AbuseIPDB » 185.107.57.65

185.107.57.65 was found in our database!

This IP was reported 877 times. Confidence of Abuse is 100%: ?

100%

This address is a Tor exit node. Neither the owner nor the provider are directly behind the offending action.

ISP	Serverhosting
Usage Type	Data Center/Web Hosting/Transit
ASN	AS43350
Domain Name	nforce.com
Country	Netherlands
City	Roosendaal, North Brabant

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 185.107.57.65

Whois 185.107.57.65

IP Abuse Reports for 185.107.57.65:

This IP address has been reported a total of 877 times from 256 distinct sources. 185.107.57.65 was first reported on June 7th 2024, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Site.eu	2025-05-07 01:36:51 (1 month ago)	Excessive multi-domain requests	Brute-Force
URAN Publishing Service	2025-05-05 20:35:18 (1 month ago)	185.107.57.65 - - [05/May/2025:23:34:32 +0300] "GET /search/search?query=&authors=&dateFromYear=2014 ... show more185.107.57.65 - - [05/May/2025:23:34:32 +0300] "GET /search/search?query=&authors=&dateFromYear=2014&dateFromMonth=05&dateFromDay=13&dateToYear=2014%25%27%20AND%205567%3D%28SELECT%20%28CASE%20WHEN%20%285567%3D2900%29%20THEN%205567%20ELSE%20%28SELECT%202900%20UNION%20SELECT%202834%29%20END%29%29--%20DVaO&dateToMonth=05&dateToDay=13 HTTP/1.1" 200 7217 "-" "Opera/9.50 (X11; Linux i686; U; es-ES)" 185.107.57.65 - - [05/May/2025:23:35:17 +0300] "GET /search/search?query=&authors=&dateFromYear=2014&dateFromMonth=05&dateFromDay=13&dateToYear=2014%22%29%20AND%209861%3D%28SELECT%20%28CASE%20WHEN%20%289861%3D9861%29%20THEN%209861%20ELSE%20%28SELECT%208098%20UNION%20SELECT%202766%29%20END%29%29--%20ewQS&dateToMonth=05&dateToDay=13 HTTP/1.1" 200 7213 "-" "Opera/9.50 (X11; Linux i686; U; es-ES)" ... show less	Web App Attack
Pingger Shikkoken	2025-05-05 18:40:37 (1 month ago)	2025-05-05T18:40:37+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC ... show more2025-05-05T18:40:37+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:58:1a:08:00 SRC=185.107.57.65 DST=10.1.1.11 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=52029 DF PROTO=TCP SPT=35468 DPT=8443 WINDOW=64240 RES=0x00 SYN URGP=0 2025-05-05T18:40:38+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:58:1a:08:00 SRC=185.107.57.65 DST=10.1.1.11 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=52030 DF PROTO=TCP SPT=35468 DPT=8443 WINDOW=64240 RES=0x00 SYN URGP=0 2025-05-05T18:40:40+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:58:1a:08:00 SRC=185.107.57.65 DST=10.1.1.11 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=52031 DF PROTO=TCP SPT=35468 DPT=8443 WINDOW=64240 RES=0x00 SYN URGP=0 ... show less	Hacking Bad Web Bot
Xev	2025-05-05 11:08:23 (1 month ago)	Unauthorized SSH/Telnet login attempt from 185.107.57.65 with user 'GET / HTTP/1.0' and pa ... show moreUnauthorized SSH/Telnet login attempt from 185.107.57.65 with user 'GET / HTTP/1.0' and password ''. Date: 2025-05-05T11:08:23Z Targeted device: Raspberry Pi show less	Brute-Force SSH IoT Targeted
d1mf	2025-05-04 19:22:12 (1 month ago)	Suspicious User-Agent: -; 2 common.txt hits	Bad Web Bot
COMPLEX	2025-05-04 17:41:32 (1 month ago)	Triggered Cloudflare WAF (l7ddos) from T1. Action taken: BLOCK ASN: 43350 (NFORCE) ... show moreTriggered Cloudflare WAF (l7ddos) from T1. Action taken: BLOCK ASN: 43350 (NFORCE) Protocol: HTTP/2 (GET method) Timestamp: 2025-05-04T17:39:14Z show less	Bad Web Bot
Study Bitcoin 🤗	2025-05-04 16:27:43 (1 month ago)	4 port probes: 4x tcp/8333 [ros]	Port Scan
rtbh.com.tr	2025-05-03 20:06:25 (1 month ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
Study Bitcoin 🤗	2025-05-03 13:49:02 (1 month ago)	4 port probes: 4x tcp/8333 [ros]	Port Scan
Silly Development	2025-05-03 10:49:28 (1 month ago)	Malicious activity detected from 43350 NFORCE towards host panel.sillydev.co.uk (GET HTTP/2) @ 2025- ... show moreMalicious activity detected from 43350 NFORCE towards host panel.sillydev.co.uk (GET HTTP/2) @ 2025-05-03T10:49:28Z (2 occurrences) show less	DDoS Attack Hacking Exploited Host
Silly Development	2025-05-03 10:49:28 (1 month ago)	Malicious activity detected from 43350 NFORCE towards host panel.sillydev.co.uk (GET HTTP/2) @ 2025- ... show moreMalicious activity detected from 43350 NFORCE towards host panel.sillydev.co.uk (GET HTTP/2) @ 2025-05-03T10:49:28Z (2 occurrences) show less	DDoS Attack Hacking Exploited Host
Packets-Decreaser.NET	2025-05-03 10:40:26 (1 month ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
ThreatBook.io	2025-05-02 22:57:43 (1 month ago)	ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/185.107.57.65	SSH
rtbh.com.tr	2025-05-02 20:06:24 (1 month ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
Anonymous	2025-05-02 16:08:09 (1 month ago)	185.107.57.65 - - [02/May/2025:18:08:06 +0200] "GET /zoek/?L=0%29%20AND%20%28SELECT%207740%20FROM%28 ... show more185.107.57.65 - - [02/May/2025:18:08:06 +0200] "GET /zoek/?L=0%29%20AND%20%28SELECT%207740%20FROM%28SELECT%20COUNT%28%2A%29%2CCONCAT%280x717a7a7071%2C%28SELECT%20%28ELT%287740%3D7740%2C1%29%29%29%2C0x71626b7071%2CFLOOR%28RAND%280%29%2A2%29%29x%20FROM%20INFORMATION_SCHEMA.PLUGINS%20GROUP%20BY%20x%29a%29%20AND%20%286612%3D6612&id=37&tx_solr%5Bq%5D= HTTP/1.1" 200 12042 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US) AppleWebKit/530.4 (KHTML, like Gecko) Chrome/2.0.171.0 Safari/530.4" 185.107.57.65 - - [02/May/2025:18:08:06 +0200] "GET /zoek/?L=0%29%29%20AND%20%28SELECT%207740%20FROM%28SELECT%20COUNT%28%2A%29%2CCONCAT%280x717a7a7071%2C%28SELECT%20%28ELT%287740%3D7740%2C1%29%29%29%2C0x71626b7071%2CFLOOR%28RAND%280%29%2A2%29%29x%20FROM%20INFORMATION_SCHEMA.PLUGINS%20GROUP%20BY%20x%29a%29%20AND%20%28%284801%3D4801&id=37&tx_solr%5Bq%5D= HTTP/1.1" 200 12042 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US) AppleWebKit/530.4 (KHTML, like Gecko) Chrome/2.0.171.0 Safari/530.4" 185.107.57.6 ... show less	Bad Web Bot

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩