JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 185.23.17.21

185.23.17.21 was found in our database!

This IP was reported 114 times. Confidence of Abuse is 37%: ?

37%

ISP	TAYNET TEKNOLOJI TICARET LIMITED SIRKETI
Usage Type	Data Center/Web Hosting/Transit
ASN	AS211557
Hostname(s)	tr1.node.check-host.net
Domain Name	tay.net.tr
Country	🇹🇷 Turkey
City	Basaksehir, Istanbul

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 185.23.17.21

Whois 185.23.17.21

IP Abuse Reports for 185.23.17.21:

This IP address has been reported a total of 114 times from 45 distinct sources. 185.23.17.21 was first reported on February 26th 2025, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 pshost.pl	2026-07-11 15:52:01 (3 hours ago)	2026-07-11T15:52:01.027Z, an unauthorized access attempt was detected on port 22 (SSH) from source I ... show more 2026-07-11T15:52:01.027Z, an unauthorized access attempt was detected on port 22 (SSH) from source IP address 185.23.17.21. show less	Port Scan Brute-Force SSH
🇵🇱 sefinek.net	2026-06-30 11:32:58 (1 week ago)	Triggered Cloudflare WAF (firewallCustom) from TR. Action: BLOCK \| Protocol: HTTP/1.1 (GET) \| Endpoi ... show more Triggered Cloudflare WAF (firewallCustom) from TR. Action: BLOCK \| Protocol: HTTP/1.1 (GET) \| Endpoint: / \| UA: CheckHost (https://check-host.net/) • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇫🇷 MatStef132	2026-06-21 21:24:30 (2 weeks ago)	MatShield L7: blocked on mathost.eu (ua-quarantined)	Bad Web Bot
🇹🇷 SeczarSecureOps	2026-06-17 21:56:39 (3 weeks ago)	Auto-blocked by Seczar SecureOps — DNS Flood / Tunneling Suspected (41661 events in 5min) at 2026-06 ... show more Auto-blocked by Seczar SecureOps — DNS Flood / Tunneling Suspected (41661 events in 5min) at 2026-06-17 21:56 show less	Web App Attack
🇺🇸 Vano Ganzzz	2026-06-10 23:44:08 (1 month ago)	Triggered Cloudflare WAF (firewallCustom) from TR. Action taken: BLOCK ASN: 211557 (TAYNET TEKNOLOJI ... show more Triggered Cloudflare WAF (firewallCustom) from TR. Action taken: BLOCK ASN: 211557 (TAYNET TEKNOLOJI TICARET LIMITED SIRKETI) Protocol: HTTP/1.1 (GET method) Endpoint: / Timestamp: 2026-06-10T23:44:08Z Ray ID: a09c3e07ec51b652 UA: CheckHost (https://check-host.net/) show less	Bad Web Bot
🇷🇴 Fn4ticHz	2026-06-08 01:40:26 (1 month ago)	DDoS blocked via ZeroGuard.ID	DDoS Attack Exploited Host
🇨🇦 1gz	2026-06-05 00:39:14 (1 month ago)	Triggered Cloudflare WAF (firewallCustom) from TR. Action taken: CHALLENGE Protocol: HTTP/1.1 (GET m ... show more Triggered Cloudflare WAF (firewallCustom) from TR. Action taken: CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: / UA: CheckHost (https://check-host.net/) This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇪 on1x.cloud	2026-05-31 17:34:46 (1 month ago)	[on1x.cloud] SSH-Multi login Attempt	Brute-Force SSH
🇬🇧 anycast_ac	2026-05-30 19:29:10 (1 month ago)	[WebProtection] Scanner detected \| port:443 (1 requests) requestis	Port Scan Web App Attack
🇫🇷 MatStef132	2026-05-23 15:48:56 (1 month ago)	MatShield L7: blocked on mathost.eu (ua-quarantined)	Bad Web Bot
🇺🇸 COMPLEX	2026-05-21 15:48:14 (1 month ago)	Triggered Cloudflare WAF (firewallCustom) from TR. Action taken: BLOCK ASN: undefined (undefined) Pr ... show more Triggered Cloudflare WAF (firewallCustom) from TR. Action taken: BLOCK ASN: undefined (undefined) Protocol: HTTP/1.1 (GET method) Endpoint: / UA: CheckHost (https://check-host.net/) show less	Bad Web Bot
🇫🇷 MatStef132	2026-05-21 15:18:54 (1 month ago)	MatShield L7: blocked on mathost.eu (ua-quarantined)	Bad Web Bot
🇫🇷 MatStef132	2026-05-17 18:03:33 (1 month ago)	MatShield L7: blocked on mathost.eu (ua-quarantined)	Bad Web Bot
🇮🇩 hermawan	2026-04-27 10:33:48 (2 months ago)	[Mon Apr 27 15:54:13.087166 2026] [security2:error] [pid 162762:tid 140138449454784] [client 185.23. ... show more [Mon Apr 27 15:54:13.087166 2026] [security2:error] [pid 162762:tid 140138449454784] [client 185.23.17.21:49364] ModSecurity: Access denied with code 403 (phase 1). Match of "ipMatch 103.166.156.58" against "REMOTE_ADDR" required. [file "/etc/modsecurity/coreruleset-4.25.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "451"] [id "440006"] [msg "Connection Close Header"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: close found within REMOTE_ADDR: 185.23.17.21 request_line = GET / HTTP/1.1 Request URI RAW = / Request Basename = "] [hostname "staklim-jatim.bmkg.go.id"] [uri "/"] [unique_id "ae8kNbPok_EaCMgij7l0GwAAARg"], referer https://check-host.net/check-report/3e9ebd81k247 [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[162855] [8rQ3Qq29YwU] [ae8kNbPok_EaCMgij7l0GwAAARg] keep_alive=[0] [2026-04-27 15:54:13.087176] [R:ae8kNbPok_EaCMgij7l0GwAAARg] UA:'CheckHost (https://check-host.net/)' Host:'staklim-j ... show less	Email Spam Hacking
🇫🇷 GoodOldTOS	2026-04-24 18:42:04 (2 months ago)	Bad keywords detected in request: /wp-content/	Web App Attack

Showing 1 to 15 of 114 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 179.176.210.17

🇻🇳 171.244.37.103

🇺🇸 100.50.17.159

🇲🇽 187.190.159.15

🇨🇳 183.251.240.97

🇺🇸 172.253.83.90

🇸🇬 152.42.176.167

🇦🇷 131.196.82.161

🇨🇳 111.35.36.48

🇹🇷 95.70.219.40

🇸🇬 43.173.182.220

🇺🇸 20.40.216.95

🇳🇱 195.178.110.137

🇨🇳 183.196.233.198

🇧🇷 177.38.71.226

🇺🇸 172.253.192.22

🇺🇸 162.216.149.161

🇩🇿 154.246.12.119

🇭🇰 154.86.30.22

🇹🇼 111.70.23.251