JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 85.254.2.117

85.254.2.117 was found in our database!

This IP was reported 6 times. Confidence of Abuse is 2%: ?

ISP	SIA BITE Latvija
Usage Type	Fixed Line ISP
ASN	AS210906
Domain Name	bi.lt
Country	🇺🇸 United States of America
City	Atlanta, Georgia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 85.254.2.117

Whois 85.254.2.117

IP Abuse Reports for 85.254.2.117:

This IP address has been reported a total of 6 times from 5 distinct sources. 85.254.2.117 was first reported on July 9th 2025, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇯🇵 Short-legs-Spider	2026-06-02 22:51:33 (6 days ago)	Disregard of robots.txt -- [03/Jun/2026:07:51:33 +0900] "GET /==1.htm HTTP/2.0" 403 76 "-" "Mozill ... show more Disregard of robots.txt -- [03/Jun/2026:07:51:33 +0900] "GET /==1.htm HTTP/2.0" 403 76 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" show less	Bad Web Bot
🇸🇬 mypatricks	2026-01-04 12:15:48 (5 months ago)	85.254.2.117 \| Port: 10337 \| DNS: 85.254.2.117 2026-01-04T20:16:42+08:00 America/New_York \| Bad Beha ... show more 85.254.2.117 \| Port: 10337 \| DNS: 85.254.2.117 2026-01-04T20:16:42+08:00 America/New_York \| Bad Behavior Activity \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.3 HTTP/1.1 443 GET \| URL: /?route=information/ecard&1766103348&image=1a4cfdcb95175c95ebe8dc41dad9048c&product_id=188 \| Ref: - \| Country: US/United States/-08:00 IP City: Atlanta 9b8aa9497cf23f19-ATL/Atlanta, GA, United States 1 hits/0 secs Robots 4 show less	Web Spam Blog Spam Brute-Force Exploited Host Web App Attack
Anonymous	2025-12-16 01:03:10 (5 months ago)	Web attack	Bad Web Bot Web App Attack
🇺🇸 ipblock.com	2025-11-08 21:19:00 (7 months ago)	IPBlock protected site ID [1365-l]. Persistent 404, vulnerability scanner	Hacking Bad Web Bot Web App Attack
🇺🇸 ipblock.com	2025-11-08 21:19:00 (7 months ago)	IPBlock protected site ID [1365-l]. Robotic site crawling, undeclared spider	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-07-09 06:34:41 (10 months ago)	(mod_security) mod_security (id:225170) triggered by 85.254.2.117 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 85.254.2.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 09 02:34:34.615803 2025] [security2:error] [pid 25855:tid 25855] [client 85.254.2.117:38114] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.vangentholding.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.vangentholding.com"] [uri "/wp-json/wp/v2/users/11011"] [unique_id "aG4NestCirHbRyX4sE3duQAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 6 of 6 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.225

🇺🇸 192.178.115.87

🇵🇰 103.166.103.173

🇦🇿 85.132.110.154

🇷🇺 80.69.186.68

🇧🇷 152.67.39.50

🇫🇷 91.196.152.220

🇺🇸 74.125.182.86

🇺🇸 71.206.190.209

🇦🇷 64.40.151.249

🇧🇷 45.5.102.93

🇺🇸 40.124.175.188

🇨🇳 39.101.93.104

🇺🇸 185.180.141.44

🇨🇳 182.204.181.102

🇺🇸 174.35.25.181

🇮🇳 125.19.222.186

🇺🇸 66.132.186.139

🇸🇬 47.236.106.62

🇺🇸 185.223.152.140