JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

85.203.45.151

Activity Trending Down

Abuse Confidence Score

10% Caution

120 reports

32 reporters · latest 3 weeks ago

ISP: AF Networks
Usage Type: Data Center/Web Hosting/Transit
ASN: AS9009
Domain Name: falco-networks.com
Country: 🇨🇭 Switzerland
City: Zurich, Zurich

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

120 from 32 distinct reporters

First reported

October 31st 2022

Most recent report

3 weeks ago

Last 60 days

Top reporter locations 🇨🇿 Czechia 2 🇫🇷 France 1

Most common categories Brute-Force 2 Web App Attack 1

Old reports The most recent abuse report for this IP address is from 3 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇯🇵 Valhalla	2026-03-09 04:48:15 UTC · (7 months ago)	/restore/mysql.sql	Hacking Web App Attack
🇺🇸 Penny Packer	2026-02-23 16:23:32 UTC · (8 months ago)	Fail2Ban apache-tripwires	Web App Attack
🇺🇸 TPI-Abuse	2026-02-12 17:11:39 UTC · (8 months ago)	(mod_security) mod_security (id:210730) triggered by 85.203.45.151 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 12:11:33.719498 2026] [security2:error] [pid 1179541:tid 1179569] [client 85.203.45.151:2333 ... show more (mod_security) mod_security (id:210730) triggered by 85.203.45.151 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 12:11:33.719498 2026] [security2:error] [pid 1179541:tid 1179569] [client 85.203.45.151:23333] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|bluetigertees.com\|F\|2"] [data ".dat"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "bluetigertees.com"] [uri "/backups/wallet.dat"] [unique_id "aY4JxQvMeIDAwpaY0ftRmgAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇯🇵 Valhalla	2026-02-12 01:29:57 UTC · (8 months ago)	/www.zip	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-02-09 23:15:08 UTC · (8 months ago)	(mod_security) mod_security (id:210730) triggered by 85.203.45.151 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 18:14:59.983383 2026] [security2:error] [pid 30353:tid 30353] [client 85.203.45.151:46855] M ... show more (mod_security) mod_security (id:210730) triggered by 85.203.45.151 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 18:14:59.983383 2026] [security2:error] [pid 30353:tid 30353] [client 85.203.45.151:46855] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|medicalexchangeasinc.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "medicalexchangeasinc.com"] [uri "/old/www.sql"] [unique_id "aYpqcwd4iRe5u-1u3d-vNwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mnsf	2026-02-09 11:05:13 UTC · (8 months ago)	Too many Status 40X (11)	Brute-Force Web App Attack
🇯🇵 Valhalla	2026-02-08 03:03:47 UTC · (8 months ago)	/back/dump.sql	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-02-04 05:35:09 UTC · (9 months ago)	(mod_security) mod_security (id:210492) triggered by 85.203.45.151 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 04 00:35:04.229969 2026] [security2:error] [pid 3537311:tid 3537311] [client 85.203.45.151:5133 ... show more (mod_security) mod_security (id:210492) triggered by 85.203.45.151 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 04 00:35:04.229969 2026] [security2:error] [pid 3537311:tid 3537311] [client 85.203.45.151:51333] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tobyscott.com"] [uri "/backups/sftp-config.json"] [unique_id "aYLaiGjAnut_VjJZMmX0sgAAACw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-01-15 14:28:28 UTC · (9 months ago)	(mod_security) mod_security (id:210730) triggered by 85.203.45.151 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 15 09:28:21.860108 2026] [security2:error] [pid 16448:tid 16448] [client 85.203.45.151:40977] M ... show more (mod_security) mod_security (id:210730) triggered by 85.203.45.151 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 15 09:28:21.860108 2026] [security2:error] [pid 16448:tid 16448] [client 85.203.45.151:40977] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|bitcointoolfair.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "bitcointoolfair.com"] [uri "/bak/sql.sql"] [unique_id "aWj5haCEv1Y2NZ6HMwm5TAAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇯🇵 Valhalla	2026-01-08 20:01:31 UTC · (9 months ago)	/old/config.js	Hacking Web App Attack
🇺🇸 Penny Packer	2025-12-23 20:48:09 UTC · (10 months ago)	Fail2Ban apache-tripwires	Web App Attack
🇩🇪 bescared	2025-12-20 08:05:31 UTC · (10 months ago)	F2B - Malicious activity detected. URL Probing.	Hacking Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-16 15:45:00 UTC · (10 months ago)	(mod_security) mod_security (id:210730) triggered by 85.203.45.151 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 16 10:44:54.122064 2025] [security2:error] [pid 2703:tid 2703] [client 85.203.45.151:63029] Mod ... show more (mod_security) mod_security (id:210730) triggered by 85.203.45.151 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 16 10:44:54.122064 2025] [security2:error] [pid 2703:tid 2703] [client 85.203.45.151:63029] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|gcigmbh.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gcigmbh.com"] [uri "/bak/www.sql"] [unique_id "aUF-dlNCPE8AU6rD10qtqAAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-03 08:37:57 UTC · (11 months ago)	(mod_security) mod_security (id:210730) triggered by 85.203.45.151 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 03 03:37:52.599325 2025] [security2:error] [pid 6234:tid 6234] [client 85.203.45.151:49307] Mod ... show more (mod_security) mod_security (id:210730) triggered by 85.203.45.151 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 03 03:37:52.599325 2025] [security2:error] [pid 6234:tid 6234] [client 85.203.45.151:49307] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|bitcoinsquaretrade.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "bitcoinsquaretrade.com"] [uri "/backup.sql"] [unique_id "aS_24Mz3OSM4eeAkMn-d5QAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Penny Packer	2025-11-28 13:21:25 UTC · (11 months ago)	Fail2Ban apache-tripwires	Web App Attack

Showing 16 to 30 of 120 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇵🇷 198.245.105.123

🇳🇱 185.136.15.16

🇺🇸 159.198.39.115

🇦🇿 212.47.143.75

🇧🇷 189.90.55.243

🇱🇧 178.135.15.24

🇧🇷 177.44.71.58

🇧🇷 168.196.85.130

🇮🇳 122.160.70.166

🇨🇳 120.48.170.74

🇧🇩 103.121.221.39

🇷🇸 91.224.250.53

🇺🇸 51.8.106.11

🇺🇸 40.119.25.141

🇺🇸 40.67.171.18

🇬🇧 35.203.210.205

🇺🇸 34.174.165.236

🇺🇸 34.42.168.32

🇦🇺 14.200.234.42

🇳🇱 188.166.34.214