JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 85.203.45.232

85.203.45.232 was found in our database!

This IP was reported 167 times. Confidence of Abuse is 21%: ?

21%

ISP	AF Networks
Usage Type	Data Center/Web Hosting/Transit
ASN	AS9009
Domain Name	falco-networks.com
Country	🇨🇭 Switzerland
City	Zurich, Zurich

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 85.203.45.232

Whois 85.203.45.232

IP Abuse Reports for 85.203.45.232:

This IP address has been reported a total of 167 times from 37 distinct sources. 85.203.45.232 was first reported on August 12th 2021, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 zynex	2026-08-28 13:17:09 (2 weeks ago)	SQL Injection in QueryString parameter: 1' AND 7737=CONVERT(INT,(SELECT 'hkmaod'+((SELECT (CASE WHEN ... show more SQL Injection in QueryString parameter: 1' AND 7737=CONVERT(INT,(SELECT 'hkmaod'+((SELECT (CASE WHEN (7737=7737) THEN '1' ELSE '0' END)))+'lptptg'))-- - show less	SQL Injection
Anonymous	2026-08-26 05:56:08 (3 weeks ago)	85.203.45.232 - - [26/Aug/2026:05:56:00 +0000] "GET /wp-content/plugins/penci-bookmark-follow/inc/ad ... show more 85.203.45.232 - - [26/Aug/2026:05:56:00 +0000] "GET /wp-content/plugins/penci-bookmark-follow/inc/admin/forms/penci-bf-users-logs-profile.php HTTP/2.0" 404 6544 "-" "Go-http-client/2.0" 85.203.45.232 - - [26/Aug/2026:05:56:01 +0000] "GET /wp-content/plugins/penci-mobile-templates/functions.php HTTP/2.0" 404 6290 "-" "Go-http-client/2.0" 85.203.45.232 - - [26/Aug/2026:05:56:02 +0000] "GET /wp-content/plugins/wordpress-seo/wp-seo-main-float.php HTTP/2.0" 404 6287 "-" "Go-http-client/2.0" 85.203.45 ... show less	Web App Attack
🇮🇹 VHosting	2026-08-26 01:00:07 (3 weeks ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇺🇦 URAN Publishing Service	2026-08-25 18:03:36 (3 weeks ago)	[25/Aug/2026:21:03:36 +0300] -- 85.203.45.232 Ban reason: User-Agent Go-http-client	Bad Web Bot Web App Attack
🇧🇷 Peregrine	2026-07-10 03:22:24 (2 months ago)	Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: 85.203.45.232 172.71.172.83 - - [06/Jul/2026:22:41: ... show more Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: 85.203.45.232 172.71.172.83 - - [06/Jul/2026:22:41:27 -0300] "GET /wp-includes/woocommerce-call.php HTTP/1.1" 404 18193 show less	Bad Web Bot
🇧🇷 Peregrine	2026-07-08 03:15:49 (2 months ago)	Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: 85.203.45.232 172.71.172.83 - - [06/Jul/2026:22:41: ... show more Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: 85.203.45.232 172.71.172.83 - - [06/Jul/2026:22:41:27 -0300] "GET /wp-includes/woocommerce-call.php HTTP/1.1" 404 18193 show less	Bad Web Bot
🇮🇹 VHosting	2026-07-07 14:50:03 (2 months ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇧🇷 Peregrine	2026-07-07 03:12:25 (2 months ago)	Fail2Ban ct101 Jail: tomcat-404 \| Evidence: 85.203.45.232 172.71.172.134 - - [06/Jul/2026:22:41:29 - ... show more Fail2Ban ct101 Jail: tomcat-404 \| Evidence: 85.203.45.232 172.71.172.134 - - [06/Jul/2026:22:41:29 -0300] "GET /wp-content/themes/news-portal/error.php HTTP/1.1" 404 18193 85.203.45.232 172.71.172.83 - - [06/Jul/2026:22:41:30 -0300] "GET /wp-content/themes/fukasawa/inc/classes/403.php HTTP/1.1" 404 18193 85.203.45.232 172.71.172.134 - - [06/Jul/2026:22:41:31 -0300] "GET /wp-content/plugins/hello-plus/classes/ehp-sarang.php HTTP/1.1" 404 18193 85.203.45.232 172.71.172.134 - - [06/Jul/2026:22:41:31 -0300] "GET /wp-content/plugins/so-pinyin-slugs/inc/main_json.php HTTP/1.1" 404 18193 85.203.45.232 172.71.172.134 - - [06/Jul/2026:22:41:32 -0300] "GET /wp-content/plugins/filester/assets/css/404.php HTTP/1.1" 404 18193 show less	Bad Web Bot Web App Attack
🇧🇷 Peregrine	2026-07-07 01:41:32 (2 months ago)	Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: 85.203.45.232 172.71.172.83 - - [06/Jul/2026:22:41: ... show more Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: 85.203.45.232 172.71.172.83 - - [06/Jul/2026:22:41:27 -0300] "GET /wp-includes/woocommerce-call.php HTTP/1.1" 404 18193 show less	Bad Web Bot
🇫🇷 dynamix	2026-06-16 11:41:17 (3 months ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-04-20 06:26:13 (4 months ago)	(mod_security) mod_security (id:234930) triggered by 85.203.45.232 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:234930) triggered by 85.203.45.232 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 20 02:26:08.127535 2026] [security2:error] [pid 2649898:tid 2649898] [client 85.203.45.232:41223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\/lib\\\\/php\\\\/connector\\\\.minimal\\\\.php$" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/27_Apps_WPPlugin.conf"] [line "6778"] [id "234930"] [rev "2"] [msg "COMODO WAF: File upload vulnerability in the file manager plugin before 6.9 for WordPress (CVE-2020-25213)\|\|4115thewestford.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WPPlugin"] [hostname "4115thewestford.com"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "aeXHANCN9vCHKjlK1F7X_gAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 directorioeducativo.com	2026-04-17 13:41:23 (5 months ago)	GET URL: "/wp-content/plugins/enhanced-text-widget/analyst/src/403x.php"Agent: "Go-http-client/2.0"	Web App Attack
🇪🇸 masterguru	2026-04-17 05:09:55 (5 months ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-122) show less	Bad Web Bot
🇬🇧 consul.to	2026-04-14 14:11:05 (5 months ago)	Web attack/malicious scanning detected	Web App Attack
🇨🇭 backslash	2026-04-13 06:06:08 (5 months ago)	block ruleset 3D3AFA921A373ECE19B6BA285C2D722163304638	Bad Web Bot

Showing 1 to 15 of 167 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇻🇳 171.227.37.39

🇺🇸 203.109.55.140

🇺🇸 152.163.33.164

🇰🇷 112.161.42.97

🇧🇩 103.185.224.212

🇧🇪 35.240.100.200

🇫🇮 35.228.254.97

🇬🇧 35.203.211.109

🇹🇼 211.72.158.51

🇪🇹 196.189.45.183

🇳🇱 193.47.62.69

🇻🇳 171.244.185.149

🇧🇩 144.48.161.73

🇲🇦 41.92.107.218

🇵🇰 39.45.99.235

🇦🇺 35.201.31.21

🇩🇪 213.209.159.208

🇹🇳 197.11.6.173

🇧🇷 189.105.8.213

🇪🇨 181.196.24.37