JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 85.217.149.70

85.217.149.70 was found in our database!

This IP was reported 5,151 times. Confidence of Abuse is 100%: ?

100%

ISP	NL MODAT
Usage Type	Commercial
ASN	AS209334
Hostname(s)	o070.scanner.modat.io
Domain Name	modat.io
Country	🇨🇦 Canada
City	Montreal, Quebec

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 85.217.149.70

Whois 85.217.149.70

IP Abuse Reports for 85.217.149.70:

This IP address has been reported a total of 5,151 times from 220 distinct sources. 85.217.149.70 was first reported on March 4th 2026, and the most recent report was 3 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 donarev419	2026-06-05 01:06:56 (3 minutes ago)	Connection to port 7281 with data transfer. Data preview: SSH-2.0-Go	Port Scan Hacking
🇳🇱 COMPLEX	2026-06-05 00:58:04 (12 minutes ago)	Unsolicited TCP traffic \| Action: DROP \| Port 2288	Brute-Force
🇺🇸 donarev419	2026-06-05 00:49:39 (21 minutes ago)	Connection to port 12805 with data transfer. Data preview:	Port Scan Hacking
🇦🇺 LiftUp Hosting	2026-06-04 23:51:59 (1 hour ago)	Honeypot hit: Empty payload (likely service probe); 12867 [1] TCP	Port Scan
🇭🇰 PingMeMaybe	2026-06-04 23:16:00 (1 hour ago)	Blocked by UFW on hk [1745/tcp] Source port: 36143 TTL: 47 Packet length: 52 TOS: 0x00 This report ... show more Blocked by UFW on hk [1745/tcp] Source port: 36143 TTL: 47 Packet length: 52 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 wiredalter	2026-06-04 23:15:46 (1 hour ago)	Blocked by UFW on dVPS [8910/tcp] Source Port: 40774 TTL: 52 Packet Length: 52 TOS: 0x00 Analyzed b ... show more Blocked by UFW on dVPS [8910/tcp] Source Port: 40774 TTL: 52 Packet Length: 52 TOS: 0x00 Analyzed by https://ip.wiredalter.com show less	Port Scan Brute-Force
🇩🇪 becker-software.de	2026-06-04 23:15:46 (1 hour ago)	2026-06-04T23:15:12.791187+00:00 becker-software kernel: [UFW BLOCK] IN=eth0 OUT= MAC=bc:24:22:07:02 ... show more 2026-06-04T23:15:12.791187+00:00 becker-software kernel: [UFW BLOCK] IN=eth0 OUT= MAC=bc:24:22:07:02:ee:00:80:41:27:00:00:08:00 SRC=85.217.149.70 DST=77.90.16.3 LEN=52 TOS=0x00 PREC=0x00 TTL=48 ID=3321 PROTO=TCP SPT=37488 DPT=41134 WINDOW=65535 RES=0x00 SYN URGP=0 2026-06-04T23:15:45.586726+00:00 becker-software kernel: [UFW BLOCK] IN=eth0 OUT= MAC=bc:24:22:07:02:ee:00:80:41:27:00:00:08:00 SRC=85.217.149.70 DST=77.90.16.3 LEN=52 TOS=0x00 PREC=0x00 TTL=48 ID=4438 PROTO=TCP SPT=60486 DPT=8910 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 shabi	2026-06-04 23:15:14 (1 hour ago)	UFW Blocked [41134/TCP] Source: 85.217.149.70:45409 TTL: 53 Lenth: 52 TOS: 0x00	Port Scan
🇺🇸 mutebot.net	2026-06-04 23:15:11 (1 hour ago)	SRC=85.217.149.70, PROTO=TCP, SPT=57897, DPT=41134	Port Scan
🇺🇸 wteiken	2026-06-04 22:06:58 (3 hours ago)	2026-06-04T18:06:50.192990-04:00 nostromo.teiken.net kernel: [87616.225086] syn_limit:IN=en-wan OUT= ... show more 2026-06-04T18:06:50.192990-04:00 nostromo.teiken.net kernel: [87616.225086] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=85.217.149.70 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=51123 DF PROTO=TCP SPT=54566 DPT=80 WINDOW=64240 RES=0x00 SYN URGP=0 2026-06-04T18:06:51.209654-04:00 nostromo.teiken.net kernel: [87617.241754] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=85.217.149.70 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=51124 DF PROTO=TCP SPT=54566 DPT=80 WINDOW=64240 RES=0x00 SYN URGP=0 2026-06-04T18:06:52.233651-04:00 nostromo.teiken.net kernel: [87618.265741] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=85.217.149.70 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=51125 DF PROTO=TCP SPT=54566 DPT=80 WINDOW=64240 RES=0x00 SYN URGP=0 2026-06-04T18:06:53.261616-04:00 nostromo.teiken.net kernel: [87619.293699] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5 ... show less	Port Scan
🇨🇭 ScanThe.Net	2026-06-04 17:13:54 (7 hours ago)	ID: 3862428203 \| PORT: 11417 \| https://85-217-149-70.scanthe.net	Port Scan
🇯🇵 mkaraki	2026-06-04 14:14:07 (10 hours ago)	1780582445 # Service_probe # SIGNATURE_SEND # source_ip:85.217.149.70 # dst_port:11443 ...	Port Scan
🇩🇪 EnthecSolutions	2026-06-04 14:00:56 (11 hours ago)	Detected by Enthec Solutions. \| Attempts: 82 in 24h \| Target port: 49609	Port Scan Hacking
🇭🇰 pengpeng	2026-06-04 12:40:47 (12 hours ago)	monitor: on ser162528253480 \| port: 32010 \| ttl: 46 script: github.com/sefinek/UFW-AbuseIPDB-Report ... show more monitor: on ser162528253480 \| port: 32010 \| ttl: 46 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 podril1ak2.ru	2026-06-04 12:40:09 (12 hours ago)	Blocked by UFW on reporterUS [6195/tcp] \| SPT: 40805 \| TTL: 53 \| LEN: 52 \| TOS: 0x00 • Reported by: ... show more Blocked by UFW on reporterUS [6195/tcp] \| SPT: 40805 \| TTL: 53 \| LEN: 52 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 15 of 5151 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 212.8.242.38

🇺🇸 162.216.149.221

🇺🇸 162.216.149.157

🇧🇷 138.97.78.118

🇨🇳 114.216.2.84

🇺🇸 108.167.175.44

🇯🇵 47.245.54.58

🇺🇸 40.76.124.118

🇺🇸 216.25.89.86

🇬🇧 198.244.240.233

🇬🇧 198.244.183.112

🇩🇪 185.242.3.179

🇮🇶 185.56.193.14

🇧🇷 177.54.91.189

🇧🇬 162.158.210.66

🇺🇸 147.185.132.233

🇰🇷 125.130.1.250

🇷🇴 80.94.92.168

🇦🇺 74.91.200.217

🇺🇸 64.23.191.168