JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 85.217.140.41

85.217.140.41 was found in our database!

This IP was reported 6,873 times. Confidence of Abuse is 100%: ?

100%

ISP	NL MODAT
Usage Type	Commercial
ASN	AS209334
Hostname(s)	o340.scanner.modat.io
Domain Name	modat.io
Country	🇫🇷 France
City	Gravelines, Hauts-de-France

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 85.217.140.41

Whois 85.217.140.41

IP Abuse Reports for 85.217.140.41:

This IP address has been reported a total of 6,873 times from 397 distinct sources. 85.217.140.41 was first reported on March 4th 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇭🇰 pengpeng	2026-06-09 11:55:10 (2 hours ago)	monitor: on ser162528253480 \| port: 14721 \| ttl: 44 script: github.com/sefinek/UFW-AbuseIPDB-Report ... show more monitor: on ser162528253480 \| port: 14721 \| ttl: 44 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 ISPLtd	2026-06-09 11:55:09 (2 hours ago)	Jun 9 08:53:29 85.217.140.41 TCP SPT=43354 DPT=32314 SYN Jun 9 08:53:37 85.217.140.41 TCP SPT=5723 ... show more Jun 9 08:53:29 85.217.140.41 TCP SPT=43354 DPT=32314 SYN Jun 9 08:53:37 85.217.140.41 TCP SPT=57237 DPT=39832 SYN Jun 9 08:55:08 85.217.140.41 TCP SPT=60060 DPT=14721 ... show less	Port Scan
🇩🇪 Justin F. \| AS204464	2026-06-09 11:52:34 (2 hours ago)	Honeypot [nx-infrastructure]: Empty payload (likely service probe); 2154 [1], 21000 [1], 9061 [1], 4 ... show more Honeypot [nx-infrastructure]: Empty payload (likely service probe); 2154 [1], 21000 [1], 9061 [1], 4971 [1], 58305 [1], 2161 [1] TCP Reported by: Justin F. show less	Port Scan
🇩🇪 dispaisyenterprises	2026-06-09 11:51:59 (2 hours ago)	Honeypot [fra-de-honeypot]: Empty payload (likely service probe); 1804 [1], 16089 [1], 9711 [1], 568 ... show more Honeypot [fra-de-honeypot]: Empty payload (likely service probe); 1804 [1], 16089 [1], 9711 [1], 56827 [1], 55652 [1], 1879 [1] TCP Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇭🇰 pengpeng	2026-06-09 10:08:17 (4 hours ago)	monitor: on ser162528253480 \| port: 36199 \| ttl: 127 script: github.com/sefinek/UFW-AbuseIPDB-Repor ... show more monitor: on ser162528253480 \| port: 36199 \| ttl: 127 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇬🇧 WebServ	2026-06-09 10:07:44 (4 hours ago)	Blocked by ufw after 5 attempts in last 300s.	Brute-Force
🇺🇸 podril1ak2.ru	2026-06-09 10:06:49 (4 hours ago)	Blocked by UFW on reporterUS [18424/tcp] \| SPT: 56804 \| TTL: 52 \| LEN: 52 \| TOS: 0x00 • Reported by: ... show more Blocked by UFW on reporterUS [18424/tcp] \| SPT: 56804 \| TTL: 52 \| LEN: 52 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇮 nNordic	2026-06-09 09:12:18 (5 hours ago)	Connection attempt blocked by IDS/IPS from 85.217.140.41/32	Hacking
🇭🇰 pengpeng	2026-06-09 08:06:21 (6 hours ago)	monitor: on ser162528253480 \| port: 11639 \| ttl: 127 script: github.com/sefinek/UFW-AbuseIPDB-Repor ... show more monitor: on ser162528253480 \| port: 11639 \| ttl: 127 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇧🇬 pa4080	2026-06-09 07:57:22 (6 hours ago)	Detected by ModSecurity. Host header is an IP address, Request URI: /	Hacking Web App Attack
🇩🇪 eskilbrun	2026-06-09 07:56:55 (6 hours ago)	2026-06-09T09:56:54.273716+02:00 linode1.eskil.net dovecot[65958]: imap-login: Disconnected: Connect ... show more 2026-06-09T09:56:54.273716+02:00 linode1.eskil.net dovecot[65958]: imap-login: Disconnected: Connection closed (no auth attempts in 0 secs): user=<>, rip=85.217.140.41, lip=194.195.241.187, TLS: Connection closed, session=<6AVweM1T6J9V2Ywp> 2026-06-09T09:56:54.778771+02:00 linode1.eskil.net dovecot[65958]: imap-login: Disconnected: Connection closed: read(size=597) failed: Connection reset by peer (no auth attempts in 0 secs): user=<>, rip=85.217.140.41, lip=194.195.241.187, TLS handshaking: read(size=597) failed: Connection reset by peer, session=<sL53eM1T6p9V2Ywp> 2026-06-09T09:56:54.815855+02:00 linode1.eskil.net dovecot[65958]: imap-login: Disconnected: Connection closed: read(size=597) failed: Connection reset by peer (no auth attempts in 0 secs): user=<>, rip=85.217.140.41, lip=194.195.241.187, TLS handshaking: read(size=597) failed: Connection reset by peer, session=</E94eM1T9J9V2Ywp> ... show less	Brute-Force
🇳🇱 donarev419	2026-06-09 07:42:19 (6 hours ago)	Connection to port 18241 with data transfer. Data preview:	Port Scan Hacking
🇺🇸 donarev419	2026-06-09 07:17:51 (7 hours ago)	Connection to port 16454 with data transfer. Data preview:	Port Scan Hacking
🇪🇸 librebit	2026-06-09 06:57:18 (7 hours ago)	Brute force	Brute-Force
🇺🇸 donarev419	2026-06-09 06:51:36 (7 hours ago)	Connection to port 13069 with data transfer. Data preview:	Port Scan Hacking

Showing 1 to 15 of 6873 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇻🇳 160.250.186.97

🇻🇳 160.25.81.6

🇸🇬 146.190.107.25

🇨🇦 137.184.168.78

🇬🇧 87.106.67.224

🇳🇱 45.148.10.141

🇳🇱 5.255.113.6

🇮🇳 223.188.79.23

🇰🇷 211.37.174.180

🇹🇳 197.0.63.92

🇮🇱 194.36.89.144

🇲🇽 186.96.145.241

🇪🇨 186.4.240.226

🇺🇸 104.28.158.191

🇭🇰 101.36.116.204

🇱🇹 91.224.92.141

🇫🇷 67.159.213.230

🇪🇬 41.46.106.6

🇺🇸 35.193.175.39

🇺🇸 34.121.75.49