JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 85.203.20.101

85.203.20.101 was found in our database!

This IP was reported 118 times. Confidence of Abuse is 18%: ?

18%

ISP	Falco Networks B.V.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Domain Name	falco-networks.com
Country	🇭🇷 Croatia
City	Zagreb, Zagreb

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 85.203.20.101

Whois 85.203.20.101

IP Abuse Reports for 85.203.20.101:

This IP address has been reported a total of 118 times from 38 distinct sources. 85.203.20.101 was first reported on February 21st 2021, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 masterguru	2026-10-11 17:46:51 (1 week ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-122) show less	Bad Web Bot
Anonymous	2026-10-04 07:28:21 (2 weeks ago)	Banned by Fail2Ban on server	Web App Attack
🇺🇸 masterguru	2026-10-04 06:49:46 (2 weeks ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:user-agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:user-agent. (1100000-147) show less	Bad Web Bot
🇨🇭 backslash	2026-10-04 04:51:00 (2 weeks ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇮🇹 VHosting	2026-06-29 14:40:08 (3 months ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇯🇵 demonsword	2026-06-05 10:55:13 (4 months ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: account.jetbrains.com:443 show less	Open Proxy Port Scan
🇬🇧 pinguin	2026-02-18 18:20:49 (8 months ago)	Triggered Cloudflare WAF (firewallManaged) from HR. Action taken: LOG Protocol: HTTP/2 (HEAD method) ... show more Triggered Cloudflare WAF (firewallManaged) from HR. Action taken: LOG Protocol: HTTP/2 (HEAD method) Endpoint: /restore/directory.tar.gz UA: Empty string This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 Penny Packer	2026-02-16 05:03:29 (8 months ago)	Fail2Ban apache-tripwires	Web App Attack
🇺🇸 TPI-Abuse	2026-02-12 10:05:08 (8 months ago)	(mod_security) mod_security (id:210730) triggered by 85.203.20.101 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 85.203.20.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 05:05:01.813536 2026] [security2:error] [pid 22427:tid 22427] [client 85.203.20.101:32915] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.domainexecs.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.domainexecs.com"] [uri "/bak/dump.sql"] [unique_id "aY2lzX-uzVolAt4tWPGGQgAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 Axel	2026-02-10 20:28:05 (8 months ago)	Blocked by ModSecurity. Rule ID: 210492 Message: None Phase: 1 Severity: CRITICAL URI: /backup/sftp- ... show more Blocked by ModSecurity. Rule ID: 210492 Message: None Phase: 1 Severity: CRITICAL URI: /backup/sftp-config.json show less	Hacking SQL Injection Web App Attack
🇫🇷 dynamix	2026-02-05 23:28:27 (8 months ago)	Multiple WAF Violations	Web App Attack
Anonymous	2026-02-05 15:06:48 (8 months ago)	85.203.20.101 - - [05/Feb/2026:15:06:47 +0000] "GET /wp-includes/css/dist/ HTTP/1.1" 302 469 "-" "Mo ... show more 85.203.20.101 - - [05/Feb/2026:15:06:47 +0000] "GET /wp-includes/css/dist/ HTTP/1.1" 302 469 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" ... show less	Bad Web Bot Web App Attack
Anonymous	2026-02-05 13:05:29 (8 months ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: HR, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: HR, Attack patterns: WordPress scanning, Webshell probing, Backup file probing show less	Bad Web Bot Web App Attack
Anonymous	2026-02-04 12:03:19 (8 months ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: HR, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: HR, Attack patterns: WordPress scanning, Webshell probing, Backup file probing show less	Bad Web Bot Web App Attack
🇳🇿 Antinson	2026-02-04 08:43:04 (8 months ago)	Scraping with a high error ratio and request rate Requests to unauthorized or suspicious endpoints ( ... show more Scraping with a high error ratio and request rate Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.) show less	Bad Web Bot

Showing 1 to 15 of 118 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 221.120.77.34

🇦🇷 190.244.24.186

🇨🇳 132.232.242.146

🇨🇳 119.29.154.86

🇧🇩 118.179.89.225

🇨🇳 101.43.35.241

🇨🇦 85.217.149.14

🇨🇳 58.47.137.190

🇮🇪 54.246.5.197

🇲🇱 41.73.110.241

🇸🇬 165.154.193.219

🇩🇪 152.53.180.226

🇺🇸 152.39.233.231

🇨🇳 125.88.160.13

🇨🇳 124.67.120.106

🇨🇳 120.55.163.64

🇨🇳 113.222.22.166

🇺🇸 107.180.212.169

🇵🇰 103.149.241.10

🇺🇦 91.221.6.210