JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 85.28.109.54

85.28.109.54 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 71%: ?

71%

ISP	Coditel - Internet Services
Usage Type	Fixed Line ISP
ASN	AS6848
Hostname(s)	85-28-109-54.access.telenet.be
Domain Name	coditel.be
Country	🇧🇪 Belgium
City	Sint-Genesius-Rode, Flanders

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 85.28.109.54

Whois 85.28.109.54

IP Abuse Reports for 85.28.109.54:

This IP address has been reported a total of 19 times from 18 distinct sources. 85.28.109.54 was first reported on September 24th 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-10-10 05:36:49 (1 week ago)	POST /xmlrpc.php HTTP/1.1 ...	Brute-Force
🇺🇸 IndigoRidge	2026-10-09 14:21:12 (1 week ago)	85.28.109.54 - - [09/Oct/2026:10:18:23 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5129 "-" "Mozilla/5.0 ... show more 85.28.109.54 - - [09/Oct/2026:10:18:23 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5129 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; x86) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/91.0.0.0 Safari/537.36" 85.28.109.54 - - [09/Oct/2026:10:19:45 -0400] "GET /wp-json/wp/v2/users HTTP/1.1" 200 13111 "-" "Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)" 85.28.109.54 - - [09/Oct/2026:10:20:18 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5129 "-" "Mozilla/5.0 (Linux; Android 10; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/83.0.0.0 Safari/537.36" 85.28.109.54 - - [09/Oct/2026:10:20:45 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5129 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/86.0.0.0 Safari/537.36" 85.28.109.54 - - [09/Oct/2026:10:21:10 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5129 "-" "Mozilla/5.0 (Linux; Android 10; x86) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36" ... show less	Web App Attack
🇮🇹 Inartis	2026-10-09 13:48:59 (1 week ago)	85.28.109.54 - - [09/Oct/2026:15:48:58 +0200] "POST /xmlrpc.php HTTP/1.1" 403 4979 "-" "Mozilla/5.0 ... show more 85.28.109.54 - - [09/Oct/2026:15:48:58 +0200] "POST /xmlrpc.php HTTP/1.1" 403 4979 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.0.0 Safari/537.36" ... show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 cwytech	2026-10-09 02:34:30 (1 week ago)	Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/wp-us-login-only-high.	Bad Web Bot Web App Attack
🇩🇪 LRob	2026-10-08 01:18:32 (1 week ago)	Web exploit attempt \| method: GET \| path: /wp-json/wp/v2/users \| ua: Mozilla/4.0 (compatible; Win32; ... show more Web exploit attempt \| method: GET \| path: /wp-json/wp/v2/users \| ua: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) show less	Hacking Web App Attack
🇧🇷 Host One	2026-10-06 07:00:42 (1 week ago)	Web vulnerability scanning: WordPress xmlrpc.php abuse. Blocked by firewall on 5 different hosting s ... show more Web vulnerability scanning: WordPress xmlrpc.php abuse. Blocked by firewall on 5 different hosting servers. Protocol TCP, port 80, 443 (HTTP/HTTPS). Automated report. show less	Brute-Force Web App Attack
🇨🇭 4server	2026-10-05 22:19:02 (1 week ago)	[TueOct0600:18:55.2906362026][security2:error][pid1426349:tid1426358][client85.28.109.54:0]ModSecuri ... show more [TueOct0600:18:55.2906362026][security2:error][pid1426349:tid1426358][client85.28.109.54:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"714\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"filarmonicaagno.ch\"][uri\"/xmlrpc.php\"][unique_id\"asQiT0lCc_sXeQrztMfvqAAAAIc\"] show less	Hacking Web App Attack
🇩🇪 netclix.gr	2026-10-05 20:22:11 (1 week ago)	(wordpress) Failed wordpress login from 85.28.109.54 (BE/Belgium/85-28-109-54.access.telenet.be): ( ... show more (wordpress) Failed wordpress login from 85.28.109.54 (BE/Belgium/85-28-109-54.access.telenet.be): (CF_ENABLE) show less	Brute-Force
🇩🇪 grassau.com	2026-10-03 13:06:41 (1 week ago)	(wordpress) Failed wordpress login from 85.28.109.54 (BE/Belgium/Brussels Capital/Brussels/85-28-109 ... show more (wordpress) Failed wordpress login from 85.28.109.54 (BE/Belgium/Brussels Capital/Brussels/85-28-109-54.access.telenet.be) show less	Brute-Force
🇫🇷 masterguru	2026-10-01 16:42:45 (2 weeks ago)	(xmlrpc) Apache: Failed xmlrpc access from 85.28.109.54 (BE/Belgium/85-28-109-54.access.telenet.be): ... show more (xmlrpc) Apache: Failed xmlrpc access from 85.28.109.54 (BE/Belgium/85-28-109-54.access.telenet.be): 10 in the last 3600 secs (0-201) show less	Hacking
Anonymous	2026-09-29 09:55:08 (2 weeks ago)	Bad Request ae8d09aa	Port Scan Hacking Bad Web Bot Web App Attack
Anonymous	2026-09-29 08:55:06 (2 weeks ago)	Bad Request 1e1aee59	Port Scan Hacking Bad Web Bot Web App Attack
Anonymous	2026-09-28 14:06:17 (2 weeks ago)	Blocked: Reason='Vulnerability probing — PHP scan detected (11/60 min)'; Requests=11	Port Scan
🇫🇷 omartin	2026-09-28 11:44:55 (2 weeks ago)	Critical Vulnerability Scan detected	Hacking Brute-Force Exploited Host Web App Attack
🇳🇴 jad-abuse	2026-09-28 04:35:37 (2 weeks ago)	ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: xmlrpc. O ... show more ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: xmlrpc. Observed by 1 sensor(s); 1 hits. show less	Brute-Force Web App Attack

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 200.138.46.208

🇻🇳 103.72.56.174

🇰🇷 59.6.159.181

🇺🇸 54.167.234.21

🇦🇷 190.55.123.51

🇹🇼 175.97.207.27

🇺🇸 144.225.6.184

🇰🇷 119.192.128.163

🇸🇪 93.158.90.33

🇸🇪 93.158.90.17

🇷🇴 92.118.39.49

🇨🇦 85.217.149.38

🇺🇸 54.165.165.41

🇺🇸 54.165.130.174

🇰🇷 45.67.97.116

🇰🇷 14.63.217.156

🇵🇭 8.212.134.208

🇮🇷 185.169.22.114

🇧🇷 179.99.195.128

🇰🇭 136.228.157.2