AbuseIPDB » 85.254.140.140
85.254.140.140
This IP was reported 4 times. Confidence of
Abuse
is 2% : ?
ISP
SIA BITE Latvija
Usage Type
Fixed Line ISP
ASN
AS210906
Domain Name
bi.lt
Country
🇺🇸
United States of America
City
Chicago, Illinois
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 85.254.140.140 :
This IP address has been reported a total of
4
times from
3 distinct
sources.
85.254.140.140 was first reported on
July 17th 2024 , and the most recent report was
6 days ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇮🇹
Vertus
2026-07-16 22:32:51
(6 days ago)
massive scraping/ddos bot, likely botnet
DDoS Attack
Bad Web Bot
Web App Attack
2025-11-29 23:56:12
(7 months ago)
Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to ...
show more
Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to bypass firewall/robots.txt restrictions in email-link.asp
show less
Bad Web Bot
Exploited Host
🇺🇸
TPI-Abuse
2024-07-30 01:48:44
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 85.254.140.140 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 85.254.140.140 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 29 21:48:36.694075 2024] [security2:error] [pid 1510:tid 1510] [client 85.254.140.140:5870] [client 85.254.140.140] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.starfrontiers.com|F|2"] [data ".dbf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.starfrontiers.com"] [uri "/stormer/names.dbf"] [unique_id "ZqhGdDQvw2oMmFyTLeTFcgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-07-17 02:50:28
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 85.254.140.140 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 85.254.140.140 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 16 22:50:24.572119 2024] [security2:error] [pid 10869:tid 10869] [client 85.254.140.140:52818] [client 85.254.140.140] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.vangentholding.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.vangentholding.com"] [uri "/wp-json/wp/v2/users/316958"] [unique_id "ZpcxcNq0pquVjdEwnvnDtgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Showing 1 to
4
of 4 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: