85.203.20.97

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
47% Elevated
115 reports
36 reporters · latest 1 week ago
ISP
Falco Networks B.V.
Usage Type
Data Center/Web Hosting/Transit
ASN
AS212238
Domain Name
falco-networks.com
Country
🇭🇷 Croatia
City
Zagreb, Zagreb
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
115 from 36 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 3 🇳🇱 Netherlands 3 🇫🇷 France 2
Most common categories Web App Attack 9 Brute-Force 5 Bad Web Bot 4 Hacking 1 SQL Injection 1
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
Anonymous
WEB attack
Brute-Force
🇫🇷 SpaceHost-Server
Brute-Force Web App Attack
🇫🇷 SpaceHost-Server
Brute-Force Web App Attack
🇩🇪 macrob
Web App Attack
🇩🇪 EGP Abuse Dept
Scanning for web/db/file exploits on www.dry-bag.nl
SQL Injection Bad Web Bot Web App Attack
🇳🇱 Mangelot Hosting
(web_webshell) srv102 Webshell probe 85.203.20.97 (HR/Croatia/-): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
Web App Attack
🇳🇱 BlueWire Hosting
Bad bot ignoring robot.txt
Bad Web Bot
🇮🇹 VHosting
Detected WordPress attack from different servers
Brute-Force Web App Attack
🇳🇱 Alt255
[ti-07al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 85.203.20.97 - - [28/Oct/2026:12:24:19 +0100] "GET /wp-content/plugins/buddypress/alfa.php HTTP/1.1" 403 463 "-" "Go-http-client/1.1" ...
Bad Web Bot Web App Attack
🇮🇹 LTM
WebServer - Attempts to exploit
Hacking Brute-Force Web App Attack
🇩🇪 Bedios GmbH
Wordpress hacking attempt
Web App Attack
🇨🇭 backslash
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇯🇵 demonsword
Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: www.expressapisv2.net:443
Open Proxy Port Scan
🇬🇧 pinguin
Triggered Cloudflare WAF (firewallManaged) from HR. Action taken: LOG Protocol: HTTP/2 (HEAD method) Endpoint: /restore/wallet.dat UA: Empty string This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
Bad Web Bot
Anonymous
wordpress-trap
Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇬🇧 194.147.120.243
🇨🇦 137.184.162.54
🇳🇱 93.123.109.80
🇬🇫 92.142.91.144
🇨🇭 62.167.86.73
🇮🇳 52.66.116.112
🇨🇳 14.103.118.197
🇳🇱 5.182.209.126
🇺🇸 209.207.190.28
🇺🇸 199.165.159.65
🇺🇸 199.165.159.57
🇺🇸 195.184.76.106
🇦🇷 190.122.196.84
🇦🇷 181.90.186.232
🇺🇸 87.56.23.43
🇺🇸 72.215.46.210
feedback