JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 85.217.140.51

85.217.140.51 was found in our database!

This IP was reported 6,785 times. Confidence of Abuse is 100%: ?

100%

ISP	NL MODAT
Usage Type	Commercial
ASN	AS209334
Hostname(s)	o350.scanner.modat.io
Domain Name	modat.io
Country	🇫🇷 France
City	Gravelines, Hauts-de-France

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 85.217.140.51

Whois 85.217.140.51

IP Abuse Reports for 85.217.140.51:

This IP address has been reported a total of 6,785 times from 380 distinct sources. 85.217.140.51 was first reported on March 4th 2026, and the most recent report was 49 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 mutebot.net	2026-05-30 22:36:00 (4 days ago)	SRC=85.217.140.51, PROTO=TCP, SPT=47467, DPT=5390	Port Scan
🇩🇪 Lazentis	2026-05-30 22:31:09 (4 days ago)	Unauthorized access attempt to port 22 (tcp)	Brute-Force SSH
🇬🇧 gbzret4d	2026-05-30 20:57:57 (4 days ago)	Honeypot [uk-production01]: SSH handshake/banner (12 bytes of payload); 10278 [1] TCP	SSH
🇩🇪 2048	2026-05-30 20:02:22 (4 days ago)	2026-05-30T22:01:27.522801+02:00 machodeer kernel: [2879205.463028] [UFW BLOCK] IN=ens3 OUT= MAC=RED ... show more 2026-05-30T22:01:27.522801+02:00 machodeer kernel: [2879205.463028] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=85.217.140.51 DST=REDACTED LEN=52 TOS=0x00 PREC=0x00 TTL=49 ID=16748 PROTO=TCP SPT=45821 DPT=32888 WINDOW=65535 RES=0x00 SYN URGP=0 2026-05-30T22:02:02.661712+02:00 machodeer kernel: [2879240.605776] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=85.217.140.51 DST=REDACTED LEN=52 TOS=0x00 PREC=0x00 TTL=52 ID=53562 PROTO=TCP SPT=35462 DPT=34955 WINDOW=65535 RES=0x00 SYN URGP=0 2026-05-30T22:02:22.022145+02:00 machodeer kernel: [2879259.966294] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=85.217.140.51 DST=REDACTED LEN=52 TOS=0x00 PREC=0x00 TTL=49 ID=6300 PROTO=TCP SPT=56755 DPT=61174 WINDOW=65535 RES=0x00 SYN URGP=0 show less	Port Scan
🇲🇳 Public CSIRT/CC of Mongolia	2026-05-30 18:15:41 (4 days ago)	Honeypot hit: SSH handshake/banner (12 bytes of payload); 10152 [1] TCP	Brute-Force SSH
🇦🇺 LiftUp Hosting	2026-05-30 17:10:03 (4 days ago)	Honeypot hit: Empty payload (likely service probe); 9754 [1], 5373 [1], 58468 [1], 1940 [1], 60038 [ ... show more Honeypot hit: Empty payload (likely service probe); 9754 [1], 5373 [1], 58468 [1], 1940 [1], 60038 [1], 8982 [1] TCP show less	Port Scan
🇩🇪 dispaisyenterprises	2026-05-30 16:42:09 (4 days ago)	Honeypot [fra-de-honeypot]: Empty payload (likely service probe); 4877 [1], 9109 [1] TCP Reported by ... show more Honeypot [fra-de-honeypot]: Empty payload (likely service probe); 4877 [1], 9109 [1] TCP Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇵🇱 sefinek.net	2026-05-30 16:39:37 (4 days ago)	Honeypot hit: SSH handshake/banner (12 bytes of payload); 2798 [1], 5999 [1], 6013 [1], 6341 [1], 28 ... show more Honeypot hit: SSH handshake/banner (12 bytes of payload); 2798 [1], 5999 [1], 6013 [1], 6341 [1], 2813 [1], 6408 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	SSH
🇩🇪 2048	2026-05-30 13:16:54 (4 days ago)	2026-05-30T15:15:52.048558+02:00 machodeer kernel: [2854869.890918] [UFW BLOCK] IN=ens3 OUT= MAC=RED ... show more 2026-05-30T15:15:52.048558+02:00 machodeer kernel: [2854869.890918] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=85.217.140.51 DST=REDACTED LEN=52 TOS=0x00 PREC=0x00 TTL=51 ID=34000 PROTO=TCP SPT=42494 DPT=48752 WINDOW=65535 RES=0x00 SYN URGP=0 2026-05-30T15:16:06.291739+02:00 machodeer kernel: [2854884.134055] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=85.217.140.51 DST=REDACTED LEN=52 TOS=0x00 PREC=0x00 TTL=52 ID=58333 PROTO=TCP SPT=60804 DPT=5357 WINDOW=65535 RES=0x00 SYN URGP=0 2026-05-30T15:16:52.937451+02:00 machodeer kernel: [2854930.780104] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=85.217.140.51 DST=REDACTED LEN=52 TOS=0x00 PREC=0x00 TTL=49 ID=10023 PROTO=TCP SPT=44229 DPT=11834 WINDOW=65535 RES=0x00 SYN URGP=0 show less	Port Scan
🇨🇭 ScanThe.Net	2026-05-30 12:32:56 (4 days ago)	ID: 3686871723 \| PORT: 33327 \| https://85-217-140-51.scanthe.net	Port Scan
🇩🇪 femboy.cat	2026-05-30 11:16:26 (4 days ago)	Port scan to tcp/5784 from 85.217.140.51	Brute-Force
🇬🇧 gbzret4d	2026-05-30 10:27:52 (4 days ago)	Honeypot [uk-production01]: Empty payload (likely service probe); 2396 [1], 9620 [1], 5470 [1], 5652 ... show more Honeypot [uk-production01]: Empty payload (likely service probe); 2396 [1], 9620 [1], 5470 [1], 5652 [1] TCP show less	Port Scan
🇩🇪 Justin F. \| AS204464	2026-05-30 10:22:34 (4 days ago)	Honeypot [nx-infrastructure]: Unauthorized traffic (19 bytes of payload); 4769 [1], 4871 [1], 4677 [ ... show more Honeypot [nx-infrastructure]: Unauthorized traffic (19 bytes of payload); 4769 [1], 4871 [1], 4677 [1], 1834 [1], 1662 [1], 8548 [1] TCP Reported by: Justin F. show less	Port Scan
🇩🇪 dispaisyenterprises	2026-05-30 10:18:12 (4 days ago)	Honeypot [fra-de-honeypot]: Unauthorized traffic (3 bytes of payload); 4700 [1], 16286 [1], 4585 [1] ... show more Honeypot [fra-de-honeypot]: Unauthorized traffic (3 bytes of payload); 4700 [1], 16286 [1], 4585 [1], 1782 [1], 16367 [1], 4722 [1] TCP Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇦🇺 LiftUp Hosting	2026-05-30 10:16:08 (4 days ago)	Honeypot hit: Unauthorized traffic (3 bytes of payload); 8437 [1], 3973 [1], 8546 [1], 1760 [1], 172 ... show more Honeypot hit: Unauthorized traffic (3 bytes of payload); 8437 [1], 3973 [1], 8546 [1], 1760 [1], 1724 [1], 4495 [1] TCP show less	Port Scan

Showing 91 to 105 of 6785 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.180.246.180

🇺🇸 162.216.150.69

🇰🇷 112.161.26.125

🇵🇰 103.244.175.117

🇺🇸 98.88.251.176

🇺🇸 96.127.172.215

🇫🇷 85.69.240.210

🇮🇳 69.57.172.212

🇧🇪 34.77.202.172

🇸🇪 31.208.54.221

🇺🇸 3.138.107.230

🇩🇪 2a01:239:211:3900::1

🇪🇸 212.30.33.130

🇹🇼 198.235.24.125

🇰🇷 175.198.180.129

🇭🇰 156.233.229.139

🇯🇵 133.18.180.27

🇻🇳 116.98.245.219

🇨🇭 85.5.148.125

🇺🇸 74.82.47.19