JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 85.217.149.46

85.217.149.46 was found in our database!

This IP was reported 4,588 times. Confidence of Abuse is 100%: ?

100%

ISP	NL MODAT
Usage Type	Commercial
ASN	AS209334
Hostname(s)	o046.scanner.modat.io
Domain Name	modat.io
Country	🇨🇦 Canada
City	Montreal, Quebec

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 85.217.149.46

Whois 85.217.149.46

IP Abuse Reports for 85.217.149.46:

This IP address has been reported a total of 4,588 times from 208 distinct sources. 85.217.149.46 was first reported on March 4th 2026, and the most recent report was 8 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇭🇰 PingMeMaybe	2026-05-31 21:16:21 (3 days ago)	Blocked by UFW on hk [23046/tcp] Source port: 36591 TTL: 46 Packet length: 52 TOS: 0x00 This report ... show more Blocked by UFW on hk [23046/tcp] Source port: 36591 TTL: 46 Packet length: 52 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 pjfasano	2026-05-31 18:02:30 (3 days ago)	May 31 18:02:28 fermi postfix/submissions/smtpd[11857]: lost connection after EHLO from o046.scanner ... show more May 31 18:02:28 fermi postfix/submissions/smtpd[11857]: lost connection after EHLO from o046.scanner.modat.io[85.217.149.46] May 31 18:02:29 fermi postfix/submissions/smtpd[11857]: lost connection after CONNECT from o046.scanner.modat.io[85.217.149.46] May 31 18:02:29 fermi postfix/submissions/smtpd[11857]: lost connection after CONNECT from o046.scanner.modat.io[85.217.149.46] May 31 18:02:29 fermi postfix/submissions/smtpd[11857]: lost connection after CONNECT from o046.scanner.modat.io[85.217.149.46] May 31 18:02:29 fermi postfix/submissions/smtpd[11857]: lost connection after CONNECT from o046.scanner.modat.io[85.217.149.46] May 31 18:02:29 fermi postfix/submissions/smtpd[11857]: lost connection after CONNECT from o046.scanner.modat.io[85.217.149.46] May 31 18:02:29 fermi postfix/submissions/smtpd[11857]: lost connection after CONNECT from o046.scanner.modat.io[85.217.149.46] May 31 18:02:29 fermi postfix/submissions/smtpd[11857]: lost connection after CONNECT from o046.scanner.mod ... show less	Brute-Force SSH
🇺🇸 shabi	2026-05-31 17:30:48 (3 days ago)	UFW Blocked [33814/TCP] Source: 85.217.149.46:54572 TTL: 52 Lenth: 52 TOS: 0x00	Port Scan
🇩🇪 wiredalter	2026-05-31 17:29:07 (3 days ago)	Blocked by UFW on dVPS [3851/tcp] Source Port: 42077 TTL: 52 Packet Length: 52 TOS: 0x00 Analyzed b ... show more Blocked by UFW on dVPS [3851/tcp] Source Port: 42077 TTL: 52 Packet Length: 52 TOS: 0x00 Analyzed by https://ip.wiredalter.com show less	Port Scan Brute-Force
🇺🇸 mutebot.net	2026-05-31 11:07:28 (3 days ago)	SRC=85.217.149.46, PROTO=TCP, SPT=52462, DPT=46811	Port Scan
🇲🇳 Public CSIRT/CC of Mongolia	2026-05-31 10:24:18 (3 days ago)	Honeypot hit: Unauthorized traffic (3 bytes of payload); 9925 [1] TCP	Port Scan
🇩🇪 2048	2026-05-31 08:52:30 (3 days ago)	2026-05-31T10:51:11.998987+02:00 machodeer kernel: [2925390.134363] [UFW BLOCK] IN=ens3 OUT= MAC=RED ... show more 2026-05-31T10:51:11.998987+02:00 machodeer kernel: [2925390.134363] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=85.217.149.46 DST=REDACTED LEN=52 TOS=0x00 PREC=0x00 TTL=47 ID=32176 PROTO=TCP SPT=56878 DPT=52055 WINDOW=65535 RES=0x00 SYN URGP=0 2026-05-31T10:52:17.142886+02:00 machodeer kernel: [2925455.278559] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=85.217.149.46 DST=REDACTED LEN=52 TOS=0x00 PREC=0x00 TTL=47 ID=55590 PROTO=TCP SPT=38311 DPT=45690 WINDOW=65535 RES=0x00 SYN URGP=0 2026-05-31T10:52:29.686102+02:00 machodeer kernel: [2925467.821327] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=85.217.149.46 DST=REDACTED LEN=52 TOS=0x00 PREC=0x00 TTL=49 ID=53234 PROTO=TCP SPT=49193 DPT=57609 WINDOW=65535 RES=0x00 SYN URGP=0 show less	Port Scan
🇦🇺 LiftUp Hosting	2026-05-31 08:46:01 (3 days ago)	Honeypot hit: Empty payload (likely service probe); 8067 [1], 4068 [1], 4067 [1] TCP	Port Scan
🇩🇪 manuelisus	2026-05-31 08:27:45 (3 days ago)	Honeypot SSH: +10: honeypot_connection, +15: short_automated_session, +15: ssh_empty_banner, +25: rd ... show more Honeypot SSH: +10: honeypot_connection, +15: short_automated_session, +15: ssh_empty_banner, +25: rdns_contains_scan, +10: os_server_linux show less	Brute-Force SSH
🇺🇸 donarev419	2026-05-31 07:10:51 (3 days ago)	Connection to port 3237 with data transfer. Data preview:	Port Scan Hacking
🇭🇰 PingMeMaybe	2026-05-31 06:34:38 (3 days ago)	Blocked by UFW on hk [63847/tcp] Source port: 58673 TTL: 48 Packet length: 52 TOS: 0x00 This report ... show more Blocked by UFW on hk [63847/tcp] Source port: 58673 TTL: 48 Packet length: 52 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 2048	2026-05-31 06:32:06 (3 days ago)	2026-05-31T08:30:21.551820+02:00 machodeer kernel: [2916939.647916] [UFW BLOCK] IN=ens3 OUT= MAC=RED ... show more 2026-05-31T08:30:21.551820+02:00 machodeer kernel: [2916939.647916] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=85.217.149.46 DST=REDACTED LEN=52 TOS=0x00 PREC=0x00 TTL=48 ID=62782 PROTO=TCP SPT=48015 DPT=21995 WINDOW=65535 RES=0x00 SYN URGP=0 2026-05-31T08:31:29.453737+02:00 machodeer kernel: [2917007.550097] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=85.217.149.46 DST=REDACTED LEN=52 TOS=0x00 PREC=0x00 TTL=48 ID=23821 PROTO=TCP SPT=35344 DPT=43018 WINDOW=65535 RES=0x00 SYN URGP=0 2026-05-31T08:32:04.613474+02:00 machodeer kernel: [2917042.709964] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=85.217.149.46 DST=REDACTED LEN=52 TOS=0x00 PREC=0x00 TTL=45 ID=57859 PROTO=TCP SPT=51457 DPT=44629 WINDOW=65535 RES=0x00 SYN URGP=0 show less	Port Scan
🇺🇸 donarev419	2026-05-31 06:16:32 (3 days ago)	Connection to port 2978 with data transfer. Data preview: SSH-2.0-Go	Port Scan Hacking
🇺🇸 donarev419	2026-05-31 05:57:11 (3 days ago)	Connection to port 2646 with data transfer. Data preview:	Port Scan Hacking
🇺🇸 donarev419	2026-05-31 05:26:12 (3 days ago)	Connection to port 11232 with data transfer. Data preview: SSH-2.0-Go	Port Scan Hacking

Showing 76 to 90 of 4588 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 213.177.179.134

🇺🇸 195.184.76.94

🇳🇱 195.178.110.30

🇸🇮 176.65.134.20

🇨🇳 112.26.154.149

🇻🇳 103.166.184.148

🇳🇬 102.219.153.126

🇨🇳 101.96.200.105

🇬🇧 45.82.76.134

🇩🇪 43.228.157.55

🇺🇸 2001:470:2cc:1::1cb

🇨🇳 220.154.138.217

🇪🇸 212.230.190.253

🇺🇸 209.250.5.45

🇹🇿 196.249.113.39

🇧🇷 186.251.71.202

🇬🇧 178.128.36.92

🇳🇱 178.18.147.223

🇺🇸 173.255.210.89

🇬🇧 165.232.96.39