JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.85.105.212

45.85.105.212 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 32%: ?

32%

ISP	Private Networks Labs LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS399498
Domain Name	privatenetworks.services
Country	🇱🇹 Lithuania
City	Vilnius, Vilnius

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.85.105.212

Whois 45.85.105.212

IP Abuse Reports for 45.85.105.212:

This IP address has been reported a total of 19 times from 16 distinct sources. 45.85.105.212 was first reported on May 26th 2026, and the most recent report was 4 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 4 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 taivas.nl	2026-07-27 04:32:59 (4 weeks ago)	Many_bad_calls	Web App Attack
🇧🇪 taivas.nl	2026-07-26 15:32:10 (4 weeks ago)	Bad_requests	Bad Web Bot
🇺🇸 RAP	2026-07-25 17:32:58 (4 weeks ago)	2026-07-25 17:32:58 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇫🇷 dynamix	2026-07-21 09:09:01 (1 month ago)	Multiple WAF Violations	Web App Attack
🇫🇷 applemooz	2026-07-13 20:08:59 (1 month ago)	WordPress XMLRPC Brute Force Attacks ...	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-13 18:40:15 (1 month ago)	(mod_security) mod_security (id:240335) triggered by 45.85.105.212 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 45.85.105.212 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 13 14:40:08.026594 2026] [security2:error] [pid 26039:tid 26039] [client 45.85.105.212:53731] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 45.85.105.212 (+1 hits since last alert)\|monogay.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "monogay.org"] [uri "/xmlrpc.php"] [unique_id "alUxCIYmP51ZDUrvJHTgrAAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 stefaniak41500	2026-07-13 18:37:41 (1 month ago)	Shield Guard: Scanner: wordpress (+70) \| Chemin suspect: /xmlrpc.php \| xmlrpc.php bloqué	Web App Attack Port Scan
🇪🇸 alferez	2026-07-12 20:06:17 (1 month ago)	xmlrpc.php attack DOS	Hacking Exploited Host Web App Attack
🇺🇸 TAY	2026-07-12 19:58:39 (1 month ago)	45.85.105.212 - - [13/Jul/2026:03:58:13 +0800] "POST /xmlrpc.php HTTP/1.1" 200 5979 "-" "Jetpack/12. ... show more 45.85.105.212 - - [13/Jul/2026:03:58:13 +0800] "POST /xmlrpc.php HTTP/1.1" 200 5979 "-" "Jetpack/12.0; WordPress/6.1; http://site59839528.com" 45.85.105.212 - - [13/Jul/2026:03:58:24 +0800] "POST /xmlrpc.php HTTP/1.1" 200 5979 "-" "Jetpack by WordPress.com" 45.85.105.212 - - [13/Jul/2026:03:58:38 +0800] "POST /xmlrpc.php HTTP/1.1" 200 5979 "-" "WordPress.com; https://wordpress.com" ... show less	Brute-Force
🇫🇷 masterguru	2026-07-12 17:27:23 (1 month ago)	xmlrpc request blocked, no referer. Pattern match "xmlrpc.php" at REQUEST_URI. (88010-201)	Hacking
🇺🇸 TPI-Abuse	2026-07-09 20:57:52 (1 month ago)	(mod_security) mod_security (id:240335) triggered by 45.85.105.212 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 45.85.105.212 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 09 16:57:47.928840 2026] [security2:error] [pid 4836:tid 4836] [client 45.85.105.212:50613] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 45.85.105.212 (+1 hits since last alert)\|fadcometal.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "fadcometal.com"] [uri "/xmlrpc.php"] [unique_id "alALSx0bEy2Mx0-eV1bQRAAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 debestelapp	2026-07-09 17:50:06 (1 month ago)		Web App Attack
Anonymous	2026-07-09 17:38:14 (1 month ago)	[ssd5.kdns.gr] httpd-xmlrpc-post: sites=www.sigasigacollective.com; logs=/var/log/httpd/domains/siga ... show more [ssd5.kdns.gr] httpd-xmlrpc-post: sites=www.sigasigacollective.com; logs=/var/log/httpd/domains/sigasigacollective.com.log; samples=/xmlrpc.php show less	Brute-Force Web App Attack
🇱🇻 garmtech.com	2026-07-09 17:10:52 (1 month ago)	IM360 WAF: Rate limit exceeded for XMLRPC DoS (fault code)	Web App Attack
🇨🇦 Dunham Support	2026-07-04 21:28:41 (1 month ago)	(wordpress) Failed wordpress login from 45.85.105.212 (LT/Lithuania/-)	Brute-Force

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇪 181.65.36.194

🇲🇽 177.232.82.240

🇬🇧 89.37.172.155

🇺🇸 66.132.172.128

🇮🇶 65.20.141.202

🇱🇹 213.176.26.22

🇲🇽 177.229.197.38

🇸🇬 134.209.108.209

🇫🇷 85.217.140.48

🇫🇷 85.217.140.22

🇳🇴 85.164.110.21

🇺🇸 76.132.238.43

🇺🇸 66.132.172.103

🇬🇧 62.60.130.253

🇻🇪 38.19.227.53

🇱🇹 213.176.26.69

🇺🇸 198.46.221.48

🇺🇸 195.184.76.111

🇵🇹 188.251.16.193

🇩🇪 89.163.254.46