AbuseIPDB » 85.254.138.21
85.254.138.21
This IP was reported 6 times. Confidence of
Abuse
is 0% : ?
ISP
SIA BITE Latvija
Usage Type
Fixed Line ISP
ASN
AS210906
Domain Name
bi.lt
Country
🇺🇸
United States of America
City
Dallas, Texas
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 85.254.138.21 :
This IP address has been reported a total of
6
times from
4 distinct
sources.
85.254.138.21 was first reported on
July 10th 2024 , and the most recent report was
1 month ago
Old Reports:
The most recent abuse report for this IP address is from
1 month ago
Reporter
IoA Timestamp (UTC)
Comment
Categories
2026-08-25 11:06:40
(1 month ago)
Automated scraper: solved anti-bot JS/Turnstile challenge via residential proxy, then crawled produc ...
show more
Automated scraper: solved anti-bot JS/Turnstile challenge via residential proxy, then crawled product pages without loading any page assets (CSS/JS/images) - consistent with headless scripted access rather than a real browser session.
show less
Bad Web Bot
Web App Attack
2026-07-15 16:43:06
(3 months ago)
Malicious activity detected
Hacking
Web App Attack
2026-06-29 10:26:04
(3 months ago)
Malicious activity detected
Hacking
Web App Attack
🇮🇩
Hamzah Yakub
2025-08-28 01:42:25
(1 year ago)
Hacking Attempt /wp-admin/
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2024-07-29 22:21:33
(2 years ago)
(mod_security) mod_security (id:210381) triggered by 85.254.138.21 (85-254-138-21.cloudtelek.com): 1 ...
show more
(mod_security) mod_security (id:210381) triggered by 85.254.138.21 (85-254-138-21.cloudtelek.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 29 18:21:28.100904 2024] [security2:error] [pid 30530:tid 30550] [client 85.254.138.21:6462] [client 85.254.138.21] ModSecurity: Access denied with code 403 (phase 2). Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "82"] [id "210381"] [rev "6"] [msg "COMODO WAF: URL Encoding Abuse Attack Attempt||www.mentzlaw.com|F|4"] [data "REQUEST_URI=/louisianaparkinsonsdiseaselawsuitlawyer/%url%"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.mentzlaw.com"] [uri "/louisianaparkinsonsdiseaselawsuitlawyer/%url%"] [unique_id "ZqgV6DcNrMhi1_aYwWRt2gAAAME"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-07-10 18:42:30
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 85.254.138.21 (85-254-138-21.cloudtelek.com): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 85.254.138.21 (85-254-138-21.cloudtelek.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 10 14:42:25.677427 2024] [security2:error] [pid 29343] [client 85.254.138.21:9165] [client 85.254.138.21] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.vangentholding.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.vangentholding.com"] [uri "/wp-json/wp/v2/users/30509"] [unique_id "Zo7WEQfHQmLnqC74uQ0HUAAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Showing 1 to
6
of 6 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: