JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 85.237.212.152

85.237.212.152 was found in our database!

This IP was reported 71 times. Confidence of Abuse is 100%: ?

100%

ISP	LIVAPROXY YAZILIM TICARET LIMITED SIRKETI
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	livaproxy.com
Country	🇵🇱 Poland
City	Warsaw, Mazovia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 85.237.212.152

Whois 85.237.212.152

IP Abuse Reports for 85.237.212.152:

This IP address has been reported a total of 71 times from 43 distinct sources. 85.237.212.152 was first reported on March 9th 2026, and the most recent report was 8 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 2000cn.com.au	2026-08-23 15:08:58 (8 hours ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
🇬🇧 kie	2026-08-23 15:00:53 (8 hours ago)	23-08-2026:14:59:44UTC [Nginx Web Server] Suspicious web request: path:/.git (2 request(s)).	Bad Web Bot Web App Attack
🇧🇷 Peregrine	2026-08-23 03:12:19 (20 hours ago)	Fail2Ban Jail: tomcat-honeypot \| Evidence: 85.237.212.152 162.158.102.53 - - [21/Aug/2026:10:37:09 - ... show more Fail2Ban Jail: tomcat-honeypot \| Evidence: 85.237.212.152 162.158.102.53 - - [21/Aug/2026:10:37:09 -0300] "GET /.git/config HTTP/1.1" 404 414 85.237.212.152 172.64.200.31 - - [21/Aug/2026:10:37:10 -0300] "GET /.git/config HTTP/1.1" 404 414 show less	Bad Web Bot
🇧🇪 cmbplf	2026-08-22 11:32:04 (1 day ago)	420 requests with url.path /.git/config 401 requests with url.path .git/*	Brute-Force Bad Web Bot
🇺🇸 TPI-Abuse	2026-08-22 11:12:36 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 85.237.212.152 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 85.237.212.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 07:12:32.387726 2026] [security2:error] [pid 31451:tid 31503] [client 85.237.212.152:50757] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "adultbaja.com"] [uri "/.git/config"] [unique_id "aomEIPJR4DrIX7ajLU8sLQAAAU4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-22 10:22:05 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 85.237.212.152 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 85.237.212.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 06:21:59.395390 2026] [security2:error] [pid 25438:tid 25438] [client 85.237.212.152:58317] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "n3fjp.com"] [uri "/.git/config"] [unique_id "aol4R4nXxSDLGjHOCFftAAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇴 jad-abuse	2026-08-22 10:11:22 (1 day ago)	ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_expos ... show more ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_exposure. Observed by 1 sensor(s); 1 hits. show less	Web App Attack
🇺🇦 URAN Publishing Service	2026-08-22 10:07:52 (1 day ago)	[22/Aug/2026:13:07:52 +0300] -- 85.237.212.152 Ban reason: User-Agent Go-http-client	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-22 10:03:55 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 85.237.212.152 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 85.237.212.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 06:03:47.387574 2026] [security2:error] [pid 6385:tid 6385] [client 85.237.212.152:38165] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.wryemusings.com"] [uri "/.git/config"] [unique_id "aol0A-UTNEcMmBlf3nmeCwAAABs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 jcbriar	2026-08-22 09:41:07 (1 day ago)	Searching for vulnerable scripts	Hacking Web App Attack
Anonymous	2026-08-22 07:38:18 (1 day ago)	GET /.git/config HTTP/1.1 ...	Web App Attack
🇧🇪 voormedia	2026-08-22 05:24:24 (1 day ago)	Accessed trap at '/.git/config'	Web App Attack
🇺🇸 TPI-Abuse	2026-08-22 05:14:33 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 85.237.212.152 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 85.237.212.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 01:14:25.800632 2026] [security2:error] [pid 28173:tid 28173] [client 85.237.212.152:58319] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.creartest.com"] [uri "/.git/config"] [unique_id "aokwMdt5MrQkw9_-NZ7JDgAAABo"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-08-22 04:28:04 (1 day ago)	Bot / scanning and/or hacking attempts: GET /.git/config HTTP/1.1	Hacking Web App Attack
🇮🇩 penjaga BRIN	2026-08-22 04:17:22 (1 day ago)	Suspicious malicious activity	Hacking

Showing 1 to 15 of 71 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇪🇨 157.100.113.40

🇨🇳 112.124.59.13

🇨🇦 85.217.149.73

🇻🇪 38.17.195.68

🇨🇳 144.123.108.58

🇨🇳 124.88.113.53

🇳🇱 85.11.167.191

🇳🇱 68.183.4.194

🇺🇸 64.44.31.28

🇱🇹 62.60.130.201

🇮🇳 52.172.177.191

🇮🇳 49.36.183.101

🇺🇸 38.154.23.42

🇺🇸 173.255.192.158

🇲🇦 105.191.63.170

🇫🇮 65.109.178.234

🇷🇺 62.182.132.94

🇦🇿 37.114.150.176

🇨🇦 20.151.9.151

🇬🇧 2.57.17.234