JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 85.203.47.101

85.203.47.101 was found in our database!

This IP was reported 80 times. Confidence of Abuse is 0%: ?

ISP	Falco Networks B.V.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS42708
Domain Name	falco-networks.com
Country	🇩🇰 Denmark
City	Copenhagen, Capital Region

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 85.203.47.101

Whois 85.203.47.101

IP Abuse Reports for 85.203.47.101:

This IP address has been reported a total of 80 times from 37 distinct sources. 85.203.47.101 was first reported on July 23rd 2023, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 Origon	2026-07-01 04:41:36 (2 months ago)	http-wordpress-scan - IP: 85.203.47.101 - time="2026-07-01T06:41:36+02:00" level=info msg="(555f66b ... show more http-wordpress-scan - IP: 85.203.47.101 - time="2026-07-01T06:41:36+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-wordpress-scan by ip 85.203.47.101 (DK/42708) : 4h ban on Ip 85.203.47.101" module=db show less	Web App Attack
🇩🇪 Viveronese	2026-06-09 15:11:28 (3 months ago)	HTTP vulnerability scanning	Web App Attack
🇮🇹 VHosting	2026-06-07 13:10:03 (3 months ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-05-02 13:04:11 (4 months ago)	(mod_security) mod_security (id:240000) triggered by 85.203.47.101 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240000) triggered by 85.203.47.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 02 09:03:58.398125 2026] [security2:error] [pid 31426:tid 31426] [client 85.203.47.101:0] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|uwsvita.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "uwsvita.org"] [uri "/images/stories/themes.php"] [unique_id "afX2Poi25EEsjvVyMtjZsAAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-04-28 08:03:20 (4 months ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: DK, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: DK, Attack patterns: WordPress scanning, Webshell probing, Backup file probing show less	Bad Web Bot Web App Attack
Anonymous	2026-04-27 07:03:45 (4 months ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: DK, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: DK, Attack patterns: WordPress scanning, Webshell probing, Backup file probing show less	Bad Web Bot Web App Attack
🇺🇦 URAN Publishing Service	2026-04-26 17:05:54 (4 months ago)	85.203.47.101 - - [26/Apr/2026:20:05:53 +0300] "GET /wp-content/plugins/autoload_classmap.php HTTP/1 ... show more 85.203.47.101 - - [26/Apr/2026:20:05:53 +0300] "GET /wp-content/plugins/autoload_classmap.php HTTP/1.1" 404 707 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 85.203.47.101 - - [26/Apr/2026:20:05:53 +0300] "GET /wp-admin/css/colors/ocean/about.php HTTP/1.1" 404 707 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" ... show less	Web App Attack
🇺🇸 Sylvyon	2026-03-16 22:00:03 (5 months ago)	Triggered Cloudflare WAF (firewallCustom) from DK. Action: BLOCK \| Protocol: HTTP/2 (GET) \| Endpoint ... show more Triggered Cloudflare WAF (firewallCustom) from DK. Action: BLOCK \| Protocol: HTTP/2 (GET) \| Endpoint: / \| UA: Empty string • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇫🇮 Shaik Sai Meera	2026-02-10 09:00:19 (7 months ago)	IM360 WAF: Infectors: Suspicious access attempt (webshell)	FTP Brute-Force Open Proxy Brute-Force
🇺🇸 Penny Packer	2026-02-06 10:25:30 (7 months ago)	Fail2Ban apache-tripwires	Web App Attack
🇩🇪 iRaphi05	2026-02-03 02:12:14 (7 months ago)	Honeypot detection: GET request on /agc \| User-Agent: python-requests/2.32.5	Hacking Web App Attack
🇩🇪 ValtonTahiri	2026-01-30 15:16:15 (7 months ago)	Honeypot hit: HTTP GET http://[SOME-IP]/ URL: http://[SOME-IP]/ Method: GET Status: 200 User-agent: ... show more Honeypot hit: HTTP GET http://[SOME-IP]/ URL: http://[SOME-IP]/ Method: GET Status: 200 User-agent: python-requests/2.32.5 Host: [SOME-IP] Accept: / Other Headers: accept-encoding: gzip, deflate, zstd, connection: keep-alive show less	Hacking Bad Web Bot
🇧🇪 cmbplf	2026-01-29 08:24:44 (7 months ago)	202 requests with url.path /.well-known/pki-validation/.php	Brute-Force Bad Web Bot
Anonymous	2026-01-29 00:28:40 (7 months ago)	wordpress-trap	Web App Attack
🇺🇸 Penny Packer	2026-01-08 13:52:59 (8 months ago)	Fail2Ban apache-tripwires	Web App Attack

Showing 1 to 15 of 80 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2400:cb00:1273:1000:6915:b898:1cbc:9db1

🇿🇦 102.212.64.41

🇷🇺 94.243.10.240

🇺🇸 74.125.231.138

🇺🇸 72.28.247.77

🇺🇸 66.181.46.22

🇺🇸 66.132.172.234

🇬🇷 62.38.20.61

🇭🇰 45.207.209.16

🇫🇷 37.66.150.94

🇺🇸 35.169.206.177

🇺🇸 2.25.104.58

🇨🇳 221.195.114.14

🇩🇪 213.209.159.236

🇮🇩 210.87.97.90

🇪🇨 200.105.235.236

🇬🇧 185.247.137.220

🇺🇸 164.92.89.19

🇨🇦 144.217.243.186

🇰🇷 118.33.119.34