JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 85.203.45.160

85.203.45.160 was found in our database!

This IP was reported 76 times. Confidence of Abuse is 40%: ?

40%

ISP	AF Networks
Usage Type	Data Center/Web Hosting/Transit
ASN	AS9009
Domain Name	falco-networks.com
Country	🇨🇭 Switzerland
City	Zurich, Zurich

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 85.203.45.160

Whois 85.203.45.160

IP Abuse Reports for 85.203.45.160:

This IP address has been reported a total of 76 times from 27 distinct sources. 85.203.45.160 was first reported on December 28th 2024, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 paulshipley.com.au	2026-06-30 06:06:56 (1 day ago)	bermanfamily.com.au:443 85.203.45.160 - - [30/Jun/2026:16:06:56 +1000] "GET /inputs.php HTTP/1.1" 40 ... show more bermanfamily.com.au:443 85.203.45.160 - - [30/Jun/2026:16:06:56 +1000] "GET /inputs.php HTTP/1.1" 404 506 "http://bermanfamily.com.au/inputs.php" "Go-http-client/1.1" ... show less	Web App Attack
🇪🇸 masterguru	2026-06-30 05:13:23 (1 day ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-122) show less	Bad Web Bot
🇩🇪 FeG Deutschland	2026-06-29 23:23:33 (1 day ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
🇧🇪 cmbplf	2026-06-15 09:50:27 (2 weeks ago)	2.000 requests with url.path //xmlrpc.php	Brute-Force Bad Web Bot
Anonymous	2026-06-14 22:55:51 (2 weeks ago)		Web App Attack
🇰🇷 MW	2026-06-12 08:36:32 (2 weeks ago)	85.203.45.160 - - [12/Jun/2026:17:34:14 +0900] "GET /wp-admin/user/cjfuns.php HTTP/1.1" 404 4232 "ht ... show more 85.203.45.160 - - [12/Jun/2026:17:34:14 +0900] "GET /wp-admin/user/cjfuns.php HTTP/1.1" 404 4232 "http://piazza.co.kr/wp-admin/user/cjfuns.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.45.160 - - [12/Jun/2026:17:34:43 +0900] "GET /wp-admin/maint/config.php HTTP/1.1" 404 4232 "http://piazza.co.kr/wp-admin/maint/config.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.45.160 - - [12/Jun/2026:17:36:31 +0900] "GET /wp-includes/SimplePie/XML/config.php HTTP/1.1" 404 4232 "http://piazza.co.kr/wp-includes/SimplePie/XML/config.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" show less	Bad Web Bot Web App Attack
🇧🇪 cmbplf	2026-06-11 20:30:32 (2 weeks ago)	14.127 requests with url.path //xmlrpc.php 13.094 requests with url.path */xmlrpc.php	Brute-Force Bad Web Bot
🇨🇦 Dolphi	2026-06-11 16:50:16 (2 weeks ago)	POST //xmlrpc.php	Brute-Force Web App Attack
🇮🇹 mgarofano80	2026-04-15 14:54:38 (2 months ago)		Brute-Force Web App Attack
🇬🇧 pinguin	2026-02-28 18:55:47 (4 months ago)	Triggered Cloudflare WAF (firewallManaged) from CH. Action taken: LOG Protocol: HTTP/2 (HEAD method) ... show more Triggered Cloudflare WAF (firewallManaged) from CH. Action taken: LOG Protocol: HTTP/2 (HEAD method) Endpoint: /backups/website.zip UA: Empty string This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇯🇵 Valhalla	2026-02-28 09:39:43 (4 months ago)	/old/website.gz	Hacking Web App Attack
🇬🇧 Axel	2026-02-25 16:38:01 (4 months ago)	Blocked by ModSecurity. Rule ID: 210492 Message: None Phase: 1 Severity: CRITICAL URI: /back/sftp-co ... show more Blocked by ModSecurity. Rule ID: 210492 Message: None Phase: 1 Severity: CRITICAL URI: /back/sftp-config.json Server: UK-01 show less	Web App Attack Hacking SQL Injection
🇺🇸 TPI-Abuse	2026-02-24 19:35:50 (4 months ago)	(mod_security) mod_security (id:210730) triggered by 85.203.45.160 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 85.203.45.160 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 24 14:35:44.356443 2026] [security2:error] [pid 22980:tid 22980] [client 85.203.45.160:40267] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.pcga.golf\|F\|2"] [data ".dat"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.pcga.golf"] [uri "/old/wallet.dat"] [unique_id "aZ39kDpleMPhBpXosyHtHAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Penny Packer	2026-02-18 14:20:44 (4 months ago)	Fail2Ban apache-tripwires	Web App Attack
🇺🇸 mnsf	2026-02-16 01:05:07 (4 months ago)	Too many Status 40X (12)	Brute-Force Web App Attack

Showing 1 to 15 of 76 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇦 176.98.30.45

🇺🇸 167.253.19.216

🇹🇼 140.130.98.240

🇵🇰 103.186.78.150

🇪🇬 84.36.65.243

🇬🇷 79.129.165.192

🇬🇧 35.203.211.101

🇺🇸 2607:f8b0:4004:c27::12b

🇺🇸 205.210.31.104

🇺🇾 186.191.234.68

🇷🇺 176.213.142.77

🇪🇸 158.49.70.49

🇮🇳 103.97.84.165

🇺🇸 66.132.186.244

🇮🇳 49.42.108.178

🇺🇸 47.184.58.103

🇵🇸 46.253.89.105

🇩🇪 45.135.194.48

🇺🇸 44.38.59.2

🇸🇬 43.128.104.56