JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 85.203.23.38

85.203.23.38 was found in our database!

This IP was reported 586 times. Confidence of Abuse is 100%: ?

100%

ISP	VPN Consumer Singapore, Republic of Singapore
Usage Type	Data Center/Web Hosting/Transit
ASN	AS137409
Domain Name	vpnconsumer.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 85.203.23.38

Whois 85.203.23.38

IP Abuse Reports for 85.203.23.38:

This IP address has been reported a total of 586 times from 168 distinct sources. 85.203.23.38 was first reported on April 27th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Site.eu	2026-08-24 01:45:44 (1 day ago)	Excessive multi-domain requests	Brute-Force
🇫🇷 mail.avx.gr	2026-08-24 01:23:01 (1 day ago)	(nginxWPSCANNER) nginx WordPress scanner detected from 85.203.23.38 (SG/Singapore/-/Singapore (Bukit ... show more (nginxWPSCANNER) nginx WordPress scanner detected from 85.203.23.38 (SG/Singapore/-/Singapore (Bukit Merah Estate)/-) show less	Hacking
🇵🇱 nfsec.pl	2026-08-23 23:44:48 (1 day ago)	85.203.23.38 - - [23/Aug/2026:23:44:42 +0000] "GET /wp-includes/woocommerce-call.php HTTP/2.0" 404 2 ... show more 85.203.23.38 - - [23/Aug/2026:23:44:42 +0000] "GET /wp-includes/woocommerce-call.php HTTP/2.0" 404 25747 "http://nfsec.pl/wp-includes/woocommerce-call.php" "Go-http-client/2.0" 85.203.23.38 - - [23/Aug/2026:23:44:44 +0000] "GET /wp-admin/user/upgrade/ HTTP/2.0" 404 25104 "https://nfsec.pl/wp-admin/user/upgrade/index.php" "Go-http-client/2.0" 85.203.23.38 - - [23/Aug/2026:23:44:45 +0000] "GET /wp-admin/maint/css/ HTTP/2.0" 404 25045 "https://nfsec.pl/wp-admin/maint/css/index.php" "Go-http-client/2.0" 85.203.23.38 - - [23/Aug/2026:23:44:46 +0000] "GET /wp-includes/blocks/pattern/ HTTP/2.0" 403 1028 "https://nfsec.pl/wp-includes/blocks/pattern/index.php" "Go-http-client/2.0" 85.203.23.38 - - [23/Aug/2026:23:44:47 +0000] "GET /wp-content/upgrade-temp-backup/chosen.php HTTP/2.0" 404 25181 "http://nfsec.pl/wp-content/upgrade-temp-backup/chosen.php" "Go-http-client/2.0" ... show less	Web App Attack Exploited Host
🇩🇪 london2038.com	2026-08-23 11:31:34 (2 days ago)	Too many failed requests 85.203.23.38 - - [23/Aug/2026:13:31:09 +0200] "GET /wp-includes/core.php HT ... show more Too many failed requests 85.203.23.38 - - [23/Aug/2026:13:31:09 +0200] "GET /wp-includes/core.php HTTP/2.0" 404 40033 "http://<REDACTED>/wp-includes/core.php" "Go-http-client/2.0" 85.203.23.38 - - [23/Aug/2026:13:31:10 +0200] "GET /3PJcpMFsD8B.php HTTP/2.0" 404 40021 "http://<REDACTED>/3PJcpMFsD8B.php" "Go-http-client/2.0" 85.203.23.38 - - [23/Aug/2026:13:31:11 +0200] "GET /admin.php HTTP/2.0" 404 40021 "http://<REDACTED>/admin.php" "Go-http-client/2.0" 85.203.23.38 - - [23/Aug/2026:13:31:11 +0200] "GET /goods.php HTTP/2.0" 404 40021 "http://<REDACTED>/goods.php" "Go-http-client/2.0" 85.203.23.38 - - [23/Aug/2026:13:31:12 +0200] "GET /edit-tags.php HTTP/2.0" 404 40021 "http://<REDACTED>/edit-tags.php" "Go-http-client/2.0" 85.203.23.38 - - [23/Aug/2026:13:31:12 +0200] "GET /filemanager.php HTTP/2.0" 404 40020 "http://<REDACTED>/filemanager.php" "Go-http-client/2.0" 85.203.23.38 - - [23/Aug/2026:13:31:14 +0200] "GET /wp-content/plugins/enhanced-text-widget/analyst/src/403.php HTTP/2.0" 404 40035 "http://<RE ... show less	Web Spam Bad Web Bot
🇳🇱 Mangelot Hosting	2026-08-23 05:35:29 (2 days ago)	(LF_APACHE_404) srv104 Multiple 404 Scan 85.203.23.38 (SG/Singapore/-): 200 in the last 3600 secs; P ... show more (LF_APACHE_404) srv104 Multiple 404 Scan 85.203.23.38 (SG/Singapore/-): 200 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇧🇪 cmbplf	2026-08-23 00:04:55 (2 days ago)	2.432 requests from abuseipdb.com blacklisted IP (1yr5mos2w)	Brute-Force Bad Web Bot
🇩🇪 todix	2026-08-22 16:58:59 (3 days ago)	WebAttack or semilar from 85.203.23.38	Web App Attack
🇿🇦 simon boshoff	2026-08-22 15:22:38 (3 days ago)	RdpGuard detected brute-force attempt on HTTP	Brute-Force
🇳🇱 Site.eu	2026-08-22 05:46:08 (3 days ago)	Excessive multi-domain requests	Brute-Force
🇩🇪 ger-stg-sifi1	2026-08-21 16:01:46 (4 days ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
🇮🇳 evicky2002	2026-08-21 12:05:53 (4 days ago)	Confirmed malicious by STILWaters CTI platform (score=98, sources=3)	Hacking Brute-Force SSH
Anonymous	2026-08-21 10:05:06 (4 days ago)	IP banned by Fail2Ban in jail nginx-abusive-ips	Web App Attack Brute-Force Bad Web Bot
🇩🇪 todix	2026-08-21 09:51:15 (4 days ago)	Web App Attack Exploid from 85.203.23.38	Web App Attack
🇫🇷 Campus France	2026-08-21 06:59:12 (4 days ago)	[Fri Aug 21 08:59:10.090184 2026] [php:error] [pid 4187999] [client 85.203.23.38:59727] script '/var ... show more [Fri Aug 21 08:59:10.090184 2026] [php:error] [pid 4187999] [client 85.203.23.38:59727] script '/var/www/html/campus-perpignan/wp-security.php' not found or unable to stat, referer: http://www.perpignan.radiocampus.fr/wp-security.php [Fri Aug 21 08:59:10.415354 2026] [php:error] [pid 4187999] [client 85.203.23.38:59727] script '/var/www/html/campus-perpignan/system.php' not found or unable to stat, referer: http://www.perpignan.radiocampus.fr/system.php [Fri Aug 21 08:59:10.721053 2026] [php:error] [pid 4187999] [client 85.203.23.38:59727] script '/var/www/html/campus-perpignan/wp-includes/header.php' not found or unable to stat, referer: http://www.perpignan.radiocampus.fr/wp-includes/header.php [Fri Aug 21 08:59:11.767767 2026] [php:error] [pid 4187999] [client 85.203.23.38:59727] script '/var/www/html/campus-perpignan/a.php' not found or unable to stat, referer: http://www.perpignan.radiocampus.fr/a.php [Fri Aug 21 08:59:12.070626 2026] [php:error] [pid 4187999] [client 85.203.23.38 ... show less	Brute-Force Web App Attack
Anonymous	2026-08-21 06:30:21 (4 days ago)	Banned by Fail2Ban on server	Web App Attack

Showing 1 to 15 of 586 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 222.239.251.12

🇱🇹 213.176.26.186

🇧🇷 205.210.31.220

🇦🇷 170.247.141.133

🇦🇷 143.105.97.206

🇮🇩 103.188.177.46

🇮🇳 74.125.178.214

🇰🇷 58.229.253.119

🇱🇹 213.176.26.94

🇨🇳 211.97.69.110

🇧🇷 205.210.31.206

🇺🇸 192.178.113.209

🇵🇰 175.107.213.173

🇮🇶 169.224.33.90

🇦🇷 168.197.46.171

🇺🇸 104.152.52.222

🇧🇷 205.210.31.180

🇧🇷 205.210.31.168

🇩🇰 205.188.22.3

🇿🇦 165.73.181.65