JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 85.217.149.37

85.217.149.37 was found in our database!

This IP was reported 283 times. Confidence of Abuse is 100%: ?

100%

ISP	NL MODAT
Usage Type	Data Center/Web Hosting/Transit
ASN	AS209334
Hostname(s)	to001.scanner.modat.io
Domain Name	modat.io
Country	🇨🇦 Canada
City	Montreal, Quebec

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 85.217.149.37

Whois 85.217.149.37

IP Abuse Reports for 85.217.149.37:

This IP address has been reported a total of 283 times from 100 distinct sources. 85.217.149.37 was first reported on January 29th 2026, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Nova Reed	2026-07-07 15:03:06 (4 days ago)	Jul 7 23:00:30 racknerd-df72780 kernel: [7797895.544262] [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:e8:9 ... show more Jul 7 23:00:30 racknerd-df72780 kernel: [7797895.544262] [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:e8:95:3e:20:d8:0b:13:e1:41:08:00 SRC=85.217.149.37 DST=67.215.241.238 LEN=52 TOS=0x00 PREC=0x00 TTL=45 ID=14242 PROTO=TCP SPT=56642 DPT=19260 WINDOW=65535 RES=0x00 SYN URGP=0 Jul 7 23:02:52 racknerd-df72780 kernel: [7798037.966485] [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:e8:95:3e:20:d8:0b:13:e1:41:08:00 SRC=85.217.149.37 DST=67.215.241.238 LEN=52 TOS=0x08 PREC=0x20 TTL=42 ID=31605 PROTO=TCP SPT=58476 DPT=10938 WINDOW=65535 RES=0x00 SYN URGP=0 Jul 7 23:03:06 racknerd-df72780 kernel: [7798051.315848] [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:e8:95:3e:20:d8:0b:13:e1:41:08:00 SRC=85.217.149.37 DST=67.215.241.238 LEN=52 TOS=0x08 PREC=0x20 TTL=42 ID=11841 PROTO=TCP SPT=45871 DPT=13879 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Brute-Force SSH
🇭🇰 pengpeng	2026-07-07 14:04:52 (4 days ago)	monitor: on ser162528253480 \| port: 25530 \| ttl: 44 script: github.com/sefinek/UFW-AbuseIPDB-Report ... show more monitor: on ser162528253480 \| port: 25530 \| ttl: 44 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 etu brutus	2026-07-07 13:40:22 (4 days ago)	85.217.149.37 Blocked by [Attack Vector List] ...	Hacking Brute-Force Exploited Host
🇭🇰 pengpeng	2026-07-07 12:50:29 (4 days ago)	monitor: on ser162528253480 \| port: 52361 \| ttl: 45 script: github.com/sefinek/UFW-AbuseIPDB-Report ... show more monitor: on ser162528253480 \| port: 52361 \| ttl: 45 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇭🇰 PingMeMaybe	2026-07-07 12:46:18 (4 days ago)	Blocked by UFW on hk [62719/tcp] Source port: 50315 TTL: 47 Packet length: 52 TOS: 0x00 This report ... show more Blocked by UFW on hk [62719/tcp] Source port: 50315 TTL: 47 Packet length: 52 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-07-07 12:33:51 (4 days ago)	Blocked by UFW (TCP on 50197) Source port: 47404 TTL: 52 Packet length: 52 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 50197) Source port: 47404 TTL: 52 Packet length: 52 TOS: 0x00 This report (for 85.217.149.37) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-07-07 12:09:27 (4 days ago)	Blocked by UFW (TCP on 154) Source port: 55373 TTL: 51 Packet length: 52 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 154) Source port: 55373 TTL: 51 Packet length: 52 TOS: 0x00 This report (for 85.217.149.37) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 sefinek.net	2026-07-07 12:03:50 (4 days ago)	Blocked by UFW on NY01 [38781/tcp] \| SPT: 52813 \| TTL: 52 \| LEN: 52 \| TOS: 0x00 • Reported by: githu ... show more Blocked by UFW on NY01 [38781/tcp] \| SPT: 52813 \| TTL: 52 \| LEN: 52 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 MPL	2026-07-07 12:03:42 (4 days ago)	tcp port scan (65 or more attempts)	Port Scan
🇺🇸 xmission.com	2026-07-07 11:47:42 (4 days ago)	Blocked by UFW (TCP on 9324) Source port: 47275 TTL: 51 Packet length: 52 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 9324) Source port: 47275 TTL: 51 Packet length: 52 TOS: 0x00 This report (for 85.217.149.37) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-07-07 11:31:45 (4 days ago)	Blocked by UFW (TCP on 60729) Source port: 58139 TTL: 51 Packet length: 52 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 60729) Source port: 58139 TTL: 51 Packet length: 52 TOS: 0x00 This report (for 85.217.149.37) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇬🇧 WebServ	2026-07-07 11:27:37 (4 days ago)	Blocked by ufw after 5 attempts in last 300s.	Brute-Force
🇭🇰 pengpeng	2026-07-07 11:27:34 (4 days ago)	monitor: on ser162528253480 \| port: 58439 \| ttl: 44 script: github.com/sefinek/UFW-AbuseIPDB-Report ... show more monitor: on ser162528253480 \| port: 58439 \| ttl: 44 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 sthoyer.de	2026-07-07 11:25:34 (4 days ago)	Jul 7 13:25:00 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd: ... show more Jul 7 13:25:00 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=85.217.149.37 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=48 ID=5484 PROTO=TCP SPT=34499 DPT=28253 WINDOW=65535 RES=0x00 SYN URGP=0 Jul 7 13:25:33 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=85.217.149.37 DST=173.212.223.67 LEN=52 TOS=0x08 PREC=0x20 TTL=51 ID=13187 PROTO=TCP SPT=44725 DPT=48115 WINDOW=65535 RES=0x00 SYN URGP=0 Jul 7 13:25:33 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=85.217.149.37 DST=173.212.223.67 LEN=52 TOS=0x08 PREC=0x20 TTL=51 ID=13187 PROTO=TCP SPT=44725 DPT=48115 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇳🇱 VMHeaven.io	2026-07-07 11:25:03 (4 days ago)	Blocked by UFW [28253/tcp] Source port: 36532 TTL: 50 Packet length: 52	Port Scan

Showing 1 to 15 of 283 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 211.20.7.19

🇺🇸 172.253.223.215

🇷🇴 92.118.39.71

🇺🇸 65.49.1.211

🇸🇬 43.160.245.79

🇺🇸 20.169.104.246

🇺🇸 20.14.73.63

🇨🇱 186.64.123.124

🇫🇮 147.185.133.46

🇨🇳 110.40.129.177

🇲🇦 102.53.15.56

🇳🇱 88.151.33.203

🇮🇳 52.140.120.45

🇷🇴 13.143.252.240

🇺🇸 2602:80d:1007::7c

🇭🇰 220.246.42.227

🇺🇸 172.200.228.35

🇺🇸 172.110.223.216

🇳🇱 172.94.9.203

🇮🇳 159.65.148.158