85.203.15.54

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse confidence score ?
24% Elevated
342 reports
167 reporters Β· latest 1 week ago
ISP Falco Networks B.V.
Usage Type Data Center/Web Hosting/Transit
ASN AS62240
Domain Name falco-networks.com
Country πŸ‡©πŸ‡ͺ Germany
City Frankfurt am Main, Hesse

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Log in to view charts and search reports for this IP. Log In

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview
Account required for the enhanced features Log in Sign up

IP Abuse Reports for 85.203.15.54

This IP address has been reported a total of 342 times from 167 distinct sources. 85.203.15.54 was first reported on , and the most recent report was . In the last 60 days, the top reporter locations were: United Kingdom of Great Britain and Northern Ireland with 2 reports; Belgium with 1 report; Germany with 1 report. The most common categories in these recent reports were: Bad Web Bot 3 times; Web App Attack 3 times; Brute-Force 1 time; Web Spam 1 time.

Reporter IoA Timestamp (UTC) Comment Categories
πŸ‡¬πŸ‡§ consul.to
Web attack/malicious scanning detected
Web App Attack
πŸ‡§πŸ‡ͺ cmbplf
194 requests with url.path //xmlrpc.php
Brute-Force Bad Web Bot
πŸ‡¬πŸ‡§ relianoid.com
POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com
Web Spam
πŸ‡©πŸ‡ͺ roxyapi
Honeypot: automated vulnerability scan / web app attack. Last probe: GET /wp-includes/core.php
Web App Attack Bad Web Bot
πŸ‡ΊπŸ‡¦ URAN Publishing Service
[24/Aug/2026:09:33:33 +0300] -- 85.203.15.54 Ban reason: User-Agent Go-http-client
Bad Web Bot Web App Attack
πŸ‡ΉπŸ‡· neron
CrowdSec blocked: http:exploit detected via OPNsense firewall
Hacking Web App Attack
πŸ‡ΉπŸ‡· neron
CrowdSec blocked: http:exploit detected via OPNsense firewall
Hacking Web App Attack
πŸ‡¬πŸ‡§ consul.to
Web attack/malicious scanning detected
Web App Attack
πŸ‡ΉπŸ‡· neron
CrowdSec blocked: http:exploit detected via OPNsense firewall
Hacking Web App Attack
πŸ‡¬πŸ‡§ consul.to
Web attack/malicious scanning detected
Web App Attack
πŸ‡¨πŸ‡Ώ ptlab
Detected php_null_array_access attack from WP-host.
Hacking Web App Attack
πŸ‡ΉπŸ‡· neron
CrowdSec blocked: http:exploit detected via OPNsense firewall
Hacking Web App Attack
πŸ‡ΊπŸ‡Έ kosada.com
Web bot: denial-of-service flood
DDoS Attack Bad Web Bot
πŸ‡©πŸ‡ͺ Ba-Yu
General hacking/exploits/scanning
Web Spam Hacking Brute-Force Exploited Host Web App Attack
πŸ‡¬πŸ‡§ consul.to
Web attack/malicious scanning detected
Web App Attack

Showing 1 to 15 of 342 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

πŸ‡¨πŸ‡­ 178.197.208.134
πŸ‡ΆπŸ‡¦ 150.228.79.249
πŸ‡°πŸ‡· 125.143.240.134
πŸ‡°πŸ‡· 119.204.122.94
πŸ‡ΊπŸ‡Έ 66.132.195.40
πŸ‡ΈπŸ‡¬ 58.182.58.128
πŸ‡ΊπŸ‡Έ 2602:80d:1008::d2
πŸ‡ΊπŸ‡Έ 195.184.76.119
πŸ‡¨πŸ‡³ 171.114.231.5
πŸ‡°πŸ‡· 125.143.239.175
πŸ‡»πŸ‡³ 116.98.4.107
πŸ‡ΊπŸ‡Έ 108.4.221.83
πŸ‡¨πŸ‡¦ 99.237.255.49
πŸ‡·πŸ‡Ί 91.244.113.178
πŸ‡«πŸ‡· 91.231.89.171
πŸ‡ΉπŸ‡· 88.249.195.23
πŸ‡³πŸ‡± 45.148.10.152
πŸ‡¬πŸ‡§ 31.171.130.115
πŸ‡ΉπŸ‡Ό 210.61.216.167
πŸ‡ΉπŸ‡Ό 198.235.24.114