JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 85.203.45.143

85.203.45.143 was found in our database!

This IP was reported 103 times. Confidence of Abuse is 19%: ?

19%

ISP	AF Networks
Usage Type	Data Center/Web Hosting/Transit
ASN	AS9009
Domain Name	falco-networks.com
Country	🇨🇭 Switzerland
City	Zurich, Zurich

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 85.203.45.143

Whois 85.203.45.143

IP Abuse Reports for 85.203.45.143:

This IP address has been reported a total of 103 times from 31 distinct sources. 85.203.45.143 was first reported on December 5th 2024, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Octopuce	2026-08-27 08:36:44 (1 week ago)	Aggressive web search of vulnerable pages: /wp-content/plugins/mm/mm.php /wp-content/plugins/Nxploit ... show more Aggressive web search of vulnerable pages: /wp-content/plugins/mm/mm.php /wp-content/plugins/Nxploited/Nx.php /wp-content/plugins/madmadxploits ... show less	Web App Attack
🇺🇸 H24	2026-08-27 07:33:52 (1 week ago)	/wpx/index.php /wp-content/plugins/neoncore-themes/O/SrHD3odefault.php /wp-content/plugins/bbpress/f ... show more /wpx/index.php /wp-content/plugins/neoncore-themes/O/SrHD3odefault.php /wp-content/plugins/bbpress/file5.php /wp-content/plugins/mm/mm.php /wp-content/themes/fukasawa/inc/classes/403.php /wp-content/plugins/enhanced-text-widget/analyst/src/403x.php /wp-content/plugins/penci-bookmark-follow/inc/admin/forms/penci-bf-users-logs-profile.php /wp-content/plugins/file-upload-types/assets/css/403x.php /modules/mod_jmz_timeline/themes/onscrollsliding/css/admin.php /wp-includes/woocommerce-call.php show less	Web App Attack
🇺🇦 URAN Publishing Service	2026-08-27 04:48:31 (1 week ago)	[27/Aug/2026:07:48:30 +0300] -- 85.203.45.143 Ban reason: User-Agent Go-http-client	Bad Web Bot Web App Attack
🇩🇪 FeG Deutschland	2026-06-21 22:56:36 (2 months ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 27	Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-06-21 21:55:39 (2 months ago)	(mod_security) mod_security (id:225170) triggered by 85.203.45.143 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 85.203.45.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 21 17:55:34.035356 2026] [security2:error] [pid 9670:tid 9670] [client 85.203.45.143:54465] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|dennisangellismusic.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "dennisangellismusic.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ajhd1rcDhY1u8L8_5KC-jAAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇦 Dolphi	2026-05-27 08:20:02 (3 months ago)	POST //xmlrpc.php	Brute-Force Web App Attack
🇱🇹 NotACaptcha	2026-05-21 10:42:59 (3 months ago)	webserver:80 [21/May/2026] "GET //templates/madeyourweb/error.php HTTP/1.1" 404 341 "-" "Go-http-cl ... show more webserver:80 [21/May/2026] "GET //templates/madeyourweb/error.php HTTP/1.1" 404 341 "-" "Go-http-client/1.1" webserver:80 [21/May/2026] "GET //templates/rhuk_milkyway/index.php HTTP/1.1" 404 341 "-" "Go-http-client/1.1" webserver:80 [21/May/2026] "GET //templates/atomic/error.php HTTP/1.1" 404 341 "-" "Go-http-client/1.1" webserver:80 [21/May/2026] "GET //admin/cache.php HTTP/1.1" 404 341 "-" "Go-http-client/1.1" show less	Web App Attack
🇩🇪 ghostwarriors	2026-05-21 09:50:09 (3 months ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇨🇭 backslash	2026-05-01 08:30:39 (4 months ago)		Bad Web Bot
🇩🇪 EGP Abuse Dept	2026-04-19 15:58:57 (4 months ago)	Scanning for web/db/file exploits on tpc-030.mach3builders.nl	SQL Injection Bad Web Bot Web App Attack
🇩🇪 BlueWire Hosting	2026-04-14 21:21:37 (4 months ago)	Bad bot ignoring robot.txt	Bad Web Bot
🇯🇵 Valhalla	2026-03-09 04:48:03 (5 months ago)	/backups/sftp-config.json	Hacking Web App Attack
🇺🇸 mnsf	2026-03-08 21:05:06 (5 months ago)	Request Overload (138)	Brute-Force Web App Attack
🇺🇸 Penny Packer	2026-03-03 08:46:25 (6 months ago)	Fail2Ban apache-tripwires	Web App Attack
🇺🇸 TPI-Abuse	2026-02-14 05:14:26 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 85.203.45.143 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 85.203.45.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 00:14:22.509174 2026] [security2:error] [pid 30450:tid 30450] [client 85.203.45.143:65343] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.ezsmiledental.com"] [uri "/backup/sftp-config.json"] [unique_id "aZAErqpcb9WVruBFUp6eJQAAAEY"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 103 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 203.55.131.3

🇧🇷 200.189.23.54

🇫🇮 147.185.133.170

🇳🇬 143.105.113.202

🇺🇸 104.243.42.167

🇺🇦 94.131.240.137

🇳🇱 45.148.10.141

🇵🇰 39.34.172.198

🇧🇪 35.205.45.52

🇺🇸 165.227.52.126

🇺🇸 154.16.115.33

🇬🇧 143.110.168.20

🇧🇬 80.66.66.31

🇺🇸 64.62.156.110

🇺🇸 4.246.117.137

🇻🇳 222.255.117.26

🇮🇳 203.115.98.138

🇺🇸 173.252.69.3

🇺🇸 162.216.149.80

🇧🇩 123.200.14.14