JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 85.5.71.68

85.5.71.68 was found in our database!

This IP was reported 41 times. Confidence of Abuse is 5%: ?

ISP	Bluewin is an LIR and ISP in Switzerland.
Usage Type	Fixed Line ISP
ASN	AS3303
Hostname(s)	68.71.5.85.dynamic.cust.swisscom.net
Domain Name	bluewin.ch
Country	🇨🇭 Switzerland
City	Zurich, Zurich

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 85.5.71.68

Whois 85.5.71.68

IP Abuse Reports for 85.5.71.68:

This IP address has been reported a total of 41 times from 5 distinct sources. 85.5.71.68 was first reported on December 27th 2024, and the most recent report was 14 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-24 09:12:13 (14 hours ago)	(mod_security) mod_security (id:210730) triggered by 85.5.71.68 (68.71.5.85.dynamic.cust.swisscom.ne ... show more (mod_security) mod_security (id:210730) triggered by 85.5.71.68 (68.71.5.85.dynamic.cust.swisscom.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 05:12:07.242647 2026] [security2:error] [pid 3519:tid 3519] [client 85.5.71.68:51568] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|pa-ksa.com\|F\|2"] [data ".dll"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "pa-ksa.com"] [uri "/docs/Efcvybzthjp.dll"] [unique_id "amMsZ-ZD623sJmPd9FMpHAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-24 22:01:34 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 85.5.71.68 (68.71.5.85.dynamic.cust.swisscom.ne ... show more (mod_security) mod_security (id:210730) triggered by 85.5.71.68 (68.71.5.85.dynamic.cust.swisscom.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 18:01:29.025526 2026] [security2:error] [pid 27203:tid 27203] [client 85.5.71.68:33986] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|pa-ksa.com\|F\|2"] [data ".dat"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "pa-ksa.com"] [uri "/docs/Zfjryxj.dat"] [unique_id "ajxTueumtJdCw6kxJ_Dg1AAAADM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-28 18:16:46 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 85.5.71.68 (68.71.5.85.dynamic.cust.swisscom.ne ... show more (mod_security) mod_security (id:210730) triggered by 85.5.71.68 (68.71.5.85.dynamic.cust.swisscom.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 28 14:16:38.543456 2026] [security2:error] [pid 29911:tid 29911] [client 85.5.71.68:60124] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|pa-ksa.com\|F\|2"] [data ".dat"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "pa-ksa.com"] [uri "/docs/Zfjryxj.dat"] [unique_id "ahiGhhYJBmzTV8hvD68kCQAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-28 18:01:55 (2 months ago)	(mod_security) mod_security (id:210730) triggered by 85.5.71.68 (68.71.5.85.dynamic.cust.swisscom.ne ... show more (mod_security) mod_security (id:210730) triggered by 85.5.71.68 (68.71.5.85.dynamic.cust.swisscom.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 28 14:01:51.948272 2026] [security2:error] [pid 12635:tid 12635] [client 85.5.71.68:50312] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|pa-ksa.com\|F\|2"] [data ".dat"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "pa-ksa.com"] [uri "/docs/Jzcfm.dat"] [unique_id "afD2DyRONF5XEtRa1UkupAAAACE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-31 07:46:52 (3 months ago)	(mod_security) mod_security (id:210730) triggered by 85.5.71.68 (68.71.5.85.dynamic.cust.swisscom.ne ... show more (mod_security) mod_security (id:210730) triggered by 85.5.71.68 (68.71.5.85.dynamic.cust.swisscom.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 31 03:46:44.691248 2026] [security2:error] [pid 32003:tid 32003] [client 85.5.71.68:54970] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|pa-ksa.com\|F\|2"] [data ".dat"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "pa-ksa.com"] [uri "/docs/Vovaf.dat"] [unique_id "act75HygNR2pzBsaINPrOwAAABo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-15 07:56:45 (4 months ago)	(mod_security) mod_security (id:210730) triggered by 85.5.71.68 (68.71.5.85.dynamic.cust.swisscom.ne ... show more (mod_security) mod_security (id:210730) triggered by 85.5.71.68 (68.71.5.85.dynamic.cust.swisscom.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 15 03:56:39.350137 2026] [security2:error] [pid 25850:tid 25850] [client 85.5.71.68:53406] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|pa-ksa.com\|F\|2"] [data ".dll"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "pa-ksa.com"] [uri "/docs/Dxmnp.dll"] [unique_id "abZmN8iEFHw8UOHmR7jeGAAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-02-04 15:11:57 (5 months ago)	wordpress-trap	Web App Attack
🇺🇸 TPI-Abuse	2026-01-29 10:27:04 (5 months ago)	(mod_security) mod_security (id:210730) triggered by 85.5.71.68 (68.71.5.85.dynamic.cust.swisscom.ne ... show more (mod_security) mod_security (id:210730) triggered by 85.5.71.68 (68.71.5.85.dynamic.cust.swisscom.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 29 05:26:58.474462 2026] [security2:error] [pid 20064:tid 20064] [client 85.5.71.68:34232] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|pa-ksa.com\|F\|2"] [data ".dat"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "pa-ksa.com"] [uri "/docs/Umjkhvfhv.dat"] [unique_id "aXs18rf9viXzTAc_-DQ_MQAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇳 ThreatBook.io	2026-01-28 22:21:01 (5 months ago)	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/85.5.71.68	SSH
🇫🇷 security.rdmc.fr	2026-01-28 12:15:38 (5 months ago)	Port Scan Attack proto:TCP src:48785 dst:23	Port Scan
Anonymous	2026-01-05 19:38:53 (6 months ago)	wordpress-trap	Web App Attack
🇨🇳 ThreatBook.io	2025-12-27 22:12:48 (6 months ago)	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/85.5.71.68 2025- ... show more ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/85.5.71.68 2025-12-27 11:05:45 /02.08.2022.exe show less	Web App Attack
🇨🇳 ThreatBook.io	2025-12-23 22:15:00 (7 months ago)	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/85.5.71.68 2025- ... show more ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/85.5.71.68 2025-12-23 18:27:16 /02.08.2022.exe show less	Web App Attack
🇺🇸 TPI-Abuse	2025-12-22 19:49:16 (7 months ago)	(mod_security) mod_security (id:210730) triggered by 85.5.71.68 (68.71.5.85.dynamic.cust.swisscom.ne ... show more (mod_security) mod_security (id:210730) triggered by 85.5.71.68 (68.71.5.85.dynamic.cust.swisscom.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 22 14:49:11.029073 2025] [security2:error] [pid 26993:tid 26993] [client 85.5.71.68:36492] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|pa-ksa.com\|F\|2"] [data ".dll"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "pa-ksa.com"] [uri "/docs/Efcvybzthjp.dll"] [unique_id "aUmgt0gqlCqtFb8WBeeJWAAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-10-18 20:13:30 (9 months ago)	wordpress-trap	Web App Attack

Showing 1 to 15 of 41 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇮 147.185.133.112

🇩🇪 92.206.251.66

🇳🇱 91.92.42.126

🇷🇺 80.244.42.253

🇺🇸 66.154.110.55

🇫🇷 54.37.10.124

🇳🇱 34.178.26.25

🇩🇪 31.76.11.83

🇭🇰 199.45.154.118

🇨🇳 182.140.17.184

🇧🇷 179.125.138.160

🇫🇮 147.185.133.178

🇮🇳 103.78.151.245

🇨🇳 8.138.23.255

🇨🇱 190.22.190.143

🇧🇷 170.80.65.140

🇺🇸 147.185.132.153

🇩🇪 139.19.117.129

🇵🇭 119.92.70.82

🇺🇸 57.151.99.52