AbuseIPDB » 85.234.64.244
85.234.64.244
This IP was reported 4 times. Confidence of
Abuse
is 5% : ?
ISP
G-Core Labs S.A.
Usage Type
Data Center/Web Hosting/Transit
ASN
AS59437
Domain Name
gcore.com
Country
🇵🇹
Portugal
City
Sines, Setubal
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 85.234.64.244 :
This IP address has been reported a total of
4
times from
1 distinct
source.
85.234.64.244 was first reported on
October 16th 2026 , and the most recent report was
7 hours ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
TPI-Abuse
2026-10-17 01:33:52
(7 hours ago)
(mod_security) mod_security (id:210801) triggered by 85.234.64.244 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210801) triggered by 85.234.64.244 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 21:33:46.691601 2026] [security2:error] [pid 11788:tid 11788] [client 85.234.64.244:62615] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "hydra" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "17"] [id "210801"] [rev "2"] [msg "COMODO WAF: Request Indicates a Security Scanner Scanned the Site||www.davisound.com|F|2"] [data "mozilla/5.0 (compatible; dataset-rehydration/1.0)"] [severity "CRITICAL"] [tag "CWAF"] [tag "Agents"] [hostname "www.davisound.com"] [uri "/StudioPhotos/Fireplace1.jpg"] [unique_id "atLQejOx_tPwUXFzm16RowAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-17 00:54:20
(7 hours ago)
(mod_security) mod_security (id:210801) triggered by 85.234.64.244 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210801) triggered by 85.234.64.244 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 20:54:15.008532 2026] [security2:error] [pid 13112:tid 13112] [client 85.234.64.244:35578] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "hydra" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "17"] [id "210801"] [rev "2"] [msg "COMODO WAF: Request Indicates a Security Scanner Scanned the Site||goseethenurse.com|F|2"] [data "mozilla/5.0 (compatible; dataset-rehydration/1.0)"] [severity "CRITICAL"] [tag "CWAF"] [tag "Agents"] [hostname "goseethenurse.com"] [uri "/wp-content/uploads/2019/11/kawasaki-header.jpg"] [unique_id "atLHN7WAb1_MuId9ycTq9AAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-17 00:32:30
(8 hours ago)
(mod_security) mod_security (id:210801) triggered by 85.234.64.244 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210801) triggered by 85.234.64.244 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 20:32:24.883669 2026] [security2:error] [pid 27565:tid 27565] [client 85.234.64.244:26957] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "hydra" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "17"] [id "210801"] [rev "2"] [msg "COMODO WAF: Request Indicates a Security Scanner Scanned the Site||www.sigridsnaturalfoods.com|F|2"] [data "mozilla/5.0 (compatible; dataset-rehydration/1.0)"] [severity "CRITICAL"] [tag "CWAF"] [tag "Agents"] [hostname "www.sigridsnaturalfoods.com"] [uri "/wp-content/uploads/2019/03/rxbars-big-678x381.jpg"] [unique_id "atLCGJJrt3T2fgF4fPD7ZwAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-16 23:03:55
(9 hours ago)
(mod_security) mod_security (id:210801) triggered by 85.234.64.244 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210801) triggered by 85.234.64.244 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 19:03:51.157241 2026] [security2:error] [pid 31968:tid 31968] [client 85.234.64.244:34263] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "hydra" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "17"] [id "210801"] [rev "2"] [msg "COMODO WAF: Request Indicates a Security Scanner Scanned the Site||davidocchino.com|F|2"] [data "mozilla/5.0 (compatible; dataset-rehydration/1.0)"] [severity "CRITICAL"] [tag "CWAF"] [tag "Agents"] [hostname "davidocchino.com"] [uri "/portfolio/corporateidentity/letterhead-stationery-business-card-envelope-design.png"] [unique_id "atKtV1zQtMmCnJ3S813d2QAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Showing 1 to
4
of 4 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: