JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 85.203.45.139

85.203.45.139 was found in our database!

This IP was reported 129 times. Confidence of Abuse is 26%: ?

26%

ISP	AF Networks
Usage Type	Data Center/Web Hosting/Transit
ASN	AS9009
Domain Name	falco-networks.com
Country	🇨🇭 Switzerland
City	Zurich, Zurich

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 85.203.45.139

Whois 85.203.45.139

IP Abuse Reports for 85.203.45.139:

This IP address has been reported a total of 129 times from 48 distinct sources. 85.203.45.139 was first reported on February 27th 2023, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 dynamix	2026-10-14 07:11:50 (3 days ago)	Multiple WAF Violations	Web App Attack
Anonymous	2026-10-14 05:49:14 (3 days ago)	IP matched detection query many 3xx errors.	Brute-Force
🇯🇵 beon	2026-10-12 17:15:38 (5 days ago)	[DateTime=>2026-10-12T17:15:38Z to 2026-10-12T17:19:46Z (UTC)] , [HoneyPot_Hits=>140 times] , [Honey ... show more [DateTime=>2026-10-12T17:15:38Z to 2026-10-12T17:19:46Z (UTC)] , [HoneyPot_Hits=>140 times] , [HoneyPots=>/wp-content/, /wp-admin/maint/, /themes/zMousse/, /wp-content/plugins/ubh/, /wp-admin/images/, /wp-content/plugins/seoplugins/ and others] , [404targets=>/update/, /autoload_classmap/, /templates/beez3/, /components/com_jea/views/form/tmpl/, /templates/beez/, /fonts/ and others] , [total_Hits=>154 times] , [Keyword=>WordPress, Joomla, file manager scripts] show less	Bad Web Bot Web App Attack Hacking
🇺🇦 URAN Publishing Service	2026-08-27 07:27:34 (1 month ago)	[27/Aug/2026:10:27:33 +0300] -- 85.203.45.139 Ban reason: User-Agent Go-http-client	Bad Web Bot Web App Attack
🇩🇪 raph	2026-08-27 04:06:24 (1 month ago)	[Wordpress] crawler /wp-admin/, /wp-content/, etc.	Bad Web Bot Web App Attack
🇫🇮 wpwoodo	2026-06-26 15:06:06 (3 months ago)	Webpage crawler	Bad Web Bot
Anonymous	2026-06-20 07:31:02 (3 months ago)	[redacted] 85.203.45.139 - - [20/Jun/2026:09:30:06 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" " ... show more [redacted] 85.203.45.139 - - [20/Jun/2026:09:30:06 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" [redacted] 85.203.45.139 - - [20/Jun/2026:09:30:14 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" [redacted] 85.203.45.139 - - [20/Jun/2026:09:30:18 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" [redacted] 85.203.45.139 - - [20/Jun/2026:09:30:19 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" [redacted] 85.203.45.139 - - [20/Jun/2026:09:30:21 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 ... show less	Hacking Web App Attack
🇨🇭 zynex	2026-06-20 06:08:52 (3 months ago)	URL Probing: /fr/wp-includes/id3/license.txt/wp1/wp-includes/wlwmanifest.xml	Web App Attack
🇵🇱 strefapi_com	2026-05-28 15:37:29 (4 months ago)	Brute-force, web ...	Hacking Brute-Force Web App Attack
🇩🇪 grassau.com	2026-05-28 11:57:50 (4 months ago)	(wordpress) Failed wordpress login from 85.203.45.139 (CH/Switzerland/Bern/Bern/-)	Brute-Force
🇫🇮 inlink.ltd	2026-05-28 01:33:21 (4 months ago)	Known malicious PHP file or CMS probe	Web App Attack
🇧🇪 cmbplf	2026-05-27 02:07:43 (4 months ago)	7.229 post requests in 1 hour (1w4d5h)	Brute-Force Bad Web Bot
🇪🇸 sshtmp	2026-05-23 03:59:23 (4 months ago)	[AbuseIPDB auto-report] Attack: WordPress XML-RPC brute-force Hits: 1 \| First: 2026-05-23T05:59:23+0 ... show more [AbuseIPDB auto-report] Attack: WordPress XML-RPC brute-force Hits: 1 \| First: 2026-05-23T05:59:23+02:00 \| Last: 2026-05-23T05:59:23+02:00 Samples: POST /xmlrpc.php [200] show less	Brute-Force Web App Attack
🇵🇱 nfsec.pl	2026-05-21 10:50:35 (4 months ago)	85.203.45.139 - - [21/May/2026:10:50:33 +0000] "GET /templates/Genius/ HTTP/2.0" 404 23972 "https:// ... show more 85.203.45.139 - - [21/May/2026:10:50:33 +0000] "GET /templates/Genius/ HTTP/2.0" 404 23972 "https://nfsec.pl//templates/Genius/index.php" "Go-http-client/2.0" 85.203.45.139 - - [21/May/2026:10:50:33 +0000] "GET /modules/scrollbottom/ultra.php HTTP/2.0" 404 23881 "https://nfsec.pl//modules/scrollbottom/ultra.php" "Go-http-client/2.0" 85.203.45.139 - - [21/May/2026:10:50:34 +0000] "GET /templates/Raees/error.php HTTP/2.0" 404 24004 "https://nfsec.pl//templates/Raees/error.php" "Go-http-client/2.0" 85.203.45.139 - - [21/May/2026:10:50:34 +0000] "GET /templates/BeginDot/ HTTP/2.0" 404 23860 "https://nfsec.pl//templates/BeginDot/index.php" "Go-http-client/2.0" 85.203.45.139 - - [21/May/2026:10:50:35 +0000] "GET /vendor/htmlawed/htmlawed/gel4y.php HTTP/2.0" 404 24008 "https://nfsec.pl//vendor/htmlawed/htmlawed/gel4y.php" "Go-http-client/2.0" ... show less	Web App Attack Exploited Host
🇱🇹 NotACaptcha	2026-05-21 10:43:13 (4 months ago)	webserver:80 [21/May/2026] "GET //templates/Cassiopeia/index.php HTTP/1.1" 404 341 "-" "Go-http-cli ... show more webserver:80 [21/May/2026] "GET //templates/Cassiopeia/index.php HTTP/1.1" 404 341 "-" "Go-http-client/1.1" webserver:80 [21/May/2026] "GET //vendor/htmlawed/htmlawed/gel4y.php HTTP/1.1" 404 341 "-" "Go-http-client/1.1" webserver:80 [21/May/2026] "GET //templates/BeginDot/index.php HTTP/1.1" 404 341 "-" "Go-http-client/1.1" webserver:80 [21/May/2026] "GET //templates/Raees/error.php HTTP/1.1" 404 341 "-" "Go-http-client/1.1" webserver:80 [21/May/2026] "GET //modules/scrollbottom/ultra.php HTTP/1.1" 404 341 "-" "Go-http-client/1.1" webserver:80 [21/May/2026] "GET //templates/Genius/index.php HTTP/1.1" 404 341 "-" "Go-http-client/1.1" webserver:80 [21/May/2026] "GET //akcc.php HTTP/1.1" 404 341 "-" "Go-http-client/1.1" webserver:80 [21/May/2026] "GET //templates/Eatoreh/index.php HTTP/1.1" 404 341 "-" "Go-http-client/1.1" webserver:80 [21/May/2026] "GET //components/com_newsfeeds/models/index.php HTTP/1.1" 404 341 "-" "Go-http-client/1.1" webserver:80 [21/May/2026] "GET //templ... show less	Web App Attack

Showing 1 to 15 of 129 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇭 209.99.190.215

🇨🇳 180.76.97.104

🇨🇳 121.196.221.211

🇭🇰 119.246.15.94

🇿🇦 102.252.32.0

🇺🇸 50.82.130.170

🇺🇸 66.132.172.44

🇯🇵 64.34.94.207

🇵🇭 58.69.117.160

🇮🇩 43.133.131.35

🇳🇱 35.204.191.49

🇬🇧 35.177.237.25

🇨🇳 27.196.16.6

🇨🇳 27.21.91.254

🇪🇨 186.68.83.105

🇺🇸 184.93.41.223

🇮🇳 115.246.15.66

🇨🇳 115.190.151.242

🇵🇰 110.38.11.56

🇵🇱 83.168.89.159