JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 85.217.140.48

85.217.140.48 was found in our database!

This IP was reported 6,784 times. Confidence of Abuse is 100%: ?

100%

ISP	NL MODAT
Usage Type	Commercial
ASN	AS209334
Hostname(s)	o347.scanner.modat.io
Domain Name	modat.io
Country	🇫🇷 France
City	Gravelines, Hauts-de-France

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 85.217.140.48

Whois 85.217.140.48

IP Abuse Reports for 85.217.140.48:

This IP address has been reported a total of 6,784 times from 377 distinct sources. 85.217.140.48 was first reported on March 4th 2026, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 ValtonTahiri	2026-03-04 17:24:09 (2 months ago)	Honeypot hit: HTTP/1.1 request on 1143 'GET / Full payload: 'GET / HTTP/1.1 Host: bbb.ccc ' on 1143 ... show more Honeypot hit: HTTP/1.1 request on 1143 'GET / Full payload: 'GET / HTTP/1.1 Host: bbb.ccc ' on 1143/TCP (1 attempt) show less	Hacking Bad Web Bot
🇯🇵 jay hung	2026-03-04 17:06:36 (2 months ago)	2026-03-04T17:06:32.816668+00:00 quarktech kernel: [1572762.699575] [UFW BLOCK] IN=eth0 OUT= MAC=22: ... show more 2026-03-04T17:06:32.816668+00:00 quarktech kernel: [1572762.699575] [UFW BLOCK] IN=eth0 OUT= MAC=22:00:92:2e:84:93:fe:ff:ff:ff:ff:ff:08:00 SRC=85.217.140.48 DST=172.237.29.33 LEN=60 TOS=0x00 PREC=0x40 TTL=41 ID=27203 DF PROTO=TCP SPT=37970 DPT=4444 WINDOW=64240 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇬🇧 gbzret4d	2026-03-04 16:35:39 (2 months ago)	Honeypot [uk-production01]: Unauthorized traffic on 135/epmapper	Port Scan
🇩🇪 leryon	2026-03-04 16:30:17 (2 months ago)	IP: 85.217.140.48 sends in the last 24 hours 14 invalid requests over 25	Hacking Email Spam
🇦🇹 HoneyPotEu-AT	2026-03-04 16:27:25 (2 months ago)	1772641642 - 03/04/2026 17:27:22 Host: 85.217.140.48/85.217.140.48 Port: 79 TCP Blocked ...	Port Scan
🇭🇰 pengpeng	2026-03-04 15:54:35 (2 months ago)	monitor: on ser162528253480 \| port: 12429 \| ttl: 51 script: github.com/sefinek/UFW-AbuseIPDB-Report ... show more monitor: on ser162528253480 \| port: 12429 \| ttl: 51 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 2048	2026-03-04 15:37:43 (2 months ago)	2026-03-04T16:35:25.321881+01:00 machodeer kernel: [895341.198191] [UFW BLOCK] IN=ens3 OUT= MAC=REDA ... show more 2026-03-04T16:35:25.321881+01:00 machodeer kernel: [895341.198191] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=85.217.140.48 DST=REDACTED LEN=52 TOS=0x00 PREC=0x00 TTL=51 ID=13412 PROTO=TCP SPT=51343 DPT=34754 WINDOW=65535 RES=0x00 SYN URGP=0 2026-03-04T16:37:30.129370+01:00 machodeer kernel: [895466.007125] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=85.217.140.48 DST=REDACTED LEN=52 TOS=0x00 PREC=0x00 TTL=52 ID=59359 PROTO=TCP SPT=36213 DPT=30577 WINDOW=65535 RES=0x00 SYN URGP=0 2026-03-04T16:37:42.466156+01:00 machodeer kernel: [895478.345815] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=85.217.140.48 DST=REDACTED LEN=52 TOS=0x00 PREC=0x00 TTL=52 ID=37779 PROTO=TCP SPT=45457 DPT=22273 WINDOW=65535 RES=0x00 SYN URGP=0 show less	Port Scan
🇩🇪 wiredalter	2026-03-04 15:35:39 (2 months ago)	Blocked by UFW on dVPS [47241/tcp] Source Port: 33184 TTL: 55 Packet Length: 52 TOS: 0x00 Analyzed ... show more Blocked by UFW on dVPS [47241/tcp] Source Port: 33184 TTL: 55 Packet Length: 52 TOS: 0x00 Analyzed by https://ip.wiredalter.com show less	Port Scan Brute-Force
🇩🇪 dispaisyenterprises	2026-03-04 15:26:57 (2 months ago)	Honeypot hit: Unauthorized traffic (1 bytes of payload); 8953 [1], 2478 [1], 12161 [1], 4034 [1], 20 ... show more Honeypot hit: Unauthorized traffic (1 bytes of payload); 8953 [1], 2478 [1], 12161 [1], 4034 [1], 2035 [1], 2936 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇵🇱 sefinek.net	2026-03-04 15:07:34 (2 months ago)	Honeypot hit: Unauthorized traffic (1 bytes of payload); 4106 [1], 9513 [1], 3747 [1], 5924 [1], 959 ... show more Honeypot hit: Unauthorized traffic (1 bytes of payload); 4106 [1], 9513 [1], 3747 [1], 5924 [1], 9596 [1], 48100 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
Anonymous	2026-03-04 14:51:12 (2 months ago)	PROTO=TCP DPT=10052	Port Scan Hacking
🇯🇵 mkaraki	2026-03-04 14:21:59 (2 months ago)	1772634108 # Service_probe # SIGNATURE_SEND # source_ip:85.217.140.48 # dst_port:1524 ...	Port Scan
🇲🇳 Public CSIRT/CC of Mongolia	2026-03-04 14:17:58 (2 months ago)	Honeypot hit: HTTP/1.1 request on 1466 'GET /; 1466 [1], 1541 [1], 1487 [1], 1464 [1] TCP	Web App Attack
Anonymous	2026-03-04 14:15:54 (2 months ago)	AS209334: 85.217.140.0/24 - Modat B.V. (FR)	Port Scan
🇭🇰 pengpeng	2026-03-04 14:12:51 (2 months ago)	monitor: on ser162528253480 \| port: 39317 \| ttl: 51 script: github.com/sefinek/UFW-AbuseIPDB-Report ... show more monitor: on ser162528253480 \| port: 39317 \| ttl: 51 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 6736 to 6750 of 6784 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 165.154.255.26

🇮🇳 106.200.30.161

🇺🇸 54.193.19.114

🇰🇪 196.97.1.123

🇸🇬 194.233.89.40

🇮🇳 43.228.112.254

🇬🇧 35.203.211.68

🇺🇸 20.65.194.40

🇮🇳 14.97.28.238

🇷🇴 2.57.122.238

🇺🇸 192.3.250.115

🇸🇦 169.148.5.222

🇺🇸 162.216.149.237

🇺🇸 124.198.131.39

🇨🇳 115.29.171.141

🇨🇳 106.75.12.244

🇺🇸 91.230.168.90

🇺🇸 66.132.195.124

🇺🇸 64.62.197.137

🇺🇸 35.254.26.12