JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 203.161.47.85

203.161.47.85 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 0%: ?

ISP	Namecheap, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS22612
Hostname(s)	precious-quote.rdns.hosting.spaceship.net
Domain Name	namecheap.com
Country	🇺🇸 United States of America
City	Phoenix, Arizona

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 203.161.47.85

Whois 203.161.47.85

IP Abuse Reports for 203.161.47.85:

This IP address has been reported a total of 16 times from 13 distinct sources. 203.161.47.85 was first reported on February 24th 2026, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Oak Atsume	2026-03-04 07:52:00 (3 months ago)	Human Hacker Activity {"method":"GET","path":"/redis.conf","version":"HTTP/1.0","headers":{"host":" ... show more Human Hacker Activity {"method":"GET","path":"/redis.conf","version":"HTTP/1.0","headers":{"host":"US-NEWYORK-HOST","x-real-ip":"203.161.47.85","x-forwarded-for":"203.161.47.85","x-forwarded-proto":"https","connection":"close","user-agent":"Fuzz Faster U Fool v2.1.0","accept-encoding":"gzip"},"raw_headers":["Host: 134.199.244.163","X-Real-IP: 203.161.47.85","X-Forwarded-For: 203.161.47.85","X-Forwarded-Proto: https","Connection: close","User-Agent: Fuzz Faster U Fool v2.1.0","Accept-Encoding: gzip"],"malformed":false,"body":"","params":{},"host":"203.161.47.85","timestamp":1772035064,"requestStamp":1772035064,"facility":"DO-US/New-York/East-Coast"} show less	Port Scan Brute-Force Bad Web Bot Web App Attack Hacking
🇳🇱 taivas.nl	2026-02-28 16:30:03 (4 months ago)	General_bad_requests	Bad Web Bot
🇩🇪 Mykola Spesivtsev	2026-02-28 15:26:45 (4 months ago)	HTTP Tarpit detected bot activity:TargetPort:80, Path:/, Method:GET, UA:Mozilla/5.0 (Macintosh; Inte ... show more HTTP Tarpit detected bot activity:TargetPort:80, Path:/, Method:GET, UA:Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13. show less	Port Scan Web App Attack Bad Web Bot
🇩🇪 phil2k	2026-02-28 03:47:40 (4 months ago)	portscan on multiple TCP ports : Firewall: Within 2026-02-24 20:46:53 - 2026-02-27 19:22:01 CET(+010 ... show more portscan on multiple TCP ports : Firewall: Within 2026-02-24 20:46:53 - 2026-02-27 19:22:01 CET(+0100) identified: port scan from 203.161.47.85/32 on uncommon port/s: 9443(tcp:9443),9090(tcp:9090),8888(tcp:8888) (3 trials) Fail2ban: Within 2026-02-24 20:46:53 - 2026-02-27 19:22:01 CET(+0100) banned: 5 times by fail2ban[firewall]; 5 times by fail2ban[recidive] show less	Port Scan
🇺🇸 LotPhantom	2026-02-27 20:58:20 (4 months ago)	2026-02-27T20:55:46.699767+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1 ... show more 2026-02-27T20:55:46.699767+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:08:00 SRC=203.161.47.85 DST=157.230.217.55 LEN=44 TOS=0x08 PREC=0x20 TTL=43 ID=54397 DF PROTO=TCP SPT=37853 DPT=8443 WINDOW=1024 RES=0x00 SYN URGP=0 2026-02-27T20:58:19.799516+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:08:00 SRC=203.161.47.85 DST=157.230.217.55 LEN=44 TOS=0x08 PREC=0x20 TTL=46 ID=51956 DF PROTO=TCP SPT=37853 DPT=9090 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan Hacking
🇳🇱 bazter.pro	2026-02-27 18:37:55 (4 months ago)	203.161.47.85 - - [27/Feb/2026:18:37:54 +0000] "GET /.env HTTP/1.1" 404 293 "-" "Fuzz Faster U Fool ... show more 203.161.47.85 - - [27/Feb/2026:18:37:54 +0000] "GET /.env HTTP/1.1" 404 293 "-" "Fuzz Faster U Fool v2.1.0" ... show less	Port Scan Brute-Force Bad Web Bot Web App Attack SSH
🇺🇸 RogueAutomata	2026-02-25 22:51:19 (4 months ago)	Detected malicious request: GET /.env Detections triggered: Environment/config probe Access via IP ... show more Detected malicious request: GET /.env Detections triggered: Environment/config probe Access via IP addr (v4) show less	Web App Attack
🇳🇱 lns.bz	2026-02-25 21:00:11 (4 months ago)	.env scanning [DOPP]	Web App Attack
🇺🇸 RogueAutomata	2026-02-25 18:08:03 (4 months ago)	Detected malicious request: GET / Detections triggered: Access via IP addr (v4)	Web App Attack
🇳🇱 lns.bz	2026-02-24 23:40:14 (4 months ago)	Too many 404 requests [DOPP]	Web App Attack
🇳🇱 BlueWire Hosting	2026-02-24 22:31:39 (4 months ago)	Modsecurity: probe or injection attempt	SQL Injection Web App Attack
🇺🇸 jfz-abuse	2026-02-24 20:42:07 (4 months ago)	fail2ban: apache-filepath-recon ...	Web App Attack
🇳🇱 jbouwh	2026-02-24 20:27:12 (4 months ago)	[Tue Feb 24 21:27:01.916957 2026] [authz_core:error] [pid 1337054:tid 1337054] [client 203.161.47.85 ... show more [Tue Feb 24 21:27:01.916957 2026] [authz_core:error] [pid 1337054:tid 1337054] [client 203.161.47.85:54296] AH01630: client denied by server configuration: /var/www/html/.htpasswd [Tue Feb 24 21:27:10.969672 2026] [authz_core:error] [pid 1337054:tid 1337054] [client 203.161.47.85:54296] AH01630: client denied by server configuration: /var/www/html/.htaccess [Tue Feb 24 21:27:11.348840 2026] [authz_core:error] [pid 1337054:tid 1337054] [client 203.161.47.85:54296] AH01630: client denied by server configuration: /var/www/html/.htaccess.bak show less	Web App Attack
🇩🇪 phil2k	2026-02-24 19:51:27 (4 months ago)	fail2ban:firewall:2026-02-24T20:46:53.043788+01:00 <SRV> firewall: filter IN=<ANONYMIZED_INTERFACE> ... show more fail2ban:firewall:2026-02-24T20:46:53.043788+01:00 <SRV> firewall: filter IN=<ANONYMIZED_INTERFACE> OUT= MAC=<ANONYMIZED_MAC> SRC=203.161.47.85 DST=<ANONYMIZED_IP> LEN=44 TOS=0x08 PREC=0x20 TTL=43 ID=22355 DF PROTO=TCP SPT=38821 DPT=9090 WINDOW=1024 RES=0x00 SYN URGP=0 2026-02-24T20:51:25.077432+01:00 <SRV> firewall: filter IN=<ANONYMIZED_INTERFACE> OUT= MAC=<ANONYMIZED_MAC> SRC=203.161.47.85 DST=<ANONYMIZED_IP> LEN=44 TOS=0x08 PREC=0x20 TTL=43 ID=47910 DF PROTO=TCP SPT=38821 DPT=8888 WINDOW=1024 RES=0x00 SYN URGP=0 show less	DDoS Attack Port Scan
🇩🇪 Mr-Money	2026-02-24 12:13:11 (4 months ago)	scenario: crowdsecurity/http-sensitive-files - events: 5	Web App Attack Hacking

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 205.210.31.79

🇭🇰 199.45.154.114

🇷🇴 193.32.162.84

🇻🇳 157.66.26.151

🇺🇸 144.202.92.17

🇺🇸 66.132.195.94

🇺🇸 65.49.1.27

🇮🇪 2a05:d018:10df:d400:75c3:2815:ae0f:ed07

🇨🇳 223.199.171.248

🇸🇬 216.67.230.98

🇹🇼 198.235.24.102

🇳🇱 185.226.197.42

🇨🇳 182.44.10.68

🇷🇺 178.46.180.13

🇺🇸 172.174.236.56

🇧🇼 168.167.228.123

🇩🇪 158.101.161.27

🇹🇭 152.32.247.22

🇫🇮 147.185.133.40

🇱🇹 81.30.98.142