JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 85.237.194.5

85.237.194.5

Neutral Activity

57 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

John Macleod trading as Howick Digital

Usage Type

Data Center/Web Hosting/Transit

ASN

AS206092

Domain Name

howickdigital.com

Country

🇺🇸 United States of America

City

Chicago, Illinois

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

85.237.194.5 has been reported 57 times. The most recent report is from 6 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 85.237.194.5:

This IP address has been reported a total of 57 times from 41 distinct sources. 85.237.194.5 was first reported on May 21st 2022, and the most recent report was 6 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇯🇵 VXG-NET	2026-03-05 23:55:37 (6 months ago)	port=80, indicator_type=info-leak	Hacking
🇸🇬 Starburst SysOp Team	2026-03-05 18:03:09 (6 months ago)	Host header is a numeric IP address. Pattern match "(?:^( (920350-sin2-2)	Hacking Bad Web Bot
🇫🇷 Octopuce	2026-03-03 21:26:00 (6 months ago)	Aggressive web search of vulnerable pages: /.well-known/as.php /wp-includes/SimplePie/autoload_class ... show more Aggressive web search of vulnerable pages: /.well-known/as.php /wp-includes/SimplePie/autoload_classmap.php /wp-admin/js/chosen.php /wp-include ... show less	Web App Attack
Anonymous	2026-02-22 18:40:49 (6 months ago)	85.237.194.5 - - [22/Feb/2026:19:40:48 +0100] "GET /docker/.env HTTP/1.1" 301 169 "-" "Mozilla/5.0 ( ... show more 85.237.194.5 - - [22/Feb/2026:19:40:48 +0100] "GET /docker/.env HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36" show less	Web App Attack
🇩🇪 ut-addicted.com	2026-02-21 08:32:18 (6 months ago)	\[21/Feb/2026:09:31:30 +0100\] aZltYmt3aakUmW71XYYSMAAAAM0 85.237.194.5 53661 78.46.187.162 80 \[21/ ... show more \[21/Feb/2026:09:31:30 +0100\] aZltYmt3aakUmW71XYYSMAAAAM0 85.237.194.5 53661 78.46.187.162 80 \[21/Feb/2026:09:31:53 +0100\] aZlteWt3aakUmW71XYYSPgAAAMM 85.237.194.5 48985 78.46.187.162 80 \[21/Feb/2026:09:32:17 +0100\] aZltkWt3aakUmW71XYYSSgAAANA 85.237.194.5 52843 78.46.187.162 80 show less	Brute-Force Web App Attack
🇩🇪 Hary74656	2026-02-21 01:24:50 (6 months ago)	[Sat Feb 21 02:24:38.468864 2026] [security2:error] [pid 418479:tid 418516] [client 85.237.194.5:478 ... show more [Sat Feb 21 02:24:38.468864 2026] [security2:error] [pid 418479:tid 418516] [client 85.237.194.5:47865] [client 85.237.194.5] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.dist"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "78.46.107.184"] [uri "/.env.dist"] [unique_id "aZkJVviKbzvkRSrJ2nicDQAAA0g"] [Sat Feb 21 02:24:38.863483 2026] [security2:error] [pid 418479:tid 418517] [client 85.237.194.5:47865] [client 85.237.194.5] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/mo ... show less	Web App Attack
🇺🇸 masterguru	2026-02-17 20:46:50 (6 months ago)	. Matched phrase "/.env" at REQUEST_URI. (210492-128)	Web App Attack
🇨🇳 ThreatBook.io	2026-02-15 22:37:14 (6 months ago)	ThreatBook Intelligence: Zombie more details on http://threatbook.io/ip/85.237.194.5 2026-02-15 15:2 ... show more ThreatBook Intelligence: Zombie more details on http://threatbook.io/ip/85.237.194.5 2026-02-15 15:23:18 /ws-config.json show less	Web App Attack
Anonymous	2026-02-15 22:16:53 (6 months ago)	[Sun Feb 15 23:16:49.639523 2026] [access_compat:error] [pid 1229341:tid 140628331595456] [client 85 ... show more [Sun Feb 15 23:16:49.639523 2026] [access_compat:error] [pid 1229341:tid 140628331595456] [client 85.237.194.5:29095] AH01797: client denied by server configuration: /var/www/html/.env [Sun Feb 15 23:16:49.868102 2026] [access_compat:error] [pid 1229341:tid 140628191086272] [client 85.237.194.5:29095] AH01797: client denied by server configuration: /var/www/html/.env [Sun Feb 15 23:16:50.306515 2026] [access_compat:error] [pid 1229341:tid 140628031702720] [client 85.237.194.5:29095] AH01797: client denied by server configuration: /var/www/html/.env.save [Sun Feb 15 23:16:50.632655 2026] [access_compat:error] [pid 1229341:tid 140628021216960] [client 85.237.194.5:29095] AH01797: client denied by server configuration: /var/www/html/.env.old [Sun Feb 15 23:16:50.791978 2026] [access_compat:error] [pid 1229341:tid 140628233029312] [client 85.237.194.5:29095] AH01797: client denied by server configuration: /var/www/html/.env.prod [Sun Feb 15 23:16:51.033105 2026] [access_compat:error] [pid ... show less	Brute-Force Web App Attack
🇫🇷 Coco Bongo	2026-02-15 14:30:55 (6 months ago)	85.237.194.5 [redacted] (206092-Internet Utilities Europe and Asia Limited United States Chicago) - ... show more 85.237.194.5 [redacted] (206092-Internet Utilities Europe and Asia Limited United States Chicago) - - [15/Feb/2026:15:30:32 +0100] "GET /frontend_dev.php/$ HTTP/1.1" 404 146 "-" "Mozilla/5.0 (X11; ... show less	Bad Web Bot Web App Attack
🇩🇪 psauxit	2026-02-15 09:57:11 (6 months ago)	Fail2Ban - NGINX bad requests 400-401-403-404-444, high level vulnerability scanning, commonly xmlrp ... show more Fail2Ban - NGINX bad requests 400-401-403-404-444, high level vulnerability scanning, commonly xmlrpc_attack, wp-login brute force, excessive crawling/scraping show less	Hacking Web App Attack
🇩🇪 paissangroup	2026-02-15 08:41:06 (6 months ago)	Multiple WAF Violations	Web App Attack
Anonymous	2026-02-14 11:31:35 (6 months ago)		DNS Compromise DDoS Attack
🇩🇪 Lino Project	2026-02-13 02:08:38 (6 months ago)	CrowdSec abuse IP report (host SRV-2) Scenario: crowdsecurity/CVE-2023-49103	Hacking
🇨🇳 ThreatBook.io	2026-02-12 23:05:11 (6 months ago)	ThreatBook Intelligence: Zombie more details on http://threatbook.io/ip/85.237.194.5 2026-02-12 11:0 ... show more ThreatBook Intelligence: Zombie more details on http://threatbook.io/ip/85.237.194.5 2026-02-12 11:06:26 /debug/default/view.html 2026-02-12 11:08:08 /__info.php 2026-02-12 11:07:20 /..;/env.production.js 2026-02-12 11:08:10 /_info.php show less	Web App Attack

Showing 1 to 15 of 57 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 203.192.227.122

🇩🇪 69.5.169.62

🇭🇰 65.181.71.117

🇳🇱 45.148.10.152

🇺🇸 34.11.103.199

🇧🇷 191.5.153.170

🇩🇪 95.90.13.168

🇨🇦 72.29.225.230

🇺🇸 71.6.232.20

🇩🇪 69.5.169.152

🇳🇱 34.187.49.69

🇺🇸 216.25.89.77

🇳🇱 213.127.227.154

🇨🇳 118.145.99.252

🇩🇪 69.5.169.173

🇲🇾 49.124.153.15

🇩🇪 193.124.20.252

🇮🇳 2404:6800:4000:101f::122

🇺🇸 216.25.89.112

🇧🇷 190.115.84.25