JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 185.53.228.208

185.53.228.208 was found in our database!

This IP was reported 25 times. Confidence of Abuse is 40%: ?

40%

ISP	CJSC SAIMA TELECOM
Usage Type	Fixed Line ISP
ASN	AS29061
Hostname(s)	185-53-228-208.saimanet.kg
Domain Name	saimatelecom.kg
Country	🇰🇬 Kyrgyzstan
City	Bishkek, Bishkek

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 185.53.228.208

Whois 185.53.228.208

IP Abuse Reports for 185.53.228.208:

This IP address has been reported a total of 25 times from 18 distinct sources. 185.53.228.208 was first reported on October 6th 2024, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 EGP Abuse Dept	2026-06-07 09:58:03 (6 days ago)	Scraping webshop URLs (www.sanal.nl), likely botnet drone	Bad Web Bot Exploited Host
🇳🇱 soverin	2026-06-05 14:57:28 (1 week ago)	spam	Email Spam
🇨🇦 KIsmay	2026-06-01 14:31:58 (1 week ago)	Jun 1 07:31:55 ismay WPAudit[234543]: 185.53.228.208 ismay.ca "Mozilla/5.0 (Macintosh; Intel Mac OS ... show more Jun 1 07:31:55 ismay WPAudit[234543]: 185.53.228.208 ismay.ca "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" backupsystems:@KPEOr1dfghh54gh5fg$@ FAIL Jun 1 07:31:56 ismay WPAudit[234535]: 185.53.228.208 ismay.ca "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" root:Zb{0@U{vsFjq&#j(<?L[Iy0Hi_#9]i-LlJN0=Ec FAIL Jun 1 07:31:56 ismay WPAudit[234543]: 185.53.228.208 ismay.ca "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" matakucing3:Localhost@Root224 FAIL Jun 1 07:31:57 ismay WPAudit[234535]: 185.53.228.208 ismay.ca "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:118.0) Gecko/20100101 Firefox/118.0" datafastproxiespx01:x!py8e89hIP FAIL Jun 1 07:31:57 ismay WPAudit[234560]: 185.53.228.208 ismay.ca "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" wordp ... show less	Brute-Force Web App Attack
Anonymous	2026-05-30 04:02:06 (2 weeks ago)	Attack Signature Blocked: /wishlist/index/add/product/11580/form_key/LQYZ3yX8l7M9ylx5/xwzx/gsxw/2025 ... show more Attack Signature Blocked: /wishlist/index/add/product/11580/form_key/LQYZ3yX8l7M9ylx5/xwzx/gsxw/202509/W020250919544745556705.png \| UA: Opera/9.85.(Windows 98; pap-AN) Presto/2.9.166 Version/12.00 \| (Magento Site) (Botnet activity attributed to: Angara ... show less	Web App Attack Bad Web Bot
🇨🇭 Origon	2026-05-25 08:03:49 (2 weeks ago)	NOQUEUE - IP: 185.53.228.208 - May 25 10:03:48 plesk postfix/smtpd[981172]: NOQUEUE: reject: RCPT f ... show more NOQUEUE - IP: 185.53.228.208 - May 25 10:03:48 plesk postfix/smtpd[981172]: NOQUEUE: reject: RCPT from unknown[185.53.228.208]: 554 5.7.1 Service unavailable; Client host [185.53.228.208] blocked using dnsbl-1.uceprotect.net; IP 185.53.228.208 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=185.53.228.208; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<[185.53.228.208]> show less	Email Spam
🇬🇧 djboddington	2026-05-21 04:03:47 (3 weeks ago)	This IP was detected by CrowdSec triggering crowdsecurity/postscreen-rbl	Email Spam
🇸🇪 triplecode	2026-05-21 04:01:54 (3 weeks ago)	Reported from hMailServer	Email Spam
🇺🇸 TPI-Abuse	2026-04-18 03:54:03 (1 month ago)	(mod_security) mod_security (id:217210) triggered by 185.53.228.208 (185-53-228-208.saimanet.kg): 1 ... show more (mod_security) mod_security (id:217210) triggered by 185.53.228.208 (185-53-228-208.saimanet.kg): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 17 23:53:58.530365 2026] [security2:error] [pid 3054068:tid 3054068] [client 185.53.228.208:5288] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?i:(?:[a-z]{3,10}\\\\s+(?:\\\\w{3,7}?://[\\\\w\\\\-\\\\./](?::\\\\d+)?)?/[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S])?\|connect (?:\\\\d{1,3}\\\\.){3}\\\\d{1,3}\\\\.?(?::\\\\d+)?\|options \\\\)\\\\s+[\\\\w\\\\./]+\|get /[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "114"] [id "217210"] [rev "1"] [msg "COMODO WAF: Invalid HTTP Request Line\|\|usa61yets.shop\|F\|4"] [data "GET http://usa61yets.shop HTTP/1.1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "usa61yets.shop"] [uri "/"] [unique_id "aeMAVr8O8f1GK5hOjuN8swAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Roderic	2026-04-16 10:34:31 (1 month ago)	(apache_scanners-2) Failed apache-scanners trigger with match [redacted])	Port Scan
🇨🇦 polycoda	2026-04-06 12:00:30 (2 months ago)	🥶 Part of massive botnet scraping campaign that nearly turned into a DDoS on 2025-11-27	DDoS Attack
🇳🇱 maxxsense	2026-02-03 20:57:10 (4 months ago)	185.53.228.208 (KG/Kyrgyzstan/185-53-228-208.saimanet.kg), 12 distributed imapd attacks on account [ ... show more 185.53.228.208 (KG/Kyrgyzstan/185-53-228-208.saimanet.kg), 12 distributed imapd attacks on account [redacted] show less	Brute-Force
🇺🇸 drewf.ink	2026-01-17 09:48:16 (4 months ago)	[09:48] Attempted telnet login on port 23 with username 666666	Brute-Force Exploited Host
🇺🇸 RAP	2026-01-17 08:50:38 (4 months ago)	2026-01-17 08:50:38 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
Anonymous	2026-01-14 02:33:40 (4 months ago)	Unauthorized connection attempt on Port 2323	Port Scan Hacking Exploited Host
🇺🇸 TPI-Abuse	2025-12-10 14:52:11 (6 months ago)	"Participant in large-scale DDoS Attack in which data injection was attmpted to gain unauthorized ac ... show more "Participant in large-scale DDoS Attack in which data injection was attmpted to gain unauthorized access" show less	DDoS Attack SQL Injection Exploited Host

Showing 1 to 15 of 25 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 204.152.193.100

🇺🇸 166.88.64.8

🇮🇳 152.52.15.213

🇯🇵 124.18.182.99

🇪🇸 104.143.244.54

🇺🇸 86.111.176.100

🇨🇦 82.26.190.41

🇺🇸 65.49.1.232

🇺🇸 45.3.51.127

🇫🇷 13.140.175.68

🇨🇳 222.223.177.118

🇺🇸 162.216.150.6

🇰🇷 114.202.253.7

🇰🇷 112.184.40.215

🇹🇼 111.70.49.185

🇰🇿 95.59.142.69

🇨🇦 85.217.149.14

🇫🇷 82.102.18.126

🇨🇳 58.47.19.22

🇧🇷 45.164.251.106