JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 85.217.140.54

85.217.140.54 was found in our database!

This IP was reported 1,349 times. Confidence of Abuse is 100%: ?

100%

ISP	NL MODAT
Usage Type	Data Center/Web Hosting/Transit
ASN	AS209334
Hostname(s)	o353.scanner.modat.io
Domain Name	modat.io
Country	🇫🇷 France
City	Gravelines, Hauts-de-France

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 85.217.140.54

Whois 85.217.140.54

IP Abuse Reports for 85.217.140.54:

This IP address has been reported a total of 1,349 times from 240 distinct sources. 85.217.140.54 was first reported on March 4th 2026, and the most recent report was 29 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 donarev419	2026-07-10 00:36:43 (29 minutes ago)	Connection to port 4588 with data transfer. Data preview:	Port Scan Hacking
🇫🇷 ✨	2026-07-09 23:30:09 (1 hour ago)	Rule : DNS Rule: DNS Event: DNS UserAccount: SYSTEM 85.217.140.54	DNS Compromise
🇺🇸 mutebot.net	2026-07-09 22:02:55 (3 hours ago)	SRC=85.217.140.54, PROTO=TCP, SPT=36537, DPT=49413	Port Scan
🇳🇴 tmiland	2026-07-09 20:42:57 (4 hours ago)	Suricata Detected 87 attacks from 85.217.140.54.; GPL DNS named version attempt; IP: 85.217.140.54; ... show more Suricata Detected 87 attacks from 85.217.140.54.; GPL DNS named version attempt; IP: 85.217.140.54; Ports: 34189; Direction: to_server; Trigger: DNS; Category: Attempted Information Leak; Severity: 2 show less	Brute-Force
Anonymous	2026-07-09 19:30:04 (5 hours ago)	Triggered: repeated knocking on closed ports.	Port Scan
🇨🇴 adalbertoreyes.org	2026-07-09 17:45:38 (7 hours ago)	CategoryBruteForce WebPage	Brute-Force
🇯🇵 Dominicwu	2026-07-09 17:00:33 (8 hours ago)	2026-07-09T16:40:12.923399jp5-20260623163121e9b43b kernel: [161998.208959] F2B-PORTSCAN IN=eth0 OUT= ... show more 2026-07-09T16:40:12.923399jp5-20260623163121e9b43b kernel: [161998.208959] F2B-PORTSCAN IN=eth0 OUT= MAC=bc:24:11:90:74:e5:3c:c7:86:2a:69:57:08:00 SRC=85.217.140.54 DST=156.231.117.253 LEN=52 TOS=0x00 PREC=0x00 TTL=46 ID=27228 PROTO=TCP SPT=48296 DPT=51719 WINDOW=65535 RES=0x00 SYN URGP=0 2026-07-09T16:58:36.573203jp5-20260623163121e9b43b kernel: [163101.854406] F2B-PORTSCAN IN=eth0 OUT= MAC=bc:24:11:90:74:e5:3c:c7:86:2a:69:57:08:00 SRC=85.217.140.54 DST=156.231.117.253 LEN=52 TOS=0x00 PREC=0x00 TTL=46 ID=39690 PROTO=TCP SPT=51107 DPT=12013 WINDOW=65535 RES=0x00 SYN URGP=0 2026-07-09T16:58:53.583322jp5-20260623163121e9b43b kernel: [163118.868214] F2B-PORTSCAN IN=eth0 OUT= MAC=bc:24:11:90:74:e5:3c:c7:86:2a:69:57:08:00 SRC=85.217.140.54 DST=156.231.117.253 LEN=52 TOS=0x08 PREC=0x20 TTL=49 ID=37965 PROTO=TCP SPT=57453 DPT=57025 WINDOW=65535 RES=0x00 SYN URGP=0 2026-07-09T16:59:25.863786jp5-20260623163121e9b43b kernel: [163151.148689] F2B-PORTSCAN IN=eth0 OUT= MAC=bc:24:11:90:74:e5:3c:c ... show less	Port Scan
🇭🇰 PingMeMaybe	2026-07-09 16:39:58 (8 hours ago)	Blocked by UFW on hk [20919/tcp] Source port: 54367 TTL: 49 Packet length: 52 TOS: 0x00 This report ... show more Blocked by UFW on hk [20919/tcp] Source port: 54367 TTL: 49 Packet length: 52 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 drewf.ink	2026-07-09 15:26:21 (9 hours ago)	[15:26] Port scanning. Port(s) scanned: TCP/6000	Port Scan
🇺🇸 cazae	2026-07-09 14:59:00 (10 hours ago)	Unauthorized attempt on debian [37737/tcp] Source port: 56139 TTL: 45 Packet length: 52 TOS: 0x00 h ... show more Unauthorized attempt on debian [37737/tcp] Source port: 56139 TTL: 45 Packet length: 52 TOS: 0x00 https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇳🇱 VMHeaven.io	2026-07-09 14:58:43 (10 hours ago)	Blocked by UFW [53737/tcp] Source port: 34736 TTL: 54 Packet length: 52	Port Scan
🇫🇷 sthoyer.de	2026-07-09 14:58:42 (10 hours ago)	Jul 9 16:58:41 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd: ... show more Jul 9 16:58:41 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=85.217.140.54 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=53 ID=56409 PROTO=TCP SPT=57619 DPT=53737 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 Bankbook8585	2026-07-09 13:33:53 (11 hours ago)	T-Pot honeypot \| Dionaea honeypot: mssqld	Port Scan Hacking
🇫🇮 habs	2026-07-09 13:12:39 (11 hours ago)	85.217.140.54 - - [09/Jul/2026:16:12:38 +0300] "\x16\x03\x03\x01\xA5\x01\x00\x01\xA1\x03\x03\xD1b2%\ ... show more 85.217.140.54 - - [09/Jul/2026:16:12:38 +0300] "\x16\x03\x03\x01\xA5\x01\x00\x01\xA1\x03\x03\xD1b2%\x87\xBD\xC5\xE1\xEE\xA5\xC9\x99\x88\x17\x8F\xE7Mh\xF7v*\xBC>>2A\xA3\xD2\xC4\x96\x9C\xDF \xAE\xF8\xCFxQ\xCE\x02\xD0\xE6\x9F" 400 150 "-" "-" 85.217.140.54 - - [09/Jul/2026:16:12:38 +0300] "\x16\x03\x03\x01\xA5\x01\x00\x01\xA1\x03\x03\xE7\x19\xD2\x93\xE0i\x1B\x10\x17\xA6\x06\xBA'\xB4R\x01\xE8\x01gP\xDE\x12\xCF?\xBB\xEE\xD2j\xCAS\xA5\xC1 \xF8\x86%\xAC 3\x1D\xB2P:\xE5\xDDL\xFD:\xC1\xD4=;Y\xE9.J$9\x19\x9C=\xCA\xF2\x09:\x00\x8A\x00\x05\x00\x04\x00\x07\x00\xC0\x00\x84\x00\xBA\x00A\x00\x9D\xC0\xA1\xC0\x9D\x00=\x005\x00\x9C\xC0\xA0\xC0\x9C\x00<\x00/\x00" 400 150 "-" "-" ... show less	Port Scan Bad Web Bot
🇩🇪 Serpensin	2026-07-09 12:17:01 (12 hours ago)	Fail2Ban jail 'nginx-bad-request' banned 85.217.140.54 on GGC. Protected ports include SSH 22/222, w ... show more Fail2Ban jail 'nginx-bad-request' banned 85.217.140.54 on GGC. Protected ports include SSH 22/222, web 80/443, Minecraft 25565-25620, Source 27015-27050, other games 30000-30100. show less	Hacking Web App Attack

Showing 1 to 15 of 1349 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 172.191.132.202

🇺🇸 147.185.132.135

🇬🇧 87.236.176.103

🇺🇸 64.62.197.93

🇨🇳 36.21.152.40

🇮🇳 4.240.82.91

🇰🇷 218.146.155.93

🇺🇸 195.184.76.199

🇺🇸 195.184.76.198

🇦🇷 190.120.191.148

🇻🇪 185.229.219.109

🇷🇺 154.90.70.254

🇻🇳 116.99.171.121

🇧🇩 103.183.62.1

🇻🇳 103.53.231.159

🇧🇬 79.124.62.126

🇩🇪 69.5.169.39

🇺🇸 66.132.172.16

🇺🇸 54.241.202.114

🇧🇷 45.205.1.69