JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 185.83.213.25

185.83.213.25 was found in our database!

This IP was reported 285 times. Confidence of Abuse is 32%: ?

32%

ISP	NFCLOUD, Unipessoal Lda
Usage Type	Data Center/Web Hosting/Transit
ASN	AS44222
Hostname(s)	pt1.node.check-host.net
Domain Name	cloudity.pt
Country	🇵🇹 Portugal
City	Braga, Braga

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 185.83.213.25

Whois 185.83.213.25

IP Abuse Reports for 185.83.213.25:

This IP address has been reported a total of 285 times from 101 distinct sources. 185.83.213.25 was first reported on November 29th 2020, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇷🇴 Fn4ticHz	2026-06-08 01:40:26 (1 week ago)	DDoS blocked via ZeroGuard.ID	DDoS Attack Exploited Host
🇨🇦 1gz	2026-06-05 00:39:14 (2 weeks ago)	Triggered Cloudflare WAF (firewallCustom) from PT. Action taken: CHALLENGE Protocol: HTTP/1.1 (GET m ... show more Triggered Cloudflare WAF (firewallCustom) from PT. Action taken: CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: / UA: CheckHost (https://check-host.net/) This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇪 on1x.cloud	2026-05-31 17:34:46 (2 weeks ago)	[on1x.cloud] SSH-Multi login Attempt	Brute-Force SSH
🇬🇧 anycast_ac	2026-05-30 19:28:26 (3 weeks ago)	[WebProtection] Scanner detected \| port:443 (1 requests) requestis	Port Scan Web App Attack
🇫🇷 MatStef132	2026-05-23 15:48:56 (4 weeks ago)	MatShield L7: blocked on mathost.eu (ua-quarantined)	Bad Web Bot
🇺🇸 COMPLEX	2026-05-21 15:48:14 (4 weeks ago)	Triggered Cloudflare WAF (firewallCustom) from PT. Action taken: BLOCK ASN: undefined (undefined) Pr ... show more Triggered Cloudflare WAF (firewallCustom) from PT. Action taken: BLOCK ASN: undefined (undefined) Protocol: HTTP/1.1 (GET method) Endpoint: / UA: CheckHost (https://check-host.net/) show less	Bad Web Bot
🇫🇷 MatStef132	2026-05-21 15:18:54 (4 weeks ago)	MatShield L7: blocked on mathost.eu (ua-quarantined)	Bad Web Bot
🇫🇷 MatStef132	2026-05-17 18:03:33 (1 month ago)	MatShield L7: blocked on mathost.eu (ua-quarantined)	Bad Web Bot
🇮🇩 hermawan	2026-04-27 10:21:40 (1 month ago)	[Mon Apr 27 15:54:13.076729 2026] [security2:error] [pid 162794:tid 140140075710144] [client 185.83. ... show more [Mon Apr 27 15:54:13.076729 2026] [security2:error] [pid 162794:tid 140140075710144] [client 185.83.213.25:26570] ModSecurity: Access denied with code 403 (phase 1). Match of "ipMatch 103.166.156.58" against "REMOTE_ADDR" required. [file "/etc/modsecurity/coreruleset-4.25.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "451"] [id "440006"] [msg "Connection Close Header"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: close found within REMOTE_ADDR: 185.83.213.25 request_line = GET / HTTP/1.1 Request URI RAW = / Request Basename = "] [hostname "staklim-jatim.bmkg.go.id"] [uri "/"] [unique_id "ae8kNQRPgA226auEIvSkYAAAAUA"], referer https://check-host.net/check-report/3e9ebd81k247 [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[162881] [/LY3Qq2bYwU] [ae8kNQRPgA226auEIvSkYAAAAUA] keep_alive=[0] [2026-04-27 15:54:13.076735] [R:ae8kNQRPgA226auEIvSkYAAAAUA] UA:'CheckHost (https://check-host.net/)' Host:'staklim ... show less	Email Spam Hacking
🇮🇩 hermawan	2026-04-27 09:26:01 (1 month ago)	1777280052.659942 185.83.213.25 103.166.156.58 64240_2-4-8-1-3_1460_6 2026-04-27 15:54:12 WIB ...	Email Spam Hacking
🇫🇷 GoodOldTOS	2026-04-24 18:42:04 (1 month ago)	Bad keywords detected in request: /wp-content/	Web App Attack
🇵🇱 Kitki30.com	2026-04-24 18:40:15 (1 month ago)	HTTP Probing. Log: 185.83.213.25 - - [24/Apr/2026:20:39:56 +0200] "GET /.git/config HTTP/1.1" 301 16 ... show more HTTP Probing. Log: 185.83.213.25 - - [24/Apr/2026:20:39:56 +0200] "GET /.git/config HTTP/1.1" 301 162 "https://check-host.net/check-report/3e6def36kd14" "CheckHost (https://check-host.net/)" show less	Brute-Force Bad Web Bot Web App Attack
🇵🇱 Kitki30.com	2026-04-02 12:31:44 (2 months ago)	HTTP Probing. Log: 185.83.213.25 - - [02/Apr/2026:14:31:22 +0200] "GET /.git/config HTTP/1.1" 301 16 ... show more HTTP Probing. Log: 185.83.213.25 - - [02/Apr/2026:14:31:22 +0200] "GET /.git/config HTTP/1.1" 301 162 "https://check-host.net/check-report/3ce3e8b6k1f2" "CheckHost (https://check-host.net/)" show less	Brute-Force Bad Web Bot Web App Attack
🇵🇱 Kitki30.com	2026-03-25 23:39:56 (2 months ago)	HTTP Probing. Log: 185.83.213.25 - - [26/Mar/2026:00:39:29 +0100] "GET /.git/config HTTP/1.1" 301 16 ... show more HTTP Probing. Log: 185.83.213.25 - - [26/Mar/2026:00:39:29 +0100] "GET /.git/config HTTP/1.1" 301 162 "https://check-host.net/check-report/3c747bc2kb7b" "CheckHost (https://check-host.net/)" show less	Brute-Force Bad Web Bot Web App Attack
🇵🇱 Kitki30.com	2026-03-18 17:38:04 (3 months ago)	HTTP Probing. Log: 185.83.213.25 - - [18/Mar/2026:18:37:47 +0100] "GET /.git/config HTTP/1.1" 301 16 ... show more HTTP Probing. Log: 185.83.213.25 - - [18/Mar/2026:18:37:47 +0100] "GET /.git/config HTTP/1.1" 301 162 "https://check-host.net/check-report/3c01bdeak173" "CheckHost (https://check-host.net/)" show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 285 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 162.216.149.218

🇺🇸 141.11.88.16

🇺🇸 136.36.189.65

🇺🇸 52.176.211.73

🇧🇷 187.120.16.194

🇹🇭 182.53.207.106

🇨🇳 112.22.11.56

🇫🇷 91.231.89.51

🇧🇬 91.191.209.46

🇺🇸 68.183.154.184

🇸🇬 47.84.190.188

🇺🇸 44.238.10.165

🇺🇸 44.50.148.211

🇮🇩 43.165.194.10

🇳🇱 192.42.116.144

🇧🇷 177.39.125.100

🇺🇸 172.174.5.146

🇺🇸 157.245.114.249

🇩🇪 104.248.141.67

🇧🇩 103.4.145.50