JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 85.203.47.71

85.203.47.71 was found in our database!

This IP was reported 81 times. Confidence of Abuse is 42%: ?

42%

ISP	Falco Networks B.V.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS42708
Domain Name	falco-networks.com
Country	🇩🇰 Denmark
City	Copenhagen, Capital Region

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 85.203.47.71

Whois 85.203.47.71

IP Abuse Reports for 85.203.47.71:

This IP address has been reported a total of 81 times from 41 distinct sources. 85.203.47.71 was first reported on February 5th 2024, and the most recent report was 22 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 Inartis	2026-06-08 23:06:11 (22 hours ago)	[Tue Jun 09 01:06:04.944920 2026] [autoindex:error] [pid 487437:tid 487437] [client 85.203.47.71:447 ... show more [Tue Jun 09 01:06:04.944920 2026] [autoindex:error] [pid 487437:tid 487437] [client 85.203.47.71:44751] AH01276: Cannot serve directory /home/alfonsopluchinotta.it/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.php4,index.php5,index.htm,index.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.alfonsopluchinotta.it/wp-includes/IXR/index.php [Tue Jun 09 01:06:07.719927 2026] [autoindex:error] [pid 487437:tid 487437] [client 85.203.47.71:44751] AH01276: Cannot serve directory /home/alfonsopluchinotta.it/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.php4,index.php5,index.htm,index.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.alfonsopluchinotta.it/wp-includes/ID3/index.php [Tue Jun 09 01:06:10.218651 2026] [autoindex:error] [pid 487437:tid 487437] [client 85.203.47.71:44751] AH01276: Cannot serve directory /home/alfonsopluchinot ... show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 clamehost.it	2026-06-08 16:01:08 (1 day ago)	Automatic report - Brute Force attack using this IP address	Brute-Force
🇪🇸 pipeline.es	2026-06-08 09:22:39 (1 day ago)	Web scanning / probing for vulnerable paths \| URL: /vendor/phpunit/phpunit/src/Util/PHP/ \| Evidence: ... show more Web scanning / probing for vulnerable paths \| URL: /vendor/phpunit/phpunit/src/Util/PHP/ \| Evidence: www.enriquearias.com 85.203.47.71 - - [08/Jun/2026:11:21:37 +0200] \"GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1\" 404 234 \"-\" \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36\" GEOIP_COUNTRY_CODE=DK \| ASN: Glesys AB \| Country: DK show less	Port Scan Web App Attack
🇫🇷 Octopuce	2026-06-07 22:47:46 (1 day ago)	Aggressive web search of vulnerable pages: /wp-includes/assets/ /wp-includes/fonts/ /autoload_classm ... show more Aggressive web search of vulnerable pages: /wp-includes/assets/ /wp-includes/fonts/ /autoload_classmap/ /wp-content/themes/tflow/ /templates/be ... show less	Web App Attack
🇬🇧 consul.to	2026-06-07 19:53:06 (2 days ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 mc4bbs	2026-05-19 20:02:54 (3 weeks ago)	Automated Apache detection on Windows host. 5 suspicious HTTP requests within 300 seconds. Examples: ... show more Automated Apache detection on Windows host. 5 suspicious HTTP requests within 300 seconds. Examples: GET /.env.save -> 404 UA=""; GET /wp-content/plugins/jetpack/_inc/genericons/genericons/example.html -> 404 UA=""; GET /utilities/v1/swagger.yaml -> 404 UA=""; GET /utilities/api/v1/swagger.yaml -> 404 UA=""; GET /utilities/api/apidocs/swagger.yaml -> 404 UA="" show less	Web App Attack Hacking
🇷🇺 sms.ru	2026-04-20 11:01:14 (1 month ago)	/wp-admin/maint/index.php	Web App Attack
🇳🇱 Mangelot Hosting	2026-04-17 05:56:42 (1 month ago)	(php_susp_dir) srv102 PHP in suspicious dir 85.203.47.71 (DK/Denmark/-): 1 in the last 3600 secs; Po ... show more (php_susp_dir) srv102 PHP in suspicious dir 85.203.47.71 (DK/Denmark/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇬🇧 consul.to	2026-04-17 03:44:37 (1 month ago)	Web attack/malicious scanning detected	Web App Attack
🇫🇷 dynamix	2026-04-17 01:43:56 (1 month ago)	Multiple WAF Violations	Web App Attack
🇫🇷 dynamix	2026-02-23 20:54:12 (3 months ago)	Multiple WAF Violations	Web App Attack
Anonymous	2026-02-23 19:11:12 (3 months ago)	[redacted] 85.203.47.71 - - [23/Feb/2026:20:11:07 +0100] "GET /wp-admin/css/colors/blue/alfa.php HTT ... show more [redacted] 85.203.47.71 - - [23/Feb/2026:20:11:07 +0100] "GET /wp-admin/css/colors/blue/alfa.php HTTP/1.1" 404 236 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" [redacted] 85.203.47.71 - - [23/Feb/2026:20:11:09 +0100] "GET /wp-admin/images/chosen.php HTTP/1.1" 404 236 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" [redacted] 85.203.47.71 - - [23/Feb/2026:20:11:09 +0100] "GET /wp-admin/css/colors/gold.php HTTP/1.1" 404 236 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" [redacted] 85.203.47.71 - - [23/Feb/2026:20:11:10 +0100] "GET /wp-admin/css/chosen.php HTTP/1.1" 404 236 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" [redacted] 85.203.47.71 - - [23/Feb/2026:20:11:10 +0100] "GET /bitrix/admin/htmleditor2/natural.php HTTP/1.1" 404 236 ... show less	Hacking Web App Attack
🇪🇸 gnom4ik	2026-02-21 01:16:11 (3 months ago)	ban-reviewer auto report; ip=85.203.47.71; scenario=http:scan; verdict=valid_ban; confidence=0.85; c ... show more ban-reviewer auto report; ip=85.203.47.71; scenario=http:scan; verdict=valid_ban; confidence=0.85; categories=14; active_decisions=1; lookback_decisions=1; nginx_requests=0; appsec_matches=0; auth_events=0; kernel_events=0; signals=IP flagged for 'Port Scan' (category 14) in abuseipdb context; Decision is a ban for 'http:scan' scenario; IP has no active decisions in lookback window but was flagged recently show less	Port Scan
🇨🇭 backslash	2026-02-20 21:03:01 (3 months ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇩🇪 SCHAPPY	2026-02-20 19:16:58 (3 months ago)	Brute-force attack to identify web exploits	Brute-Force Web App Attack

Showing 1 to 15 of 81 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 176.65.139.130

🇩🇪 164.92.161.148

🇺🇸 107.172.50.134

🇫🇷 2001:41d0:303:2b94::1

🇨🇳 223.247.46.11

🇩🇪 212.80.7.172

🇺🇸 174.235.184.215

🇺🇸 170.130.204.90

🇨🇳 124.234.200.200

🇰🇷 112.216.129.27

🇺🇸 107.0.200.227

🇨🇳 106.13.44.224

🇺🇸 49.51.204.105

🇨🇳 36.151.143.49

🇺🇸 216.180.246.65

🇩🇪 213.209.159.236

🇲🇽 200.68.185.172

🇺🇸 159.89.83.66

🇸🇪 158.174.210.161

🇺🇸 135.237.126.84