JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 85.239.57.247

85.239.57.247 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 0%: ?

ISP	JSC TIMEWEB
Usage Type	Data Center/Web Hosting/Transit
ASN	AS9123
Hostname(s)	7731267-iy96026.twc1.net
Domain Name	timeweb.com
Country	🇷🇺 Russian Federation
City	Moscow, Moscow

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 85.239.57.247

Whois 85.239.57.247

IP Abuse Reports for 85.239.57.247:

This IP address has been reported a total of 16 times from 10 distinct sources. 85.239.57.247 was first reported on September 4th 2023, and the most recent report was 9 months ago.

Old Reports: The most recent abuse report for this IP address is from 9 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2025-08-21 12:53:11 (9 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇺🇸 TPI-Abuse	2025-06-23 21:42:49 (11 months ago)	(mod_security) mod_security (id:210831) triggered by 85.239.57.247 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 85.239.57.247 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 23 17:42:32.231556 2025] [security2:error] [pid 2156469:tid 2156469] [client 85.239.57.247:47331] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|thechoiceint.com\|F\|4"] [data "a href="] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "thechoiceint.com"] [uri "/"] [unique_id "aFnKSKUAeO11unJ4b9efEAAAAAU"], referer: https://www.muk-hunter.com/warranty show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-06-20 22:54:20 (11 months ago)	(mod_security) mod_security (id:210730) triggered by 85.239.57.247 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 85.239.57.247 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 20 18:54:07.520270 2025] [security2:error] [pid 2951822:tid 2951822] [client 85.239.57.247:14529] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|vitalitywebb.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Churchill 4440/Thumbs.db"] [unique_id "aFXmj6Fl0ZpU6zG8E2--DgAAAAM"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Churchill%204440/ show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-06-12 15:24:26 (11 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇨🇭 backslash	2024-11-03 23:55:04 (1 year ago)	block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8	Bad Web Bot
🇩🇪 Vegascosmetics	2024-10-30 06:00:49 (1 year ago)	Kingcopy(AI-IDS)Potential Dangerous Requests Sucker	Bad Web Bot
Anonymous	2024-10-21 03:49:39 (1 year ago)	This IP was involved in an brute force and password spray attack on 2024/10/20 22:45:57	Port Scan Brute-Force Exploited Host Web App Attack
🇨🇦 wil.com	2024-09-24 02:14:44 (1 year ago)	GlobalProtect login attempts with user mmosley.	VPN IP Brute-Force
🇷🇸 Smel	2024-07-22 08:52:14 (1 year ago)	HTTP/80/443/8080 Unauthorized Probe, Hack -	Hacking Web App Attack
Anonymous	2024-05-29 23:31:00 (2 years ago)	"Scanning for multiple vulnerable file extensions and wp-login.php xmlrpc.php"	Web App Attack
Anonymous	2024-05-10 14:33:43 (2 years ago)	Failed password for invalid user XEROX port 443 SSLPVN	VPN IP Brute-Force
🇺🇸 TPI-Abuse	2024-04-14 08:47:45 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 85.239.57.247 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 85.239.57.247 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 14 04:47:31.911811 2024] [security2:error] [pid 18035] [client 85.239.57.247:11621] [client 85.239.57.247] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|vitalitywebb.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Briarwood 4490/Thumbs.db"] [unique_id "ZhuYI9DRwfvqO0emnR88jAAAAAk"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Briarwood%204490/ show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2023-11-01 14:26:00 (2 years ago)	"Illegal redirection attempt"	Brute-Force
Anonymous	2023-10-10 20:02:00 (2 years ago)	"Illegal redirection attempt"	Brute-Force
🇨🇭 backslash	2023-10-07 05:53:07 (2 years ago)		Bad Web Bot

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.236

🇺🇸 185.238.231.206

🇺🇸 66.132.195.99

🇸🇬 47.236.202.83

🇺🇸 172.217.107.148

🇸🇬 158.178.243.5

🇪🇸 139.28.190.215

🇳🇵 113.199.244.183

🇹🇼 59.126.231.206

🇳🇱 45.148.10.67

🇺🇸 23.30.86.197

🇳🇱 185.223.235.58

🇨🇦 159.203.33.153

🇫🇮 147.185.133.157

🇮🇹 95.240.192.149

🇫🇷 91.196.152.37

🇺🇸 64.62.197.202

🇭🇰 47.83.211.169

🇳🇱 45.148.10.151

🇺🇸 34.162.12.20