AbuseIPDB » 85.254.130.195
85.254.130.195 was found in our database!
This IP was reported 6 times. Confidence of
Abuse
is 7% : ?
ISP
SIA BITE Latvija
Usage Type
Fixed Line ISP
ASN
AS210906
Domain Name
bi.lt
Country
๐บ๐ธ
United States of America
City
Atlanta, Georgia
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 85.254.130.195 :
This IP address has been reported a total of
6
times from
5 distinct
sources.
85.254.130.195 was first reported on
July 8th 2024 , and the most recent report was
1 month ago .
Old Reports:
The most recent abuse report for this IP address is from
1 month ago
. It is possible that this IP is no longer involved in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
๐ฏ๐ต
niico
2026-07-14 05:45:28
(1 month ago)
Participant in a DDoS attack
DDoS Attack
Exploited Host
Anonymous
2026-07-13 13:55:48
(1 month ago)
Malicious activity detected
Hacking
Web App Attack
Anonymous
2026-07-05 17:21:33
(1 month ago)
Malicious activity detected
Hacking
Web App Attack
๐บ๐ธ
kosada.com
2026-04-15 21:33:53
(4 months ago)
Web bot: DDoS
DDoS Attack
Bad Web Bot
๐ต๐ฑ
sefinek.net
2026-01-02 09:10:17
(7 months ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/2 ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/2 (GET method)
Endpoint: /docs
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2024-07-08 08:26:59
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 85.254.130.195 (85-254-130-195.cloudtelek.com): ...
show more
(mod_security) mod_security (id:225170) triggered by 85.254.130.195 (85-254-130-195.cloudtelek.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 08 04:26:53.636371 2024] [security2:error] [pid 20052] [client 85.254.130.195:19147] [client 85.254.130.195] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.vangentholding.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.vangentholding.com"] [uri "/wp-json/wp/v2/users/73377"] [unique_id "Zouizf6aqOvhhSv5z_3PvwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Showing 1 to
6
of 6 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ
Recently Reported IPs: