JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 85.163.38.185

85.163.38.185 was found in our database!

This IP was reported 177 times. Confidence of Abuse is 87%: ?

87%

ISP	CETIN a.s.
Usage Type	Fixed Line ISP
ASN	AS28725
Domain Name	cetin.cz
Country	🇨🇿 Czechia
City	Holysov, Plzen Region

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 85.163.38.185

Whois 85.163.38.185

IP Abuse Reports for 85.163.38.185:

This IP address has been reported a total of 177 times from 80 distinct sources. 85.163.38.185 was first reported on August 31st 2024, and the most recent report was 43 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 ksol-hostmaster	2026-07-25 15:39:23 (43 minutes ago)	Jul 25 17:39:22 ksol dovecot[2253]: auth-worker(72512): conn unix:auth-worker (uid=143): auth-worker ... show more Jul 25 17:39:22 ksol dovecot[2253]: auth-worker(72512): conn unix:auth-worker (uid=143): auth-worker<3>: sql(anonymized@email,85.163.38.185,<qyIOS3FXv+tVoya5>): unknown user (given password: I-AM-A-SUCKER-USING-A-WRONG-PASSWORD) ... show less	Brute-Force
🇫🇷 smtp.com.es	2026-07-25 14:08:53 (2 hours ago)	Brute force attempt.	Brute-Force Email Spam
🇺🇸 kosada.com	2026-07-24 09:44:17 (1 day ago)	IMAP password guessing	Brute-Force
🇷🇴 INTEQ	2026-07-24 04:23:44 (1 day ago)	Brute force attack from 85.163.38.185	Brute-Force
🇳🇱 Peter Touw	2026-07-19 20:06:40 (5 days ago)	dovecot1 - mail dovecot: imap-login: Disconnected: Connection closed (auth failed: 2 attempts in 9 s ... show more dovecot1 - mail dovecot: imap-login: Disconnected: Connection closed (auth failed: 2 attempts in 9 secs) show less	Brute-Force
🇮🇩 sockominfo	2026-07-19 15:00:52 (6 days ago)	Zimbra: Login failures from malicious IP: 85.163.38.185. Threat Score: 6/10 (MEDIUM). Confidence: 40 ... show more Zimbra: Login failures from malicious IP: 85.163.38.185. Threat Score: 6/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Moderate. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-07-19 14:00:52 (6 days ago)	Zimbra: Login failures from malicious IP: 85.163.38.185. Threat Score: 6.2/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 85.163.38.185. Threat Score: 6.2/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-07-19 13:00:53 (6 days ago)	Zimbra: Login failures from malicious IP: 85.163.38.185. Threat Score: 6.3/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 85.163.38.185. Threat Score: 6.3/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-07-19 12:00:08 (6 days ago)	Zimbra: Login failures from malicious IP: 85.163.38.185. Threat Score: 6/10 (MEDIUM). Reported by Ta ... show more Zimbra: Login failures from malicious IP: 85.163.38.185. Threat Score: 6/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇿🇦 hostsec_za	2026-07-16 06:50:08 (1 week ago)	IMAP Auth Attack. 17 failed logins in 6 hours.	Brute-Force
🇺🇸 brianbgv	2026-07-14 10:58:38 (1 week ago)	Dovecot mail abuse detected by Fail2Ban	Port Scan Hacking SSH
🇺🇸 Smee	2026-07-14 08:30:21 (1 week ago)	IMAP/SMTP Authentication Failure	Brute-Force
🇺🇸 kosada.com	2026-07-13 19:55:07 (1 week ago)	IMAP password guessing	Brute-Force
🇦🇹 joe-abuse	2026-07-13 10:17:44 (1 week ago)	2026-07-13T12:17:43.938878+02:00 ucs1 dovecot: auth: pam([email protected],85.163.38.185,<bUGsZ ... show more 2026-07-13T12:17:43.938878+02:00 ucs1 dovecot: auth: pam([email protected],85.163.38.185,<bUGsZntWMZlVoya5>): unknown user (given password: Fitzgerald123) ... show less	Brute-Force
🇨🇦 Julio Covolato	2026-07-13 05:30:02 (1 week ago)	Imap or Submission login brute-force attacks.	Brute-Force

Showing 1 to 15 of 177 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 188.162.8.113

🇷🇺 178.163.7.166

🇱🇹 141.98.11.11

🇨🇳 118.196.118.181

🇻🇳 116.99.172.197

🇺🇸 99.6.104.157

🇺🇸 52.176.211.73

🇧🇷 20.206.67.15

🇹🇳 196.179.232.234

🇧🇷 189.79.213.154

🇨🇳 125.77.73.145

🇺🇿 95.214.211.218

🇺🇸 64.62.156.221

🇳🇱 45.148.10.141

🇹🇼 34.81.248.159

🇻🇳 27.79.46.20

🇬🇧 20.90.145.127

🇨🇭 209.99.189.125

🇧🇷 177.130.168.18

🇯🇴 176.28.172.253