JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 85.217.149.61

85.217.149.61 was found in our database!

This IP was reported 5,124 times. Confidence of Abuse is 100%: ?

100%

ISP	NL MODAT
Usage Type	Commercial
ASN	AS209334
Hostname(s)	o061.scanner.modat.io
Domain Name	modat.io
Country	🇨🇦 Canada
City	Montreal, Quebec

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 85.217.149.61

Whois 85.217.149.61

IP Abuse Reports for 85.217.149.61:

This IP address has been reported a total of 5,124 times from 201 distinct sources. 85.217.149.61 was first reported on March 4th 2026, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇲🇳 Public CSIRT/CC of Mongolia	2026-06-06 18:55:08 (3 hours ago)	Honeypot hit: Unauthorized traffic (1 bytes of payload); 12700 [1], 49724 [1], 49697 [1], 49739 [1] ... show more Honeypot hit: Unauthorized traffic (1 bytes of payload); 12700 [1], 49724 [1], 49697 [1], 49739 [1] TCP show less	Port Scan
🇺🇸 SSP	2026-06-06 17:45:20 (4 hours ago)	Automatically generated from firewall logs on Server_ID: MIAPX1 Category: Port Scan Occurrences: 1 ... show more Automatically generated from firewall logs on Server_ID: MIAPX1 Category: Port Scan Occurrences: 123 Unique Ports: 71 Destination Ports: 1895, 5737, 50199, 5334, 12725, 866, 49749, 3227, 7347, 935, 6379, 49872, 12446, 10051, 49415, 5526, 10965, 1569, 10344, 5582, 49940, 770, 50166, 11143, 51722, 59160, 3808, 2559, 729, 9833, 6168, 3541, 3358, 2688, 5888, 49710, 6633, 4054, 1584, 9218, First Seen: 2026-06-06 16:45 UTC Last Seen: 2026-06-06 17:02 UTC show less	Port Scan
🇺🇸 shabi	2026-06-06 16:38:10 (5 hours ago)	UFW Blocked [28584/TCP] Source: 85.217.149.61:45914 TTL: 53 Lenth: 52 TOS: 0x00	Port Scan
🇭🇰 PingMeMaybe	2026-06-06 16:20:40 (6 hours ago)	Blocked by UFW on hk [13077/tcp] Source port: 46367 TTL: 49 Packet length: 52 TOS: 0x00 This report ... show more Blocked by UFW on hk [13077/tcp] Source port: 46367 TTL: 49 Packet length: 52 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 mutebot.net	2026-06-06 12:09:39 (10 hours ago)	SRC=85.217.149.61, PROTO=TCP, SPT=34718, DPT=27748	Port Scan
🇭🇰 pengpeng	2026-06-06 11:22:36 (11 hours ago)	monitor: on ser162528253480 \| port: 47679 \| ttl: 127 script: github.com/sefinek/UFW-AbuseIPDB-Repor ... show more monitor: on ser162528253480 \| port: 47679 \| ttl: 127 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇮🇩 Konaa	2026-06-06 10:08:18 (12 hours ago)	2026-06-06T17:07:11.795449+07:00 rapi postfix/smtpd[5621]: lost connection after EHLO from o061.scan ... show more 2026-06-06T17:07:11.795449+07:00 rapi postfix/smtpd[5621]: lost connection after EHLO from o061.scanner.modat.io[85.217.149.61] show less	Email Spam Port Scan Brute-Force
🇺🇸 routerjockey	2026-06-06 09:15:07 (13 hours ago)	[sensor1] Observed 14 TCP SYN probes in the past 6 hours [Top ports 1720/tcp 19/tcp 23/tcp 2598/tcp ... show more [sensor1] Observed 14 TCP SYN probes in the past 6 hours [Top ports 1720/tcp 19/tcp 23/tcp 2598/tcp 3457/tcp 38561/tcp 49413/tcp 51565/tcp 60096/tcp 6633/tcp 7641/tcp 7757/tcp 9218/tcp 9707/tcp] show less	Port Scan
🇺🇸 xmission.com	2026-06-06 08:58:06 (13 hours ago)	Blocked by UFW (TCP on 7641) Source port: 39242 TTL: 49 Packet length: 52 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 7641) Source port: 39242 TTL: 49 Packet length: 52 TOS: 0x00 This report (for 85.217.149.61) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 MPL	2026-06-06 08:54:32 (13 hours ago)	tcp port scan (133 or more attempts)	Port Scan
🇺🇸 podril1ak2.ru	2026-06-06 08:38:13 (13 hours ago)	Blocked by UFW on reporterUS [5710/tcp] \| SPT: 38470 \| TTL: 53 \| LEN: 52 \| TOS: 0x00 • Reported by: ... show more Blocked by UFW on reporterUS [5710/tcp] \| SPT: 38470 \| TTL: 53 \| LEN: 52 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 en0	2026-06-06 08:10:24 (14 hours ago)	85.217.149.61 was recorded 7 times by 3 hosts attempting to connect to 7 unique ports. Incident coun ... show more 85.217.149.61 was recorded 7 times by 3 hosts attempting to connect to 7 unique ports. Incident counter (4h, 24h, all-time): 7, 23, 3358 show less	Port Scan
🇺🇸 MPL	2026-06-06 07:59:13 (14 hours ago)	tcp port scan (264 or more attempts)	Port Scan
🇺🇸 RAP	2026-06-06 07:59:05 (14 hours ago)	2026-06-06 07:59:05 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇭🇰 pengpeng	2026-06-06 07:29:38 (14 hours ago)	monitor: on ser162528253480 \| port: 25076 \| ttl: 127 script: github.com/sefinek/UFW-AbuseIPDB-Repor ... show more monitor: on ser162528253480 \| port: 25076 \| ttl: 127 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 15 of 5124 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 156.238.236.179

🇸🇬 159.223.55.32

🇨🇳 120.236.196.93

🇨🇦 89.251.0.158

🇧🇷 45.235.16.71

🇳🇱 45.148.10.147

🇺🇸 205.210.31.10

🇨🇦 178.93.200.16

🇰🇷 112.185.48.244

🇷🇺 95.31.5.93

🇺🇸 86.111.187.169

🇮🇹 83.224.173.141

🇷🇴 2.57.121.112

🇱🇹 81.30.98.144

🇺🇸 69.87.207.136

🇳🇱 45.156.87.254

🇳🇱 45.153.34.149

🇳🇱 45.148.10.152

🇩🇪 43.228.157.10

🇺🇸 20.168.7.2