JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 85.203.45.229

85.203.45.229 was found in our database!

This IP was reported 100 times. Confidence of Abuse is 4%: ?

ISP	AF Networks
Usage Type	Data Center/Web Hosting/Transit
ASN	AS9009
Domain Name	falco-networks.com
Country	🇨🇭 Switzerland
City	Zurich, Zurich

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 85.203.45.229

Whois 85.203.45.229

IP Abuse Reports for 85.203.45.229:

This IP address has been reported a total of 100 times from 24 distinct sources. 85.203.45.229 was first reported on December 9th 2024, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇦 URAN Publishing Service	2026-08-25 20:28:39 (4 hours ago)	[25/Aug/2026:23:28:38 +0300] -- 85.203.45.229 Ban reason: User-Agent Go-http-client	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-16 11:40:36 (2 months ago)	(mod_security) mod_security (id:225170) triggered by 85.203.45.229 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 85.203.45.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 07:40:31.985139 2026] [security2:error] [pid 5591:tid 5711] [client 85.203.45.229:23891] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.heworeblack.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.heworeblack.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ajE2L_AXJqr8qQOVzOXcAwAAAUY"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 [email protected]	2026-05-28 16:41:57 (2 months ago)	85.203.45.229 - - [28/May/2026:10:28:05 +0200] "POST /xmlrpc.php HTTP/1.1" 403 3944 "-" "Mozilla/5.0 ... show more 85.203.45.229 - - [28/May/2026:10:28:05 +0200] "POST /xmlrpc.php HTTP/1.1" 403 3944 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 12_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" show less	Brute-Force Web App Attack
🇮🇹 [email protected]	2026-05-28 08:28:05 (2 months ago)	[Thu May 28 10:28:05.258752 2026] [authz_core:error] [pid 257012:tid 257122] [client 85.203.45.229:3 ... show more [Thu May 28 10:28:05.258752 2026] [authz_core:error] [pid 257012:tid 257122] [client 85.203.45.229:37397] AH01630: client denied by server configuration: /var/www/html/MyWeb/Wordpress_www/xmlrpc.php show less	Brute-Force Web App Attack
🇪🇸 sshtmp	2026-05-20 14:37:25 (3 months ago)	[AbuseIPDB auto-report] Attack: WordPress XML-RPC brute-force Hits: 2 \| First: 2026-05-20T16:37:24+0 ... show more [AbuseIPDB auto-report] Attack: WordPress XML-RPC brute-force Hits: 2 \| First: 2026-05-20T16:37:24+02:00 \| Last: 2026-05-20T16:37:25+02:00 Samples: POST /xmlrpc.php [200] show less	Brute-Force Web App Attack
🇺🇸 mnsf	2026-04-17 08:05:18 (4 months ago)	Scanning/Probing (13)	Brute-Force Web App Attack
🇪🇸 masterguru	2026-04-17 05:07:44 (4 months ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:user-agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:user-agent. (1100000-122) show less	Bad Web Bot
🇲🇾 Rizzy	2026-04-17 01:39:42 (4 months ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇺🇸 mnsf	2026-04-13 09:05:23 (4 months ago)	Too many Status 40X (20)	Brute-Force Web App Attack
🇨🇭 backslash	2026-04-13 06:06:08 (4 months ago)	block ruleset 3D3AFA921A373ECE19B6BA285C2D722163304638	Bad Web Bot
🇺🇸 Penny Packer	2026-03-16 16:29:28 (5 months ago)	Fail2Ban apache-tripwires	Web App Attack
🇳🇱 EGP Abuse Dept	2026-03-12 14:41:33 (5 months ago)	Scanning for web/db/file exploits on tpc-025.mach3builders.nl	SQL Injection Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-11 15:09:36 (5 months ago)	(mod_security) mod_security (id:210730) triggered by 85.203.45.229 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 85.203.45.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 11 11:09:28.655219 2026] [security2:error] [pid 4000:tid 4000] [client 85.203.45.229:44145] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.hodlmoser.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.hodlmoser.com"] [uri "/backup/dump.sql"] [unique_id "abGFqB5EXUCMWA1gOwaNCAAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇯🇵 Valhalla	2026-03-11 10:45:18 (5 months ago)	/old/wallet.zip	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-03-11 06:05:50 (5 months ago)	(mod_security) mod_security (id:210730) triggered by 85.203.45.229 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 85.203.45.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 11 02:05:45.220885 2026] [security2:error] [pid 28452:tid 28452] [client 85.203.45.229:23409] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|lusocleaningservice.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "lusocleaningservice.com"] [uri "/backup/backup.sql"] [unique_id "abEGOR0lmrpKE0OJMK_H1AAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 100 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 200.110.105.106

🇵🇪 181.66.137.187

🇨🇴 181.62.56.127

🇧🇩 180.94.28.74

🇵🇹 94.62.186.24

🇳🇱 78.159.131.21

🇺🇸 2602:80d:1008::26

🇳🇱 204.76.203.231

🇧🇷 200.223.25.122

🇭🇰 199.45.154.112

🇩🇪 194.88.98.91

🇺🇸 189.81.4.33

🇨🇳 183.23.61.116

🇮🇩 180.253.241.42

🇧🇷 179.109.18.25

🇧🇷 131.161.66.201

🇵🇹 109.49.49.173

🇺🇸 69.94.12.160

🇺🇸 45.79.218.25

🇺🇸 45.79.172.21