JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 163.52.135.85

163.52.135.85 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 74%: ?

74%

ISP	CV Griya Cloud Server
Usage Type	Data Center/Web Hosting/Transit
ASN	AS154896
Domain Name	griyacloud.com
Country	🇮🇩 Indonesia
City	Jakarta, Jakarta

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 163.52.135.85

Whois 163.52.135.85

IP Abuse Reports for 163.52.135.85:

This IP address has been reported a total of 19 times from 16 distinct sources. 163.52.135.85 was first reported on October 6th 2026, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 dynamix	2026-10-10 13:03:41 (6 days ago)	Multiple WAF Violations	Web App Attack
Anonymous	2026-10-10 09:29:29 (6 days ago)	Aggressive web scan	Web App Attack
Anonymous	2026-10-10 09:24:06 (6 days ago)	Port Scan	Port Scan
🇦🇺 AWW-Admin	2026-10-10 05:25:39 (1 week ago)	(mod_security) mod_security triggered on hostname [redacted] 163.52.135.85 (ID/Indonesia/-)	SQL Injection
🇦🇺 QT	2026-10-10 02:47:16 (1 week ago)	Website hack attempted at 2026-10-10 12:47:09 +1000	Web App Attack
🇫🇷 ingroscart.it	2026-10-10 00:30:59 (1 week ago)	(mod_security) mod_security triggered on hostname [redacted])	SQL Injection
🇫🇷 dwmp	2026-10-10 00:20:32 (1 week ago)	[10/Oct/2026:02:20:32.417942 +0200] asmE0LSNTSERFGhnAE1iBQAAABA 163.52.135.85 56192 38.242.227.117 7 ... show more [10/Oct/2026:02:20:32.417942 +0200] asmE0LSNTSERFGhnAE1iBQAAABA 163.52.135.85 56192 38.242.227.117 7080 [10/Oct/2026:02:20:32.419834 +0200] asmE0LSNTSERFGhnAE1iBAAAABg 163.52.135.85 56186 38.242.227.117 7080 [10/Oct/2026:02:20:32.603427 +0200] asmE0LnAMXDvzyeHOXBPBAAAAEw 163.52.135.85 56212 38.242.227.117 7080 ... show less	Brute-Force SSH
🇺🇸 k3rn3l109	2026-10-09 21:22:36 (1 week ago)	Sentinel honeypot: cf-waf-auto hit on app.sentinelmdm.com UA=Mozilla/5.0 (Macintosh; Intel Mac OS X ... show more Sentinel honeypot: cf-waf-auto hit on app.sentinelmdm.com UA=Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15 show less	Hacking
🇭🇷 aktonrs	2026-10-09 11:43:52 (1 week ago)	Blocked by https://aegis.hr — Aegis Port Scan — multi-port probe (conntrack) - (MITRE T1046), 10 att ... show more Blocked by https://aegis.hr — Aegis Port Scan — multi-port probe (conntrack) - (MITRE T1046), 10 attempts, Period: 2026-10-09 11:26:54 to 2026-10-09 11:31:45 show less	Port Scan
🇫🇷 mrcrassi	2026-10-09 08:58:35 (1 week ago)	Triggered Cloudflare WAF (firewallManaged) from ID. Action taken: BLOCK Protocol: HTTP/1.1 (GET meth ... show more Triggered Cloudflare WAF (firewallManaged) from ID. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /.wp-config.php.swp UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇵🇱 Budyn	2026-10-09 06:09:24 (1 week ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: 51.83.237.XX \| URI: /.env \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0 \| BODY: [Empty / GET Request] show less	Hacking Web App Attack
Anonymous	2026-10-09 03:22:00 (1 week ago)	SSH brute force detected by CrowdSec	Brute-Force
🇪🇸 robotstxt	2026-10-09 02:28:01 (1 week ago)	163.52.135.85 - - [09/Oct/2026:02:26:59 +0000] "GET /.env HTTP/1.1" 403 208 "https://search.yahoo.co ... show more 163.52.135.85 - - [09/Oct/2026:02:26:59 +0000] "GET /.env HTTP/1.1" 403 208 "https://search.yahoo.com/search?p=www.wp-config.pro" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0" "-" edge="163.52.135.85" 163.52.135.85 - - [09/Oct/2026:02:26:59 +0000] "GET /.git/config HTTP/1.1" 403 208 "https://www.google.com/www.wp-config.pro" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "-" edge="163.52.135.85" 163.52.135.85 - - [09/Oct/2026:02:27:00 +0000] "GET /.env.production HTTP/1.1" 403 176 "https://www.google.com/search?q=www.wp-config.pro" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "-" edge="163.52.135.85" 163.52.135.85 - - [09/Oct/2026:02:27:01 +0000] "GET /.git/index HTTP/1.1" 403 176 "https://www.google.de/www.wp-config.pro" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) A ... show less	Web App Attack
Anonymous	2026-10-06 23:08:08 (1 week ago)	IP matched detection query 20 more in short time bad rqs.	Brute-Force Web App Attack Hacking
Anonymous	2026-10-06 21:38:52 (1 week ago)	SSH brute force detected by CrowdSec	Brute-Force

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇭 2a0a:20c0:f001:307::4

🇮🇩 202.145.0.61

🇧🇪 198.235.24.231

🇦🇷 181.14.255.157

🇮🇳 122.176.122.24

🇵🇰 103.186.22.221

🇺🇸 92.71.61.220

🇺🇸 23.241.141.76

🇨🇳 221.228.203.3

🇧🇷 190.89.55.250

🇮🇳 106.51.72.246

🇧🇩 103.230.105.59

🇫🇮 86.38.238.30

🇨🇳 58.222.244.226

🇺🇸 49.51.178.45

🇺🇸 3.135.211.166

🇺🇸 195.184.76.0

🇨🇳 114.132.92.120

🇳🇱 91.92.42.162

🇺🇸 43.166.255.122