JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 85.163.57.244

85.163.57.244 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 55%: ?

55%

ISP	CETIN a.s.
Usage Type	Fixed Line ISP
ASN	AS28725
Hostname(s)	webhosting.intevia.cloud
Domain Name	cetin.cz
Country	🇨🇿 Czechia
City	Polna, Vysocina

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 85.163.57.244

Whois 85.163.57.244

IP Abuse Reports for 85.163.57.244:

This IP address has been reported a total of 11 times from 10 distinct sources. 85.163.57.244 was first reported on June 15th 2026, and the most recent report was 10 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇲🇽 octageeks.com	2026-07-11 04:16:25 (10 minutes ago)	Wordpress malicious attack:[octawp]	Web App Attack
🇩🇪 Hazzard	2026-07-10 17:19:25 (11 hours ago)	(wordpress) Failed wordpress login from 85.163.57.244 (CZ/Czechia/Okres Jihlava/Polná/webhosting.int ... show more (wordpress) Failed wordpress login from 85.163.57.244 (CZ/Czechia/Okres Jihlava/Polná/webhosting.intevia.cloud/[redacted]): (CF_ENABLE) show less	Brute-Force
🇺🇸 nyt	2026-07-10 15:11:29 (13 hours ago)	Repeated WordPress login POSTs blocked by WAF (3 in 6h)	Brute-Force Web App Attack
🇩🇪 iNetWorker	2026-07-10 13:52:07 (14 hours ago)	trolling for resource vulnerabilities	Web App Attack
🇲🇹 Malta	2026-07-10 13:04:29 (15 hours ago)	85.163.57.244 - - [10/Jul/2026:15:04:29 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows N ... show more 85.163.57.244 - - [10/Jul/2026:15:04:29 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36" Brute-force password attempt show less	Hacking Web App Attack Brute-Force
Anonymous	2026-06-28 19:30:05 (1 week ago)	2026-06-28T21:30:03.247500+02:00 aion wordpress[2266351]: XML-RPC authentication attempt for unknown ... show more 2026-06-28T21:30:03.247500+02:00 aion wordpress[2266351]: XML-RPC authentication attempt for unknown user wp_client from 85.163.57.244 ... show less	Hacking Brute-Force
🇺🇸 TPI-Abuse	2026-06-22 21:16:05 (2 weeks ago)	(mod_security) mod_security (id:225170) triggered by 85.163.57.244 (webhosting.intevia.cloud): 1 in ... show more (mod_security) mod_security (id:225170) triggered by 85.163.57.244 (webhosting.intevia.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 22 17:15:58.689370 2026] [security2:error] [pid 18703:tid 18703] [client 85.163.57.244:58404] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.allotrope.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.allotrope.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajmmDvO-zwzokq8KoduWgwAAACU"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 VHosting	2026-06-22 15:00:05 (2 weeks ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
Anonymous	2026-06-15 18:39:37 (3 weeks ago)	[ns41.kdns.gr] httpd-suspicious-path: sites=msjacovides.com; logs=/var/log/httpd/domains/msjacovides ... show more [ns41.kdns.gr] httpd-suspicious-path: sites=msjacovides.com; logs=/var/log/httpd/domains/msjacovides.com.log; samples=/wp-json/wp/v2/users \| /?author=1 \| /author/admin/ show less	Hacking Web App Attack
Anonymous	2026-06-15 07:07:05 (3 weeks ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇺🇸 TPI-Abuse	2026-06-15 06:22:48 (3 weeks ago)	(mod_security) mod_security (id:225170) triggered by 85.163.57.244 (webhosting.intevia.cloud): 1 in ... show more (mod_security) mod_security (id:225170) triggered by 85.163.57.244 (webhosting.intevia.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 02:22:40.101118 2026] [security2:error] [pid 32497:tid 32497] [client 85.163.57.244:44470] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.baselinesc.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.baselinesc.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ai-aMKWHQwQaYSRbVe0fdAAAAFk"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.38.230.126

🇺🇸 216.38.230.124

🇺🇸 216.38.230.121

🇺🇸 157.245.10.25

🇺🇸 137.184.124.132

🇲🇾 113.211.215.140

🇳🇱 91.92.40.8

🇧🇬 79.124.62.134

🇳🇱 45.156.87.13

10.100.193.1

🇮🇳 2409:40c1:402e:1c05:89bc:7489:46b4:fb1d

🇺🇸 216.38.230.125

🇺🇸 216.38.230.122

🇨🇦 216.26.251.183

🇨🇦 216.26.251.158

🇩🇪 216.26.249.231

🇩🇪 216.26.249.221

🇩🇪 216.26.249.189

🇩🇪 216.26.249.97

🇩🇪 216.26.249.83