JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 85.0.255.119

85.0.255.119 was found in our database!

This IP was reported 26 times. Confidence of Abuse is 4%: ?

ISP	Swisscom (Schweiz) AG is an LIR and ISP in Switzerland.
Usage Type	Fixed Line ISP
ASN	AS3303
Hostname(s)	119.255.0.85.dynamic.cust.swisscom.net
Domain Name	bluewin.ch
Country	🇨🇭 Switzerland
City	Bedano, Ticino

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 85.0.255.119

Whois 85.0.255.119

IP Abuse Reports for 85.0.255.119:

This IP address has been reported a total of 26 times from 2 distinct sources. 85.0.255.119 was first reported on September 30th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 4server	2026-09-17 09:42:22 (1 day ago)	[ThuSep1711:42:18.5211592026][security2:error][pid2005065:tid2005082][client85.0.255.119:0]ModSecuri ... show more [ThuSep1711:42:18.5211592026][security2:error][pid2005065:tid2005082][client85.0.255.119:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:10\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"studio-portale.ch\"][uri\"/\"][unique_id\"aqu1-jgMG_TJoCknzE3rEgAAAA4\"]\,referer:https://studio-portale.ch/\?customize_changeset_uuid=dfb1d261-a4b5-44a8-a4b4-42326de7068d\ show less	Port Scan Brute-Force Web App Attack
🇨🇭 4server	2026-08-20 08:11:02 (4 weeks ago)	[ThuAug2010:10:58.4000802026][security2:error][pid3761764:tid3761846][client85.0.255.119:0]ModSecuri ... show more [ThuAug2010:10:58.4000802026][security2:error][pid3761764:tid3761846][client85.0.255.119:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"foodelivery.benvenutialfood.ch\"][uri\"/\"][unique_id\"aoa2kiRbsOUAOG5kSwy5bAAAAYY\"]\,referer:https://foodelivery.benvenutialfood.ch/checkout/ show less	Hacking Web App Attack
🇨🇭 4server	2026-08-20 07:55:26 (4 weeks ago)	[ThuAug2009:55:23.2465342026][security2:error][pid3689752:tid3689927][client85.0.255.119:0]ModSecuri ... show more [ThuAug2009:55:23.2465342026][security2:error][pid3689752:tid3689927][client85.0.255.119:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"foodelivery.benvenutialfood.ch\"][uri\"/\"][unique_id\"aoay65GzCD6XTX_KtyYE5wAAAIE\"]\,referer:https://foodelivery.benvenutialfood.ch/checkout/ show less	Hacking Web App Attack
🇨🇭 4server	2026-08-07 10:30:46 (1 month ago)	[FriAug0712:30:43.7136962026][security2:error][pid1820112:tid1820156][client85.0.255.119:0]ModSecuri ... show more [FriAug0712:30:43.7136962026][security2:error][pid1820112:tid1820156][client85.0.255.119:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"www.comarcosa.com\"][uri\"/dove/\"][unique_id\"anWz05D7zdoPl_YZxDIWWQAAAVY\"]\,referer:https://www.comarcosa.com/wp-admin/customize.php\?url=https://www.comarcosa.com/dove/ show less	Hacking Web App Attack
🇨🇭 4server	2026-07-30 10:21:07 (1 month ago)	[ThuJul3012:21:04.5542682026][security2:error][pid2134947:tid2135302][client85.0.255.119:0]ModSecuri ... show more [ThuJul3012:21:04.5542682026][security2:error][pid2134947:tid2135302][client85.0.255.119:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"prodotti.comarcosa.com\"][uri\"/\"][unique_id\"amslkNCAmULufY7L7G9hNAAAAJQ\"]\,referer:https://prodotti.comarcosa.com/checkout/ show less	Hacking Web App Attack
🇨🇭 4server	2026-06-24 19:48:35 (2 months ago)	[WedJun2421:48:33.3034342026][security2:error][pid3861282:tid3861356][client85.0.255.119:0]ModSecuri ... show more [WedJun2421:48:33.3034342026][security2:error][pid3861282:tid3861356][client85.0.255.119:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:15\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"www.r102.ch\"][uri\"/wp-admin/admin-ajax.php\"][unique_id\"ajw0kc-ixMdK9PCUgAX0HwAAAMs\"]\,referer:https://www.r102.ch/wp-admin/post.php\?post=2897\ show less	Hacking Web App Attack
🇨🇭 4server	2026-06-13 16:53:48 (3 months ago)	[SatJun1318:53:42.9333592026][security2:error][pid2070706:tid2071007][client85.0.255.119:0]ModSecuri ... show more [SatJun1318:53:42.9333592026][security2:error][pid2070706:tid2071007][client85.0.255.119:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?i\)\(127\\\\\\\\.0\\\\\\\\.0\\\\\\\\.1\\|localhost\\|0\\\\\\\\.0\\\\\\\\.0\\\\\\\\.0\\|169\\\\\\\\.254\\\\\\\\.169\\\\\\\\.254\)\"atARGS:dbhost.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"20\"][id\"990003\"][msg\"PossibleSSRF/internalhostaccessattempt\"][hostname\"pmprogettazione.ch\"][uri\"/wp-admin/setup-config.php\"][unique_id\"ai2LFt6leY09Y6oHnvKuOQAAARI\"]\,referer:https://pmprogettazione.ch/wp-admin/setup-config.php\?step=1\ show less	Hacking Web App Attack
🇩🇪 4server	2026-06-13 16:30:17 (3 months ago)	[SatJun1318:29:04.3268782026][auth_basic:error][pid1365344:tid1365370][client85.0.255.119:0]AH01617: ... show more [SatJun1318:29:04.3268782026][auth_basic:error][pid1365344:tid1365370][client85.0.255.119:0]AH01617:userprstartu:authenticationfailurefor\"/wp-admin\":PasswordMismatch[SatJun1318:29:04.3281022026][auth_basic:error][pid1365344:tid1365370][client85.0.255.119:0]AH01617:userprstartu:authenticationfailurefor\"/401.shtml\":PasswordMismatch[SatJun1318:30:00.5703152026][auth_basic:error][pid1365346:tid1365406][client85.0.255.119:0]AH01617:userprstartu:authenticationfailurefor\"/wp-admin\":PasswordMismatch[SatJun1318:30:00.5716872026][auth_basic:error][pid1365346:tid1365406][client85.0.255.119:0]AH01617:userprstartu:authenticationfailurefor\"/401.shtml\":PasswordMismatch[SatJun1318:30:12.6086072026][auth_basic:error][pid1365348:tid1365428][client85.0.255.119:0]AH01617:userprstartu:authenticationfailurefor\"/wp-admin\":PasswordMismatch show less	Port Scan Brute-Force Web App Attack
🇨🇭 4server	2026-06-08 06:47:24 (3 months ago)	[MonJun0808:47:20.1010522026][security2:error][pid2975638:tid2975885][client85.0.255.119:0]ModSecuri ... show more [MonJun0808:47:20.1010522026][security2:error][pid2975638:tid2975885][client85.0.255.119:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"whatsdecor.ch\"][uri\"/\"][unique_id\"aiZld_HsrfUyjFY_uDT1zQAAARY\"]\,referer:https://whatsdecor.ch/negozio/checkout/ show less	Hacking Web App Attack
🇨🇭 4server	2026-05-28 16:11:12 (3 months ago)	[ThuMay2818:11:07.3657152026][security2:error][pid959883:tid960040][client85.0.255.119:0]ModSecurity ... show more [ThuMay2818:11:07.3657152026][security2:error][pid959883:tid960040][client85.0.255.119:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"www.motogiro.com\"][uri\"/wp-admin/admin-ajax.php\"][unique_id\"ahhpG4QDDMgS_PRUXOWCMAAAAEI\"]\,referer:https://www.motogiro.com/wp-admin/post.php\?post=706\ show less	Hacking Web App Attack
🇨🇭 4server	2026-05-26 16:21:21 (3 months ago)	[TueMay2618:21:17.2009732026][security2:error][pid2649750:tid2650023][client85.0.255.119:0]ModSecuri ... show more [TueMay2618:21:17.2009732026][security2:error][pid2649750:tid2650023][client85.0.255.119:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"www.aid-web.ch\"][uri\"/\"][unique_id\"ahXIfZtlWBuHI2zgfhKqRQAAANg\"] show less	Hacking Web App Attack
🇩🇪 4server	2026-05-12 15:35:09 (4 months ago)	[TueMay1217:35:03.5042442026][security2:error][pid240514:tid240530][client85.0.255.119:0]ModSecurity ... show more [TueMay1217:35:03.5042442026][security2:error][pid240514:tid240530][client85.0.255.119:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"morandi-trasporti.ch\"][uri\"/wp-admin/admin-ajax.php\"][unique_id\"agNIpwbiqaF5RUOyuzXvTAAAAAU\"]\,referer:https://morandi-trasporti.ch/ show less	Port Scan Brute-Force Web App Attack
🇩🇪 4server	2026-05-08 12:33:50 (4 months ago)	[FriMay0814:33:48.7050672026][security2:error][pid1964427:tid1964500][client85.0.255.119:0]ModSecuri ... show more [FriMay0814:33:48.7050672026][security2:error][pid1964427:tid1964500][client85.0.255.119:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Matchof\"containswordpress_sec\"against\"REQUEST_COOKIES_NAMES:wordpress_test_cookie\"required.[file\"/etc/apache2/conf.d/modsec_rules/99_asl_jitp.conf\"][line\"354\"][id\"334617\"][rev\"1\"][msg\"Atomicorp.comWAFRules-VirtualJustInTimePatch:WPUserAvatarpluginprivilegeescalationattackattempt\"][severity\"CRITICAL\"][hostname\"ecosuber.com\"][uri\"/wp-admin/profile.php\"][unique_id\"af3YLAZvQTugnL2qH5Oy1AAAAIk\"]\,referer:https://ecosuber.com/wp-admin/profile.php\?wp_http_referer=/wp-admin/users.php show less	Port Scan Brute-Force Web App Attack
🇨🇭 4server	2026-05-07 13:57:00 (4 months ago)	[ThuMay0715:56:56.4269602026][security2:error][pid706576:tid706813][client85.0.255.119:0]ModSecurity ... show more [ThuMay0715:56:56.4269602026][security2:error][pid706576:tid706813][client85.0.255.119:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(filemanager\\|wp-file-manager\\|elfinder\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"442\"][id\"980500\"][msg\"WordPressfilemanagerexploitattempt\"][hostname\"www.shadowdrummer.ch\"][uri\"/download/editing-files-filemanager-cpanel.mp4\"][unique_id\"afyaKL_17Qznp2HfQ5fpdQAAAFY\"] show less	Hacking Web App Attack
🇩🇪 4server	2026-05-07 10:18:00 (4 months ago)	[ThuMay0712:17:49.4612852026][auth_basic:error][pid316454:tid316584][client85.0.255.119:0]AH01618:us ... show more [ThuMay0712:17:49.4612852026][auth_basic:error][pid316454:tid316584][client85.0.255.119:0]AH01618:useradminnotfound:/[ThuMay0712:17:49.4620992026][auth_basic:error][pid316454:tid316584][client85.0.255.119:0]AH01618:useradminnotfound:/401.shtml[ThuMay0712:17:53.2827452026][auth_basic:error][pid316454:tid316587][client85.0.255.119:0]AH01618:useradminnotfound:/[ThuMay0712:17:53.2835702026][auth_basic:error][pid316454:tid316587][client85.0.255.119:0]AH01618:useradminnotfound:/401.shtml[ThuMay0712:17:57.6216432026][auth_basic:error][pid316454:tid316586][client85.0.255.119:0]AH01618:useradminnotfound:/ show less	Port Scan Brute-Force Web App Attack

Showing 1 to 15 of 26 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇿 213.230.86.75

🇭🇰 199.45.154.56

🇹🇼 198.235.24.67

🇺🇬 196.0.3.188

🇺🇸 195.184.76.235

🇧🇷 191.53.191.151

🇩🇪 167.94.145.31

🇺🇸 162.141.68.127

🇺🇸 152.163.117.133

🇻🇳 113.173.34.133

🇮🇩 103.99.214.214

🇳🇱 77.239.124.106

🇬🇧 35.203.211.249

🇦🇺 34.40.217.81

🇷🇺 31.148.244.168

🇮🇳 13.200.6.88

🇬🇧 213.166.84.44

🇲🇽 201.137.50.192

🇧🇪 198.235.24.138

🇲🇽 187.156.59.2