JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 85.203.44.55

85.203.44.55 was found in our database!

This IP was reported 97 times. Confidence of Abuse is 0%: ?

ISP	Falco Networks B.V.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS42708
Domain Name	falco-networks.com
Country	🇸🇪 Sweden
City	Stockholm, Stockholm

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 85.203.44.55

Whois 85.203.44.55

IP Abuse Reports for 85.203.44.55:

This IP address has been reported a total of 97 times from 44 distinct sources. 85.203.44.55 was first reported on March 2nd 2021, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 haquemdmanzurul	2026-10-13 07:06:04 (3 days ago)	WordPress authentication detection: username_enumeration; 1 attempts in configured detection window. ... show more WordPress authentication detection: username_enumeration; 1 attempts in configured detection window. Detected at 2026-10-13 07:06:01 UTC. show less	Brute-Force Web App Attack
🇫🇷 Hippoline	2026-05-21 03:18:35 (4 months ago)	[Thu May 21 05:18:33.363387 2026] [authz_core:error] [pid 21344] [client 85.203.44.55:21155] AH01630 ... show more [Thu May 21 05:18:33.363387 2026] [authz_core:error] [pid 21344] [client 85.203.44.55:21155] AH01630: client denied by server configuration: /var/www/modern-art.lu/web/gel4y.php, referer: http://modern-art.lu/gel4y.php [Thu May 21 05:18:33.918261 2026] [authz_core:error] [pid 21344] [client 85.203.44.55:21155] AH01630: client denied by server configuration: /var/www/modern-art.lu/web/admin.php, referer: http://modern-art.lu/admin.php [Thu May 21 05:18:34.464551 2026] [authz_core:error] [pid 21344] [client 85.203.44.55:21155] AH01630: client denied by server configuration: /var/www/modern-art.lu/web/radio.php, referer: http://modern-art.lu/radio.php [Thu May 21 05:18:35.010557 2026] [authz_core:error] [pid 21344] [client 85.203.44.55:21155] AH01630: client denied by server configuration: /var/www/modern-art.lu/web/demo.php, referer: http://modern-art.lu/demo.php [Thu May 21 05:18:35.563379 2026] [authz_core:error] [pid 21344] [client 85.203.44.55:21155] AH01630: client denied by server ... show less	Brute-Force Web App Attack
🇬🇧 Mendip_Defender	2026-03-30 07:19:31 (6 months ago)	85.203.44.55 - - [30/Mar/2026:08:19:27 +0100] "GET //wp-includes/ID3/license.txt HTTP/2.0" 403 548 " ... show more 85.203.44.55 - - [30/Mar/2026:08:19:27 +0100] "GET //wp-includes/ID3/license.txt HTTP/2.0" 403 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 85.203.44.55 - - [30/Mar/2026:08:19:28 +0100] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.0" 301 4206 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 85.203.44.55 - - [30/Mar/2026:08:19:28 +0100] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.0" 301 4205 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" ... show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-03-14 11:07:22 (7 months ago)	(mod_security) mod_security (id:210730) triggered by 85.203.44.55 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 85.203.44.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 14 07:07:16.649685 2026] [security2:error] [pid 12623:tid 12623] [client 85.203.44.55:35187] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|brazilianbikinis.com\|F\|2"] [data ".dat"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "brazilianbikinis.com"] [uri "/bak/wallet.dat"] [unique_id "abVBZFYMqNGi-nsJJ7ty1QAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 bescared	2026-03-09 02:23:52 (7 months ago)	F2B - Malicious activity detected. URL Probing.	Hacking Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-25 16:20:51 (7 months ago)	(mod_security) mod_security (id:210730) triggered by 85.203.44.55 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 85.203.44.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 25 11:20:45.245167 2026] [security2:error] [pid 6806:tid 6806] [client 85.203.44.55:40599] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.pcga.golf\|F\|2"] [data ".dat"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.pcga.golf"] [uri "/bak/wallet.dat"] [unique_id "aZ8hXZsytnzK2EZMXywMGAAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ghostwarriors	2026-02-09 13:20:35 (8 months ago)	Attempts against non-existent wp-login	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-02-06 06:53:15 (8 months ago)	(mod_security) mod_security (id:210730) triggered by 85.203.44.55 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 85.203.44.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 06 01:53:11.565547 2026] [security2:error] [pid 23420:tid 23420] [client 85.203.44.55:57369] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|bitcointoolshop.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "bitcointoolshop.com"] [uri "/mysql.sql"] [unique_id "aYWP1wd2ZHSj7KLwWEyqoAAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-03 18:37:47 (8 months ago)	(mod_security) mod_security (id:210730) triggered by 85.203.44.55 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 85.203.44.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 03 13:37:39.735048 2026] [security2:error] [pid 24936:tid 24944] [client 85.203.44.55:45095] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|dpscsde.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dpscsde.com"] [uri "/back/www.sql"] [unique_id "aYJAc1h-Pq7nQXItWz4StAAAAMI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇦 URAN Publishing Service	2026-01-30 13:31:25 (8 months ago)	85.203.44.55 - - [30/Jan/2026:15:31:25 +0200] "GET //wp-content/plugins/index.php HTTP/1.1" 404 274 ... show more 85.203.44.55 - - [30/Jan/2026:15:31:25 +0200] "GET //wp-content/plugins/index.php HTTP/1.1" 404 274 "-" "Go-http-client/1.1" ... show less	Web App Attack
🇺🇦 URAN Publishing Service	2026-01-30 03:17:24 (8 months ago)	85.203.44.55 - - [30/Jan/2026:05:17:22 +0200] "GET //wp-content/plugins/about.php HTTP/1.1" 404 275 ... show more 85.203.44.55 - - [30/Jan/2026:05:17:22 +0200] "GET //wp-content/plugins/about.php HTTP/1.1" 404 275 "-" "Go-http-client/1.1" 85.203.44.55 - - [30/Jan/2026:05:17:23 +0200] "GET //wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 404 275 "-" "Go-http-client/1.1" ... show less	Web App Attack
🇨🇭 backslash	2026-01-30 01:45:03 (8 months ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇩🇪 mygcode.de	2026-01-26 15:03:52 (8 months ago)	Scanning for Exploits	Bad Web Bot
🇺🇸 mnsf	2026-01-26 14:05:37 (8 months ago)	Too many Status 40X (11)	Brute-Force Web App Attack
Anonymous	2026-01-24 07:43:58 (8 months ago)	wordpress-trap	Web App Attack

Showing 1 to 15 of 97 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 199.244.88.225

🇺🇸 172.210.9.156

🇻🇳 116.103.230.94

🇨🇦 70.54.182.130

🇬🇧 64.205.72.25

🇮🇳 43.254.204.119

🇺🇸 40.124.80.238

🇺🇸 8.229.245.87

🇺🇸 2a10:7b00:af34:696c:54c8:16c5:4b28:7083

🇨🇳 220.250.11.230

🇺🇸 185.198.240.10

🇦🇷 181.25.29.122

🇧🇷 168.205.190.245

🇳🇱 161.35.154.206

🇺🇸 136.70.89.243

🇩🇪 130.12.180.32

🇺🇸 104.131.116.166

🇻🇳 103.200.25.198

🇧🇷 45.161.214.200

🇿🇦 34.35.74.23