JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 85.203.23.11

85.203.23.11 was found in our database!

This IP was reported 622 times. Confidence of Abuse is 100%: ?

100%

ISP	VPN Consumer Singapore, Republic of Singapore
Usage Type	Data Center/Web Hosting/Transit
ASN	AS137409
Domain Name	vpnconsumer.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 85.203.23.11

Whois 85.203.23.11

IP Abuse Reports for 85.203.23.11:

This IP address has been reported a total of 622 times from 172 distinct sources. 85.203.23.11 was first reported on April 27th 2025, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 nfsec.pl	2026-08-23 23:34:38 (3 hours ago)	85.203.23.11 - - [23/Aug/2026:23:34:34 +0000] "GET /we.php HTTP/2.0" 404 25685 "http://nfsec.pl/we.p ... show more 85.203.23.11 - - [23/Aug/2026:23:34:34 +0000] "GET /we.php HTTP/2.0" 404 25685 "http://nfsec.pl/we.php" "Go-http-client/2.0" 85.203.23.11 - - [23/Aug/2026:23:34:35 +0000] "GET /wp-content/themes/neve/assets/apps/dashboard/build/ HTTP/2.0" 404 25112 "http://nfsec.pl/wp-content/themes/neve/assets/apps/dashboard/build/" "Go-http-client/2.0" 85.203.23.11 - - [23/Aug/2026:23:34:36 +0000] "GET /wp-includes/css/dist/ HTTP/2.0" 403 1052 "http://nfsec.pl/wp-includes/css/dist/" "Go-http-client/2.0" 85.203.23.11 - - [23/Aug/2026:23:34:37 +0000] "GET /wp-includes/blocks/media-text/ HTTP/2.0" 403 1048 "http://nfsec.pl/wp-includes/blocks/media-text/" "Go-http-client/2.0" 85.203.23.11 - - [23/Aug/2026:23:34:38 +0000] "GET /wp-includes/Text/Diff/Renderer/ HTTP/2.0" 403 1048 "http://nfsec.pl/wp-includes/Text/Diff/Renderer/" "Go-http-client/2.0" ... show less	Web App Attack Exploited Host
🇩🇪 london2038.com	2026-08-23 11:45:02 (15 hours ago)	Probing for exploits 85.203.23.11 - - [23/Aug/2026:13:44:52 +0200] "GET /wp-content/uploads/fusion-s ... show more Probing for exploits 85.203.23.11 - - [23/Aug/2026:13:44:52 +0200] "GET /wp-content/uploads/fusion-styles/user/index.php HTTP/1.1" 301 169 "-" "Go-http-client/1.1" 85.203.23.11 - - [23/Aug/2026:13:44:57 +0200] "GET /wp-content/themes/twentytwentyfive/parts/upgrade/index.php HTTP/1.1" 301 169 "-" "Go-http-client/1.1" show less	Hacking Web App Attack
🇵🇱 lns.bz	2026-08-22 19:23:15 (1 day ago)	Web app attack [PL.Lu]	Exploited Host Web App Attack
🇧🇪 cmbplf	2026-08-22 13:10:17 (1 day ago)	2.447 requests from abuseipdb.com blacklisted IP (9mos2w5d)	Brute-Force Bad Web Bot
🇳🇱 Site.eu	2026-08-22 07:45:07 (1 day ago)	Excessive multi-domain requests	Brute-Force
🇩🇪 todix	2026-08-21 22:12:08 (2 days ago)	Web App Attack Exploid from 85.203.23.11	Web App Attack
🇪🇸 scaballe	2026-08-21 16:19:20 (2 days ago)		Web App Attack
🇩🇪 ger-stg-sifi1	2026-08-21 16:01:24 (2 days ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
Anonymous	2026-08-21 10:20:13 (2 days ago)	IP banned by Fail2Ban in jail nginx-abusive-ips	Web App Attack Brute-Force Bad Web Bot
🇫🇷 Campus France	2026-08-21 07:01:18 (2 days ago)	[Fri Aug 21 09:01:16.387555 2026] [php:error] [pid 4188295] [client 85.203.23.11:52869] script '/var ... show more [Fri Aug 21 09:01:16.387555 2026] [php:error] [pid 4188295] [client 85.203.23.11:52869] script '/var/www/html/campus-perpignan/wp-includes/css/eroor.php' not found or unable to stat, referer: http://www.perpignan.radiocampus.org/wp-includes/css/eroor.php [Fri Aug 21 09:01:16.719752 2026] [php:error] [pid 4188295] [client 85.203.23.11:52869] script '/var/www/html/campus-perpignan/wp-content/languages/themes/home.php' not found or unable to stat, referer: http://www.perpignan.radiocampus.org/wp-content/languages/themes/home.php [Fri Aug 21 09:01:17.064335 2026] [php:error] [pid 4188295] [client 85.203.23.11:52869] script '/var/www/html/campus-perpignan/wp-content/languages/plugins/options.php' not found or unable to stat, referer: http://www.perpignan.radiocampus.org/wp-content/languages/plugins/options.php [Fri Aug 21 09:01:17.365573 2026] [php:error] [pid 4188295] [client 85.203.23.11:52869] script '/var/www/html/campus-perpignan/wp-includes/js/tinymce/themes/panel.php' not found or un ... show less	Brute-Force Web App Attack
Anonymous	2026-08-21 06:41:28 (2 days ago)	Banned by Fail2Ban on server	Web App Attack
🇳🇱 Site.eu	2026-08-21 02:35:44 (3 days ago)	Excessive multi-domain requests	Brute-Force
🇮🇩 soc-yk	2026-08-21 02:18:18 (3 days ago)	Type: web_scanning Risk: 50 Events: 6211 Evidence: - Automated hostile web probing detected - Repea ... show more Type: web_scanning Risk: 50 Events: 6211 Evidence: - Automated hostile web probing detected - Repeated web scanning activity observed - Multi-event operational persistence identified show less	Web App Attack
🇩🇪 ghostwarriors	2026-08-20 22:50:38 (3 days ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇦🇺 paulshipley.com.au	2026-08-20 21:55:46 (3 days ago)	levellapromotions.com.au:443 85.203.23.11 - - [21/Aug/2026:07:55:45 +1000] "GET /item.php HTTP/1.1" ... show more levellapromotions.com.au:443 85.203.23.11 - - [21/Aug/2026:07:55:45 +1000] "GET /item.php HTTP/1.1" 404 129521 "https://www.realestatepromo.com.au/item.php" "Go-http-client/1.1" ... show less	Web App Attack

Showing 1 to 15 of 622 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 205.210.31.217

🇨🇴 181.78.11.106

🇭🇰 165.154.41.182

🇨🇳 118.145.104.105

🇨🇳 112.30.68.155

🇺🇸 64.23.236.62

🇳🇱 37.49.224.154

🇬🇧 35.203.210.184

🇭🇰 199.45.154.177

🇺🇸 198.23.232.204

🇳🇱 195.178.110.26

🇺🇸 189.81.71.9

🇦🇱 185.89.157.198

🇺🇸 172.178.16.179

🇺🇸 172.71.158.76

🇧🇷 138.185.145.78

🇳🇵 113.199.254.44

🇺🇸 100.29.192.126

🇬🇷 95.164.180.118

🇧🇬 79.124.58.18