85.113.96.224

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
33 reports
26 reporters · latest 1 day ago
ISP
Hadara-RH3
Usage Type
Fixed Line ISP
ASN
AS12975
Domain Name
hadara.ps
Country
🇵🇸 Palestine, State of
City
Till, West Bank
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
33 from 26 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 6 🇩🇪 Germany 5 🇫🇷 France 5
Most common categories Brute-Force 14 Web App Attack 11 Port Scan 9 Hacking 7 Bad Web Bot 3
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇩🇪 big-cloud.nl
Try to access /xmlrpc.php
Web App Attack
🇺🇸 sumnone
Port probing on unauthorized port 23
Port Scan Hacking Exploited Host
🇦🇹 urnilxfgbez
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
Port Scan
🇺🇸 francelink.fr
Azure WAF blocked a request. Rule: 100100. Observed at: 2026-11-11T19:53:44.000Z.
Web App Attack
Anonymous
Port Scan
🇲🇹 Malta
85.113.96.224 - - [11/Nov/2026:18:52:28 +0100] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:148.0) Gecko/20100101 Firefox/148.0" Brute-force password attempt
Hacking Web App Attack Brute-Force
🇳🇱 Tsumugi Kotobuki
Telnet Brute-Force | Events: 1 | Ports: 23/Telnet | Auth: password(1x) | F2B/telnet-honeypot-bruteforce@2026-11-11T14:51:53Z
Brute-Force
🇯🇵 knock
Knock-Knock honeypot brute-force: Telnet (76 total hits)
Brute-Force
🇫🇮 6kilowatti
Port Scan
🇺🇸 RAP
2026-11-10 12:36:40 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
🇺🇸 TPI-Abuse
Brute-Force Bad Web Bot Web App Attack
🇫🇮 inlink.ltd
Known malicious PHP file or CMS probe
Web App Attack
🇫🇷 security.rdmc.fr
Activity from blacklisted IP
Hacking
🇩🇪 Jochen Pretli
connection to honeypot
Email Spam Port Scan
🇺🇸 IndigoRidge
Knock-Knock TNET honeypot activity; time=2026-11-09 12:23:18; username=root
Brute-Force

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇧🇷 191.23.41.4
🇦🇷 190.244.24.186
🇵🇪 190.238.75.253
🇨🇱 190.171.189.85
🇲🇽 187.190.35.163
🇵🇱 172.69.155.61
🇮🇳 172.69.94.90
🇵🇱 162.158.103.22
🇵🇱 162.158.102.166
🇭🇰 150.5.132.220
🇮🇶 91.106.59.233
🇨🇴 190.145.114.58
🇧🇷 189.50.142.82
🇧🇷 189.50.142.78
🇷🇺 185.245.184.230
🇧🇷 177.8.166.2
🇨🇳 114.67.232.93
🇵🇰 103.189.68.65
🇬🇧 90.202.179.55
🇷🇺 77.50.125.102
feedback