: HTTP/1.1 request on 3065 GET / User-Agent: Mozilla/5.0 (compatible; ModatScanner/1.2; ... show more Honeypot hit: HTTP/1.1 request on 3065 GET / User-Agent: Mozilla/5.0 (compatible; ModatScanner/1.2; +https://modat.io/) Accept: / Accept-Encoding: gzip; 3065 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇩🇪 dispaisyenterprises	2026-05-30 23:24:08 (4 days ago)	Honeypot [fra-de-honeypot]: Empty payload (likely service probe); 22609 [1], 20900 [1], 9732 [1], 19 ... show more Honeypot [fra-de-honeypot]: Empty payload (likely service probe); 22609 [1], 20900 [1], 9732 [1], 19410 [1], 2261 [1], 9145 [1] TCP Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇩🇪 Justin F. \| AS204464	2026-05-30 23:22:35 (4 days ago)	Honeypot [nx-infrastructure]: Empty payload (likely service probe); 9677 [1], 2164 [1], 9152 [1], 91 ... show more Honeypot [nx-infrastructure]: Empty payload (likely service probe); 9677 [1], 2164 [1], 9152 [1], 9105 [1], 5542 [1], 19080 [1] TCP Reported by: Justin F. show less	Port Scan
🇩🇪 2048	2026-05-30 23:21:22 (4 days ago)	2026-05-31T01:20:46.533657+02:00 machodeer kernel: [2891164.539824] [UFW BLOCK] IN=ens3 OUT= MAC=RED ... show more 2026-05-31T01:20:46.533657+02:00 machodeer kernel: [2891164.539824] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=85.217.140.36 DST=REDACTED LEN=52 TOS=0x00 PREC=0x00 TTL=52 ID=45656 PROTO=TCP SPT=50995 DPT=2932 WINDOW=65535 RES=0x00 SYN URGP=0 2026-05-31T01:21:01.102847+02:00 machodeer kernel: [2891179.108733] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=85.217.140.36 DST=REDACTED LEN=52 TOS=0x00 PREC=0x00 TTL=52 ID=33864 PROTO=TCP SPT=39103 DPT=14529 WINDOW=65535 RES=0x00 SYN URGP=0 2026-05-31T01:21:21.972424+02:00 machodeer kernel: [2891199.977880] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=85.217.140.36 DST=REDACTED LEN=52 TOS=0x00 PREC=0x00 TTL=52 ID=6477 PROTO=TCP SPT=57181 DPT=12134 WINDOW=65535 RES=0x00 SYN URGP=0 show less	Port Scan
🇺🇸 mutebot.net	2026-05-30 22:52:03 (4 days ago)	SRC=85.217.140.36, PROTO=TCP, SPT=35268, DPT=23846	Port Scan
🇪🇸 loadsoporte	2026-05-30 22:27:13 (4 days ago)	RdpGuard detected brute-force attempt on SMTP	Brute-Force
🇦🇺 LiftUp Hosting	2026-05-30 21:03:57 (4 days ago)	Honeypot hit: Unauthorized traffic (243 bytes of payload); 6475 [1] TCP	Port Scan
🇬🇧 gbzret4d	2026-05-30 20:39:55 (4 days ago)	Honeypot [uk-production01]: Unauthorized traffic (1 bytes of payload); 10822 [1], 10869 [1], 10939 [ ... show more Honeypot [uk-production01]: Unauthorized traffic (1 bytes of payload); 10822 [1], 10869 [1], 10939 [1] TCP show less	Port Scan
🇩🇪 2048	2026-05-30 19:43:18 (4 days ago)	2026-05-30T21:42:44.057327+02:00 machodeer kernel: [2878081.995945] [UFW BLOCK] IN=ens3 OUT= MAC=RED ... show more 2026-05-30T21:42:44.057327+02:00 machodeer kernel: [2878081.995945] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=85.217.140.36 DST=REDACTED LEN=52 TOS=0x00 PREC=0x00 TTL=50 ID=64233 PROTO=TCP SPT=36697 DPT=11035 WINDOW=65535 RES=0x00 SYN URGP=0 2026-05-30T21:42:58.575517+02:00 machodeer kernel: [2878096.513916] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=85.217.140.36 DST=REDACTED LEN=52 TOS=0x00 PREC=0x00 TTL=51 ID=63791 PROTO=TCP SPT=58726 DPT=43461 WINDOW=65535 RES=0x00 SYN URGP=0 2026-05-30T21:43:17.586085+02:00 machodeer kernel: [2878115.524839] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=85.217.140.36 DST=REDACTED LEN=52 TOS=0x00 PREC=0x00 TTL=49 ID=13502 PROTO=TCP SPT=35948 DPT=32230 WINDOW=65535 RES=0x00 SYN URGP=0 show less	Port Scan
🇺🇸 Xarcotic	2026-05-30 19:18:47 (4 days ago)	SSH login on honeypot.	Brute-Force SSH
🇺🇸 aks4226	2026-05-30 19:12:00 (4 days ago)	Brute force on SSH.	SSH Brute-Force
🇵🇱 sefinek.net	2026-05-30 18:39:38 (4 days ago)	Honeypot hit: Unauthorized traffic (1 bytes of payload); 6598 [1] TCP Reported by: https://github.co ... show more Honeypot hit: Unauthorized traffic (1 bytes of payload); 6598 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇩🇪 dispaisyenterprises	2026-05-30 16:42:11 (4 days ago)	Honeypot [fra-de-honeypot]: Unauthorized traffic (3 bytes of payload); 2004 [1], 5255 [1], 9267 [1] ... show more Honeypot [fra-de-honeypot]: Unauthorized traffic (3 bytes of payload); 2004 [1], 5255 [1], 9267 [1] TCP Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇩🇪 Justin F. \| AS204464	2026-05-30 16:40:37 (4 days ago)	Honeypot [nx-infrastructure]: Unauthorized traffic (3 bytes of payload); 5732 [1] TCP Reported by: J ... show more Honeypot [nx-infrastructure]: Unauthorized traffic (3 bytes of payload); 5732 [1] TCP Reported by: Justin F. show less	Port Scan

Showing 91 to 105 of 6962 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇿 195.158.8.30

🇺🇸 135.237.126.231

🇱🇧 213.175.186.85

🇧🇷 205.210.31.164

🇫🇷 194.163.139.224

🇭🇰 154.92.17.58

🇺🇸 147.185.132.234

🇩🇪 130.12.181.109

🇨🇳 124.227.31.74

🇨🇳 106.75.12.239

🇮🇶 65.20.146.109

🇰🇷 59.16.212.232

🇺🇸 18.217.208.51

🇰🇷 14.63.198.239

🇳🇱 192.253.248.23

🇲🇽 186.96.145.241

🇹🇭 118.194.250.245

🇻🇳 118.70.182.193

🇨🇳 117.133.182.154

🇨🇳 115.190.51.71