AbuseIPDB » 85.203.21.34

85.203.21.34 was found in our database!

This IP was reported 223 times. Confidence of Abuse is 40%: ?

40%

ISP	VPN Consumer Network
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	falco-networks.com
Country	Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 85.203.21.34

Whois 85.203.21.34

IP Abuse Reports for 85.203.21.34:

This IP address has been reported a total of 223 times from 88 distinct sources. 85.203.21.34 was first reported on April 1st 2023, and the most recent report was 4 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 4 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
rtbh.com.tr	2025-03-27 20:48:32 (4 weeks ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
rtbh.com.tr	2025-03-26 20:48:34 (1 month ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
dynamix	2025-03-26 07:38:03 (1 month ago)	Multiple WAF Violations	Web App Attack
ghostwarriors	2025-03-25 23:50:23 (1 month ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
ps-center	2025-03-25 23:46:09 (1 month ago)	MYH: Web Attack GET /wp-content/plugins/Core-Econ/upH.php	Web Spam Hacking Bad Web Bot Web App Attack
paulshipley.com.au	2025-03-25 11:35:25 (1 month ago)	furst.com.au:443 85.203.21.34 - - [25/Mar/2025:22:34:01 +1100] "GET /s.php HTTP/1.1" 404 77789 "http ... show morefurst.com.au:443 85.203.21.34 - - [25/Mar/2025:22:34:01 +1100] "GET /s.php HTTP/1.1" 404 77789 "http://furst.com.au/s.php" "Go-http-client/1.1" furst.com.au:443 85.203.21.34 - - [25/Mar/2025:22:34:03 +1100] "GET /hehehehe.php HTTP/1.1" 404 74468 "http://furst.com.au/hehehehe.php" "Go-http-client/1.1" furst.com.au:443 85.203.21.34 - - [25/Mar/2025:22:34:05 +1100] "GET /wp-includes/wp-login.php HTTP/1.1" 403 620 "http://furst.com.au/wp-includes/wp-login.php" "Go-http-client/1.1" furst.com.au:443 85.203.21.34 - - [25/Mar/2025:22:34:06 +1100] "GET /cgi-bin/wp-login.php HTTP/1.1" 404 74486 "http://furst.com.au/cgi-bin/wp-login.php" "Go-http-client/1.1" furst.com.au:443 85.203.21.34 - - [25/Mar/2025:22:34:09 +1100] "GET /xmlrpc.php HTTP/1.1" 403 620 "http://furst.com.au/xmlrpc.php" "Go-http-client/1.1" furst.com.au:443 85.203.21.34 - - [25/Mar/2025:22:34:11 +1100] "GET /.well-known/acme-challenge/ HTTP/1.1" 404 74510 "https://furst.com.au/.well-known/acme-challenge/index.php" "Go-http-client ... show less	Web App Attack
LRob.fr	2025-03-25 02:30:06 (1 month ago)	Repeated 403 errors, blocked by Fail2ban in custom-403 jail	Bad Web Bot
Bedios GmbH	2025-03-24 23:03:41 (1 month ago)	Wordpress hacking attempt	Web App Attack
DrLex0	2025-03-19 12:11:33 (1 month ago)	Distributed attack from 85.203.21.0/24 network, poking for PHP junk 85.203.21.34 80 - [ ... show moreDistributed attack from 85.203.21.0/24 network, poking for PHP junk 85.203.21.34 80 - [19/Mar/2025:12:03:24 +0000] "GET /moon.php HTTP/1.1" 403 435 "-" "Go-http-client/1.1" 85.203.21.34 80 - [19/Mar/2025:12:06:34 +0000] "GET /wp-admin/about.php HTTP/1.1" 403 435 "-" "Go-http-client/1.1" 85.203.21.34 80 - [19/Mar/2025:12:06:41 +0000] "GET /xl2023.php HTTP/1.1" 403 435 "-" "Go-http-client/1.1" 85.203.21.34 80 - [19/Mar/2025:12:10:18 +0000] "GET /wso112233.php HTTP/1.1" 403 435 "-" "Go-http-client/1.1" 85.203.21.34 80 - [19/Mar/2025:12:11:33 +0000] "GET /wp-content/plugins/anttt/simple.php HTTP/1.1" 403 435 "-" "Go-http-client/1.1" show less	DDoS Attack Brute-Force Bad Web Bot Web App Attack
uhlhosting	2025-03-18 11:26:40 (1 month ago)	africanbushdoctorz.com 85.203.21.34 - - [18/Mar/2025:12:26:38.253480 +0100] "GET /wp-content/plugins ... show moreafricanbushdoctorz.com 85.203.21.34 - - [18/Mar/2025:12:26:38.253480 +0100] "GET /wp-content/plugins/helloapx/wp-apxupx.php?apx=upx HTTP/1.1" 403 199 "-" "-" Z9lYbr_LaROrJZtjft7-FQAAAIs "-" /apache/20250318/20250318-1226/20250318-122638-Z9lYbr_LaROrJZtjft7-FQAAAIs 0 1679 md5:a76f39016e5478c0b77f3346e8ea604b africanbushdoctorz.com 85.203.21.34 - - [18/Mar/2025:12:26:38.516942 +0100] "GET /wp-content/themes/about.php HTTP/1.1" 403 199 "-" "-" Z9lYbr_LaROrJZtjft7-FgAAAI4 "-" /apache/20250318/20250318-1226/20250318-122638-Z9lYbr_LaROrJZtjft7-FgAAAI4 0 1644 md5:a9339a1d0e653da12639f11d33a280fb africanbushdoctorz.com 85.203.21.34 - - [18/Mar/2025:12:26:38.848984 +0100] "GET /shell20211028.php HTTP/1.1" 403 199 "-" "-" Z9lYbr_LaROrJZtjft7-GAAAAIA "-" /apache/20250318/20250318-1226/20250318-122638-Z9lYbr_LaROrJZtjft7-GAAAAIA 0 1623 md5:2a118f98f09c0506057379dcf17044d5 africanbushdoctorz.com 85.203.21.34 - - [18/Mar/2025:12:26:39.148710 +0100] "GET /wp-includes/images/about.php HTTP/1.1" 403 ... show less	DDoS Attack Brute-Force
Anonymous	2025-03-17 07:45:36 (1 month ago)	Excessive crawling/scraping	Hacking Brute-Force
Lemmy	2025-03-16 23:35:15 (1 month ago)	apache-noscript	Web App Attack
zynex	2025-03-16 22:45:02 (1 month ago)	URL Probing: /wp-content/uploads/wpr-addons/forms/b1ack.php	Web App Attack
spyra.rocks	2025-03-16 15:00:04 (1 month ago)	WordPress	Web App Attack
backslash	2025-03-16 06:55:07 (1 month ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩