JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 85.203.21.217

85.203.21.217 was found in our database!

This IP was reported 558 times. Confidence of Abuse is 80%: ?

80%

ISP	VPN Consumer Network
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	falco-networks.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 85.203.21.217

Whois 85.203.21.217

IP Abuse Reports for 85.203.21.217:

This IP address has been reported a total of 558 times from 170 distinct sources. 85.203.21.217 was first reported on August 2nd 2023, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 consul.to	2026-06-30 21:23:22 (1 day ago)	Web attack/malicious scanning detected	Web App Attack
🇫🇷 masterguru	2026-06-30 16:36:47 (1 day ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-195) show less	Bad Web Bot
🇳🇱 Site.eu	2026-06-29 22:18:08 (2 days ago)	Excessive multi-domain requests	Brute-Force
🇩🇪 todix	2026-06-29 14:44:39 (2 days ago)	WebAttack or semilar from 85.203.21.217	Web App Attack
🇩🇪 LRob	2026-06-24 00:00:59 (1 week ago)	Repeated 403 errors, blocked by Fail2ban in custom-403 jail	Bad Web Bot
Anonymous	2026-06-23 17:34:59 (1 week ago)	Multiple, malicious web requests detected	Port Scan Hacking
🇩🇪 paissangroup	2026-06-22 22:08:06 (1 week ago)	Multiple WAF Violations	Web App Attack
🇩🇪 FeG Deutschland	2026-06-21 09:44:07 (1 week ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 24	Exploited Host Web App Attack
🇺🇸 TAY	2026-06-21 02:12:03 (1 week ago)	85.203.21.217 - - [21/Jun/2026:10:11:15 +0800] "GET /wp-content/uploads/wp-config.php HTTP/1.1" 301 ... show more 85.203.21.217 - - [21/Jun/2026:10:11:15 +0800] "GET /wp-content/uploads/wp-config.php HTTP/1.1" 301 497 "-" "Go-http-client/1.1" 85.203.21.217 - - [21/Jun/2026:10:11:16 +0800] "GET /wp-includes/js/wp-config.php HTTP/1.1" 301 489 "-" "Go-http-client/1.1" 85.203.21.217 - - [21/Jun/2026:10:12:02 +0800] "GET /wp-includes/images/wp-config.php HTTP/1.1" 301 497 "-" "Go-http-client/1.1" ... show less	Brute-Force
🇺🇸 TPI-Abuse	2026-06-20 22:05:51 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 85.203.21.217 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 85.203.21.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 20 18:05:44.202265 2026] [security2:error] [pid 11895:tid 11895] [client 85.203.21.217:42383] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aaattanasio.com"] [uri "/wp-includes/images/wp-config.php"] [unique_id "ajcOuO83dwCl24J0tG4TGwAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-20 14:09:31 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 85.203.21.217 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 85.203.21.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 20 10:09:27.733923 2026] [security2:error] [pid 7184:tid 7184] [client 85.203.21.217:36957] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.fishleadership.org"] [uri "/wp-includes/js/wp-config.php"] [unique_id "ajafFweBmThWdjuNGAE6_QAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ghostwarriors	2026-06-20 08:20:22 (1 week ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-19 11:54:17 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 85.203.21.217 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 85.203.21.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 07:54:13.692858 2026] [security2:error] [pid 17974:tid 18042] [client 85.203.21.217:46405] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "trulyoriginalpurpleoctopus.art"] [uri "/wp-includes/images/wp-config.php"] [unique_id "ajUt5aRNopppKH5XmnfmXQAAAIo"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-19 05:20:44 (1 week ago)	Multiple, malicious web requests detected	Port Scan Hacking
🇩🇪 ghostwarriors	2026-06-19 01:50:43 (1 week ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 558 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 173.194.103.172

🇸🇬 165.22.243.84

🇫🇷 91.196.152.233

🇮🇶 65.20.167.160

🇺🇸 50.6.248.168

🇺🇸 216.180.246.35

🇧🇪 207.175.13.230

🇺🇸 172.86.114.38

🇨🇦 165.22.239.110

🇳🇱 165.22.196.222

🇺🇸 165.22.190.43

🇭🇰 152.32.215.224

🇸🇬 94.231.206.3

🇩🇪 88.214.25.124

🇧🇬 79.124.62.134

🇺🇸 71.234.146.182

🇺🇸 64.62.197.95

🇮🇶 62.201.228.210

🇧🇪 34.156.124.227

🇨🇳 8.134.183.46