JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 85.203.45.21

85.203.45.21 was found in our database!

This IP was reported 78 times. Confidence of Abuse is 27%: ?

27%

ISP	AF Networks
Usage Type	Data Center/Web Hosting/Transit
ASN	AS9009
Domain Name	falco-networks.com
Country	🇨🇭 Switzerland
City	Zurich, Zurich

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 85.203.45.21

Whois 85.203.45.21

IP Abuse Reports for 85.203.45.21:

This IP address has been reported a total of 78 times from 26 distinct sources. 85.203.45.21 was first reported on July 12th 2021, and the most recent report was 13 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-10-26 12:12:35 (13 hours ago)	85.203.45.21 - - [26/Oct/2026:06:12:35 -0600] "POST /xmlrpc.php HTTP/1.1" 200 415 "-" "Mozilla/5.0 ( ... show more 85.203.45.21 - - [26/Oct/2026:06:12:35 -0600] "POST /xmlrpc.php HTTP/1.1" 200 415 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Web App Attack
🇧🇪 taivas.nl	2026-10-26 10:36:34 (15 hours ago)	Wordpress_xmlrpc_attack	Bad Web Bot
🇫🇷 dynamix	2026-10-14 15:16:54 (1 week ago)	Multiple WAF Violations	Web App Attack
Anonymous	2026-10-03 13:10:11 (3 weeks ago)	[ns19.kdns.gr] httpd-suspicious-path: sites=www.t-support.gr; logs=/var/log/httpd/domains/t-support. ... show more [ns19.kdns.gr] httpd-suspicious-path: sites=www.t-support.gr; logs=/var/log/httpd/domains/t-support.gr.log; samples=/wp-content/plugins/enhanced-text-widget/analyst/src/403x.php \| /wp-content/themes/theme-check/main.php \| /wp-content/plugins/wp-cache-sys/index.php show less	Hacking Web App Attack
🇨🇭 backslash	2026-08-11 18:33:00 (2 months ago)	block ruleset 3D3AFA921A373ECE19B6BA285C2D722163304638	Bad Web Bot
Anonymous	2026-07-19 17:15:54 (3 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 20-15.85.203.45.21.web-spammer ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 20-15.85.203.45.21.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇪🇸 masterguru	2026-06-30 05:11:17 (3 months ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-122) show less	Bad Web Bot
Anonymous	2026-06-16 10:44:13 (4 months ago)	Attac	Brute-Force
🇮🇱 Dolphi	2026-06-15 11:20:11 (4 months ago)	POST //xmlrpc.php	Brute-Force Web App Attack
🇧🇪 cmbplf	2026-06-15 09:50:10 (4 months ago)	2.000 requests with url.path //xmlrpc.php	Brute-Force Bad Web Bot
🇧🇪 taivas.nl	2026-06-15 04:32:38 (4 months ago)	Many_bad_calls	Web App Attack
🇧🇪 taivas.nl	2026-06-14 22:32:11 (4 months ago)	Bad_requests	Bad Web Bot
🇰🇷 MW	2026-06-12 08:26:34 (4 months ago)	85.203.45.21 - - [12/Jun/2026:17:26:31 +0900] "GET /wp-content/plugins/autoload_classmap.php HTTP/1. ... show more 85.203.45.21 - - [12/Jun/2026:17:26:31 +0900] "GET /wp-content/plugins/autoload_classmap.php HTTP/1.1" 404 4232 "http://piazza.co.kr/wp-content/plugins/autoload_classmap.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.45.21 - - [12/Jun/2026:17:26:32 +0900] "GET /images/ HTTP/1.1" 404 459 "http://piazza.co.kr/images/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 85.203.45.21 - - [12/Jun/2026:17:26:33 +0900] "GET /wp-includes/blocks/code/ HTTP/1.1" 404 459 "http://piazza.co.kr/wp-includes/blocks/code/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" show less	Bad Web Bot Web App Attack
🇧🇪 cmbplf	2026-06-11 20:31:38 (4 months ago)	12.264 requests with url.path //xmlrpc.php 11.703 requests with url.path */xmlrpc.php	Brute-Force Bad Web Bot
🇺🇸 TPI-Abuse	2026-06-11 17:15:27 (4 months ago)	(mod_security) mod_security (id:225170) triggered by 85.203.45.21 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 85.203.45.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 13:15:20.134027 2026] [security2:error] [pid 10273:tid 10273] [client 85.203.45.21:33947] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.alejandrogorsse.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.alejandrogorsse.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "airtKCUUrT6VdxyfjYCuKwAAABk"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 78 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇭 209.99.190.186

🇨🇱 190.45.173.202

🇦🇷 181.92.43.247

🇨🇱 167.249.31.114

🇭🇰 152.32.240.77

🇷🇺 146.120.203.3

🇺🇸 139.84.116.235

🇳🇱 138.226.239.90

🇨🇳 121.43.119.64

🇨🇳 106.75.254.120

🇺🇸 67.197.104.163

🇩🇪 46.101.158.204

🇳🇱 45.148.10.157

🇺🇸 205.210.31.71

🇹🇭 203.150.107.87

🇧🇷 129.159.56.14

🇩🇪 109.160.32.31

🇧🇩 103.239.83.238

🇺🇸 96.56.228.149

🇨🇦 85.217.149.4