JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 85.17.64.4

85.17.64.4 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 0%: ?

ISP	LeaseWeb Netherlands B.V.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS60781
Hostname(s)	hosted-by.hostdzire.com
Domain Name	leaseweb.com
Country	🇳🇱 Netherlands
City	Lelystad, Flevoland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 85.17.64.4

Whois 85.17.64.4

IP Abuse Reports for 85.17.64.4:

This IP address has been reported a total of 14 times from 13 distinct sources. 85.17.64.4 was first reported on October 17th 2023, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇼 kk_it_man	2025-07-20 05:33:03 (1 year ago)	ET P2P BitTorrent DHT ping request	Port Scan
🇩🇪 marzzzello	2025-05-19 11:13:54 (1 year ago)	Ports: 9x 9398	Port Scan
🇫🇷 Bensay	2023-12-12 10:33:57 (2 years ago)	85.17.64.4 - - [12/Dec/2023:11:33:55 +0100] "GET /wp-admin/setup-config.php?step=1 HTTP/1.1" 404 495 ... show more 85.17.64.4 - - [12/Dec/2023:11:33:55 +0100] "GET /wp-admin/setup-config.php?step=1 HTTP/1.1" 404 495 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:108.0) Gecko/20100101 Firefox/108.0" 85.17.64.4 - - [12/Dec/2023:11:33:55 +0100] "GET /wp-admin/install.php?step=1 HTTP/1.1" 404 495 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:108.0) Gecko/20100101 Firefox/108.0" 85.17.64.4 - - [12/Dec/2023:11:33:56 +0100] "GET /readme.html HTTP/1.1" 404 496 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:108.0) Gecko/20100101 Firefox/108.0" 85.17.64.4 - - [12/Dec/2023:11:33:56 +0100] "GET /license.txt HTTP/1.1" 404 495 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:108.0) Gecko/20100101 Firefox/108.0" 85.17.64.4 - - [12/Dec/2023:11:33:56 +0100] "GET /wordpress/ HTTP/1.1" 404 495 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:108.0) Gecko/20100101 Firefox/108.0" ... show less	Hacking Bad Web Bot Web App Attack
🇩🇪 Heathrxw	2023-12-10 03:22:08 (2 years ago)	85.17.64.4 - - [10/Dec/2023:04:22:08 +0100] "GET /wp-admin/setup-config.php?step=1 HTTP/1.1" 404 118 ... show more 85.17.64.4 - - [10/Dec/2023:04:22:08 +0100] "GET /wp-admin/setup-config.php?step=1 HTTP/1.1" 404 118 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:108.0) Gecko/20100101 Firefox/108.0" ... show less	Port Scan Bad Web Bot
🇩🇪 Heathrxw	2023-12-08 15:02:35 (2 years ago)	85.17.64.4 - - [08/Dec/2023:16:02:34 +0100] "GET /wp-admin/setup-config.php?step=1&language=en_GB HT ... show more 85.17.64.4 - - [08/Dec/2023:16:02:34 +0100] "GET /wp-admin/setup-config.php?step=1&language=en_GB HTTP/1.1" 404 118 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:108.0) Gecko/20100101 Firefox/108.0" ... show less	Port Scan Bad Web Bot
🇺🇸 rafled	2023-10-21 00:11:17 (2 years ago)	attempt to scan and scrape for env files and or files that expose the web app version	Bad Web Bot
🇩🇪 Donovan_DMC	2023-10-20 22:22:33 (2 years ago)	GET /wp-admin/setup-config.php?step=1&language=en_GB - 85.17.64.4 (Mozilla/5.0 (Windows NT 10.0; Win ... show more GET /wp-admin/setup-config.php?step=1&language=en_GB - 85.17.64.4 (Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:108.0) Gecko/20100101 Firefox/108.0) [wp-admin]: WordPress Admin Scanner [php-scanner]: PHP Scanner show less	Bad Web Bot Web App Attack
🇬🇧 findlab	2023-10-20 13:40:02 (2 years ago)	Backdrop CMS module - Request: /wp-admin/setup-config.php?step=1&languag...	Bad Web Bot Web App Attack
🇩🇪 Mr-Money	2023-10-20 11:03:25 (2 years ago)	85.17.64.4 - - [20/Oct/2023:13:03:24 +0200] "GET /wp-admin/setup-config.php?step=1&language=en_GB HT ... show more 85.17.64.4 - - [20/Oct/2023:13:03:24 +0200] "GET /wp-admin/setup-config.php?step=1&language=en_GB HTTP/1.1" 404 460 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:108.0) Gecko/20100101 Firefox/108.0" ... show less	Hacking SQL Injection Bad Web Bot Exploited Host Web App Attack
🇬🇧 openstrike.co.uk	2023-10-19 05:12:27 (2 years ago)	12 attacks on env grabbing URLs like: 85.17.64.4 - - [18/Oct/2023:10:43:54 +0100] "GET /api/.env HTT ... show more 12 attacks on env grabbing URLs like: 85.17.64.4 - - [18/Oct/2023:10:43:54 +0100] "GET /api/.env HTTP/1.1" 404 1109 sms.org.uk "-" "python-requests/2.31.0" show less	Hacking
🇺🇸 mnsf	2023-10-17 21:09:08 (2 years ago)	Too many Status 40X (12)	Brute-Force Web App Attack
🇬🇧 vicky	2023-10-17 11:12:31 (2 years ago)	From: Wang Fuli. Subject: Sustainable And Socially Resposible Investment!!! I am offering personal l ... show more From: Wang Fuli. Subject: Sustainable And Socially Resposible Investment!!! I am offering personal loans show less	Email Spam Spoofing
🇺🇸 vestibtech	2023-10-17 09:11:24 (2 years ago)	Oct 17 03:11:24 Host-KLAX-C amavis[3959150]: (3959150-11) Blocked SPAM {RejectedInternal}, AM.PDP-SO ... show more Oct 17 03:11:24 Host-KLAX-C amavis[3959150]: (3959150-11) Blocked SPAM {RejectedInternal}, AM.PDP-SOCK LOCAL [85.17.64.4] [85.17.64.4] <[email protected]> -> <[email protected]>, Queue-ID: 048171BCD4E, Message-ID: <[email protected]>, mail_id: hd26qwh5oS4u, Hits: 17, size: 3183, 3194 ms ... show less	Email Spam
🇷🇸 Smel	2023-10-17 08:34:29 (2 years ago)	Mail/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -	Email Spam Hacking Brute-Force

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇱 138.124.20.112

🇧🇩 103.183.62.3

🇳🇱 91.92.47.112

🇨🇦 74.125.19.184

🇳🇱 45.148.10.147

🇻🇳 157.66.26.151

🇸🇬 103.13.207.88

🇳🇱 45.148.10.157

🇧🇪 34.38.47.118

🇺🇸 20.65.194.77

🇵🇱 185.192.103.26

🇵🇱 176.53.159.197

🇲🇾 85.211.242.19

🇺🇸 52.188.81.67

🇳🇱 45.148.10.240

🇳🇱 45.148.10.141

🇺🇸 2a09:bac1:76a0:460::5e:4d

🇮🇳 202.179.75.202

🇨🇳 115.190.138.163

🇧🇷 102.211.152.138