AbuseIPDB » 85.203.21.53

85.203.21.53 was found in our database!

This IP was reported 220 times. Confidence of Abuse is 45%: ?

45%

ISP	VPN Consumer Network
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	falco-networks.com
Country	Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 85.203.21.53

Whois 85.203.21.53

IP Abuse Reports for 85.203.21.53:

This IP address has been reported a total of 220 times from 92 distinct sources. 85.203.21.53 was first reported on February 28th 2022, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
etu brutus	2025-04-09 14:47:50 (2 weeks ago)	85.203.21.53 has been banned for [WebApp Attack] ...	Hacking Bad Web Bot Web App Attack
rtbh.com.tr	2025-03-27 20:48:32 (4 weeks ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
rtbh.com.tr	2025-03-26 20:48:34 (1 month ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
ghostwarriors	2025-03-25 23:50:18 (1 month ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
ps-center	2025-03-25 23:38:06 (1 month ago)	MYH: Web Attack GET /wp-admin/css/colors/coffee/index.php	Web Spam Hacking Bad Web Bot Web App Attack
rdpguard.com	2025-03-25 10:26:31 (1 month ago)	RdpGuard detected brute-force attempt on HTTP	Brute-Force
Bedios GmbH	2025-03-24 23:05:00 (1 month ago)	Wordpress hacking attempt	Web App Attack
rtbh.com.tr	2025-03-19 20:48:46 (1 month ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
ipblock.com	2025-03-19 17:41:00 (1 month ago)	IPBlock protected site ID [4678-sl]. Exploit request, vulnerability scanner.	Hacking Bad Web Bot Web App Attack
DrLex0	2025-03-19 12:04:17 (1 month ago)	Distributed attack from 85.203.21.0/24 network, poking for PHP junk 85.203.21.53 80 - [ ... show moreDistributed attack from 85.203.21.0/24 network, poking for PHP junk 85.203.21.53 80 - [19/Mar/2025:12:02:52 +0000] "GET /sck.php HTTP/1.1" 403 435 "-" "Go-http-client/1.1" 85.203.21.53 80 - [19/Mar/2025:12:03:14 +0000] "GET /mah.php HTTP/1.1" 403 435 "-" "Go-http-client/1.1" 85.203.21.53 80 - [19/Mar/2025:12:03:21 +0000] "GET /alfa-rex.php HTTP/1.1" 403 435 "-" "Go-http-client/1.1" 85.203.21.53 80 - [19/Mar/2025:12:03:59 +0000] "GET /wp-mail.php HTTP/1.1" 403 435 "-" "Go-http-client/1.1" 85.203.21.53 80 - [19/Mar/2025:12:04:17 +0000] "GET /wp-includes/fonts/index.php HTTP/1.1" 403 435 "-" "Go-http-client/1.1" show less	DDoS Attack Brute-Force Bad Web Bot Web App Attack
rtbh.com.tr	2025-03-18 20:48:49 (1 month ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
weblite	2025-03-18 17:52:15 (1 month ago)	WP_EXPLOIT_PROBE	Hacking Web App Attack
uhlhosting	2025-03-18 11:27:16 (1 month ago)	africanbushdoctorz.com 85.203.21.53 - - [18/Mar/2025:12:27:14.991169 +0100] "GET /wp-includes/custom ... show moreafricanbushdoctorz.com 85.203.21.53 - - [18/Mar/2025:12:27:14.991169 +0100] "GET /wp-includes/customize/index.php HTTP/1.1" 403 199 "-" "-" Z9lYkrCU0xwlubL9qS-zTwAAAU0 "-" /apache/20250318/20250318-1227/20250318-122714-Z9lYkrCU0xwlubL9qS-zTwAAAU0 0 1653 md5:85ec9d9186208ed032a2352ec6878206 africanbushdoctorz.com 85.203.21.53 - - [18/Mar/2025:12:27:15.645470 +0100] "GET /css.php HTTP/1.1" 403 199 "-" "-" Z9lYk7CU0xwlubL9qS-zUAAAAUw "-" /apache/20250318/20250318-1227/20250318-122715-Z9lYk7CU0xwlubL9qS-zUAAAAUw 0 1603 md5:a3ed8e7fafaf2bb6bc7ca9adc59660ba africanbushdoctorz.com 85.203.21.53 - - [18/Mar/2025:12:27:15.869619 +0100] "GET /wp-content/plugins/hello.php HTTP/1.1" 403 199 "-" "-" Z9lYk7CU0xwlubL9qS-zUQAAAVI "-" /apache/20250318/20250318-1227/20250318-122715-Z9lYk7CU0xwlubL9qS-zUQAAAVI 0 1646 md5:649857192486127566db5b015cbf1ec8 africanbushdoctorz.com 85.203.21.53 - - [18/Mar/2025:12:27:16.055999 +0100] "GET /function.php HTTP/1.1" 403 199 "-" "-" Z9lYlLCU0xwlubL9qS-zUgAAAUE "- ... show less	DDoS Attack Brute-Force
webbfabriken	2025-03-18 04:04:09 (1 month ago)	spam or other hacking activities reported by webbfabriken security servers Attack reported by ... show morespam or other hacking activities reported by webbfabriken security servers Attack reported by Webbfabriken Security API - WFSecAPI show less	Web Spam
ghostwarriors	2025-03-17 19:20:10 (1 month ago)	Attempts against non-existent wp-login	Brute-Force Web App Attack

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩