JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 85.203.45.151

85.203.45.151 was found in our database!

This IP was reported 117 times. Confidence of Abuse is 14%: ?

14%

ISP	AF Networks
Usage Type	Data Center/Web Hosting/Transit
ASN	AS9009
Domain Name	falco-networks.com
Country	🇨🇭 Switzerland
City	Zurich, Zurich

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 85.203.45.151

Whois 85.203.45.151

IP Abuse Reports for 85.203.45.151:

This IP address has been reported a total of 117 times from 31 distinct sources. 85.203.45.151 was first reported on October 31st 2022, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 backslash	2026-08-28 09:12:22 (4 days ago)	probe wp	Web App Attack
🇺🇦 URAN Publishing Service	2026-08-27 04:48:49 (6 days ago)	[27/Aug/2026:07:48:48 +0300] -- 85.203.45.151 Ban reason: User-Agent Go-http-client	Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-06-21 23:27:22 (2 months ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
Anonymous	2026-06-14 00:19:20 (2 months ago)	Multiple web server 400 error codes from same source ip	Web App Attack
🇨🇦 Dolphi	2026-05-27 08:20:12 (3 months ago)	POST //xmlrpc.php	Brute-Force Web App Attack
🇧🇪 cmbplf	2026-05-27 03:23:00 (3 months ago)	10.961 requests with url.path //xmlrpc.php 10.693 requests with url.path */xmlrpc.php	Brute-Force Bad Web Bot
🇪🇸 sshtmp	2026-05-23 03:59:20 (3 months ago)	[AbuseIPDB auto-report] Attack: WordPress XML-RPC brute-force Hits: 1 \| First: 2026-05-23T05:59:20+0 ... show more [AbuseIPDB auto-report] Attack: WordPress XML-RPC brute-force Hits: 1 \| First: 2026-05-23T05:59:20+02:00 \| Last: 2026-05-23T05:59:20+02:00 Samples: POST /xmlrpc.php [200] show less	Brute-Force Web App Attack
🇵🇱 nfsec.pl	2026-05-21 10:50:57 (3 months ago)	85.203.45.151 - - [21/May/2026:10:50:54 +0000] "GET /rec/config.php HTTP/2.0" 404 24010 "https://nfs ... show more 85.203.45.151 - - [21/May/2026:10:50:54 +0000] "GET /rec/config.php HTTP/2.0" 404 24010 "https://nfsec.pl//rec/config.php?p=" "Go-http-client/2.0" 85.203.45.151 - - [21/May/2026:10:50:55 +0000] "GET /libraries/vendor/updates.php HTTP/2.0" 404 23966 "https://nfsec.pl//libraries/vendor/updates.php" "Go-http-client/2.0" 85.203.45.151 - - [21/May/2026:10:50:55 +0000] "GET /templates/Beez3/error.php HTTP/2.0" 404 23909 "https://nfsec.pl//templates/Beez3/error.php" "Go-http-client/2.0" 85.203.45.151 - - [21/May/2026:10:50:56 +0000] "GET /templates/beez/admin.php HTTP/2.0" 404 24105 "https://nfsec.pl//templates/beez/admin.php" "Go-http-client/2.0" 85.203.45.151 - - [21/May/2026:10:50:56 +0000] "GET /templates/beez/ HTTP/2.0" 404 23874 "https://nfsec.pl//templates/beez/index.php" "Go-http-client/2.0" ... show less	Web App Attack Exploited Host
🇩🇪 EGP Abuse Dept	2026-04-19 15:58:33 (4 months ago)	Scanning for web/db/file exploits on tpc-030.mach3builders.nl	SQL Injection Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-15 07:37:50 (4 months ago)	(mod_security) mod_security (id:234930) triggered by 85.203.45.151 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:234930) triggered by 85.203.45.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 15 03:37:43.773572 2026] [security2:error] [pid 1034426:tid 1034426] [client 85.203.45.151:55883] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\/lib\\\\/php\\\\/connector\\\\.minimal\\\\.php$" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/27_Apps_WPPlugin.conf"] [line "6778"] [id "234930"] [rev "2"] [msg "COMODO WAF: File upload vulnerability in the file manager plugin before 6.9 for WordPress (CVE-2020-25213)\|\|damgoodit.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WPPlugin"] [hostname "damgoodit.com"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "ad9AR5X2EhhsWadGeeRXMAAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 BlueWire Hosting	2026-04-14 21:22:04 (4 months ago)	Bad bot ignoring robot.txt	Bad Web Bot
🇺🇸 TPI-Abuse	2026-03-17 12:21:21 (5 months ago)	(mod_security) mod_security (id:210730) triggered by 85.203.45.151 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 85.203.45.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 17 08:21:17.545520 2026] [security2:error] [pid 26028:tid 26028] [client 85.203.45.151:54461] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.domainexecs.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.domainexecs.com"] [uri "/backup/mysql.sql"] [unique_id "ablHPcSU0wGYzplrjysotwAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇯🇵 Valhalla	2026-03-09 04:48:15 (5 months ago)	/restore/mysql.sql	Hacking Web App Attack
🇺🇸 Penny Packer	2026-02-23 16:23:32 (6 months ago)	Fail2Ban apache-tripwires	Web App Attack
🇺🇸 TPI-Abuse	2026-02-12 17:11:39 (6 months ago)	(mod_security) mod_security (id:210730) triggered by 85.203.45.151 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 85.203.45.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 12:11:33.719498 2026] [security2:error] [pid 1179541:tid 1179569] [client 85.203.45.151:23333] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|bluetigertees.com\|F\|2"] [data ".dat"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "bluetigertees.com"] [uri "/backups/wallet.dat"] [unique_id "aY4JxQvMeIDAwpaY0ftRmgAAABY"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 117 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇹 188.20.244.19

🇿🇦 197.95.71.233

🇨🇴 190.131.196.162

🇧🇷 177.104.101.11

🇮🇹 134.90.247.110

🇯🇵 101.36.104.242

🇷🇴 92.118.39.50

🇺🇸 74.125.227.138

🇩🇪 69.5.169.214

🇩🇪 64.226.84.78

🇺🇸 35.144.107.130

🇧🇷 34.95.131.167

🇩🇪 8.211.13.101

🇮🇳 2001:4490:4e51:1e24:c962:8753:7971:3b08

🇩🇪 212.132.92.161

🇬🇧 193.176.29.11

🇳🇱 185.2.80.253

🇧🇷 138.122.55.69

🇨🇳 123.245.85.50

🇫🇷 91.231.89.233