JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 85.203.23.137

85.203.23.137 was found in our database!

This IP was reported 501 times. Confidence of Abuse is 100%: ?

100%

ISP	VPN Consumer Singapore, Republic of Singapore
Usage Type	Data Center/Web Hosting/Transit
ASN	AS137409
Domain Name	vpnconsumer.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 85.203.23.137

Whois 85.203.23.137

IP Abuse Reports for 85.203.23.137:

This IP address has been reported a total of 501 times from 170 distinct sources. 85.203.23.137 was first reported on April 27th 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 masterguru	2026-08-25 23:16:50 (1 week ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-122) show less	Bad Web Bot
🇿🇦 conure.sh	2026-08-25 23:07:39 (1 week ago)	csagent: score 15.4: php in uploads x2; 2 domain(s) in 3m16s	Web App Attack
🇫🇮 paissangroup	2026-08-25 18:21:52 (1 week ago)	Multiple WAF Violations	Web App Attack
🇩🇪 4server	2026-08-25 17:08:25 (1 week ago)	[TueAug2519:08:20.1497212026][security2:error][pid2769426:tid2769500][client85.203.23.137:0]ModSecur ... show more [TueAug2519:08:20.1497212026][security2:error][pid2769426:tid2769500][client85.203.23.137:0]ModSecurity:Accessdeniedwithcode403$phase1$.Patternmatch\"\^/wp-content/uploads/.\*\\\\\\\\.$php\\|phtml\\|phar\\|php3\\|php4\\|php5\\|php7$\$\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"395\"][id\"1101018\"][msg\"PHPexecutionfromuploads\"][hostname\"admin-services.ch\"][uri\"/wp-content/uploads/config.php\"][unique_id\"ao3MBPJGaV5DNqJ1yEJQpwAAAI0\"] show less	Port Scan Brute-Force Web App Attack
🇮🇹 CoreTech srl	2026-08-25 10:52:55 (1 week ago)	[DC: IP:151.1.252.27] ntopng alert: blacklisted_client_contact,ndpi_tcp_issues,ndpi_probing_attempt	Hacking
Anonymous	2026-08-25 01:11:46 (1 week ago)	[Tue Aug 25 03:11:26.667687 2026] [authz_core:error] [pid 3365:tid 3409] [client 85.203.23.137:45393 ... show more [Tue Aug 25 03:11:26.667687 2026] [authz_core:error] [pid 3365:tid 3409] [client 85.203.23.137:45393] AH01630: client denied by server configuration: /var/www/wordp/wp-admin/maint/css, referer: http://www.akcurate.de/wp-admin/maint/css/index.php [Tue Aug 25 03:11:41.061555 2026] [authz_core:error] [pid 13784:tid 13826] [client 85.203.23.137:30933] AH01630: client denied by server configuration: /var/www/wordp/wp-admin/network/theme-install-function.php, referer: http://www.akcurate.de/wp-admin/network/theme-install-function.php [Tue Aug 25 03:11:44.262671 2026] [authz_core:error] [pid 13784:tid 13830] [client 85.203.23.137:30933] AH01630: client denied by server configuration: /var/www/wordp/wp-admin/load.php, referer: http://www.akcurate.de/wp-admin/load.php [Tue Aug 25 03:11:45.553586 2026] [authz_core:error] [pid 13784:tid 13816] [client 85.203.23.137:30933] AH01630: client denied by server configuration: /var/www/wordp/wp-admin/wp-activate.php, referer: http://www.akcurate.de/wp-ad ... show less	Brute-Force Web App Attack
🇳🇱 Site.eu	2026-08-24 23:08:13 (1 week ago)	Excessive multi-domain requests	Brute-Force
🇺🇸 wordpresshosting.solutions	2026-08-24 21:29:03 (1 week ago)	Web app vulnerability scanning detected. Evidence: 85.203.23.137 - - [24/Aug/2026:21:28:50 +0000] "G ... show more Web app vulnerability scanning detected. Evidence: 85.203.23.137 - - [24/Aug/2026:21:28:50 +0000] "GET /wp-content/plugin-install.php HTTP/1.1" 404 66438 "https://[DOMAIN]/wp-content/plugin-install.php" "Go-http-client/2.0" 85.203.23.137 - - [24/Aug/2026:21:29:02 +0000] "GET /wp-content/themes/news-portal/user-install.php HTTP/1.1" 404 64864 "https://[DOMAIN]/wp-content/themes/news-portal/user-install.php" "Go-http-client/2.0" show less	Web App Attack
🇳🇱 BlueWire Hosting	2026-08-24 20:56:43 (1 week ago)	Bad bot ignoring robot.txt	Bad Web Bot
Anonymous	2026-08-24 17:59:21 (1 week ago)	Banned by Fail2Ban on server	Web App Attack
🇨🇭 4server	2026-08-24 11:48:50 (1 week ago)	[MonAug2413:48:44.0375232026][security2:error][pid3360987:tid3361082][client85.203.23.137:0]ModSecur ... show more [MonAug2413:48:44.0375232026][security2:error][pid3360987:tid3361082][client85.203.23.137:0]ModSecurity:Accessdeniedwithcode403$phase1$.Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"614\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"www.aid-web.ch\"][uri\"/xmlrpc.php\"][unique_id\"aowvnD_6jcbj9KBTZHOa1AAAAAA\"] show less	Hacking Web App Attack
🇫🇷 masterguru	2026-08-24 06:04:25 (1 week ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-196) show less	Bad Web Bot
🇧🇪 cmbplf	2026-08-24 02:51:35 (1 week ago)	2.408 requests from abuseipdb.com blacklisted IP (1mo3w3d)	Brute-Force Bad Web Bot
🇩🇪 ghostwarriors	2026-08-24 01:20:12 (1 week ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-08-23 22:25:49 (1 week ago)	Excessive multi-domain requests	Brute-Force

Showing 1 to 15 of 501 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇩 2402:8780:1014:a015:d0a1:ae33:42a8:7953

🇮🇳 2401:4900:c039:e9ad:2196:4c3c:8dd3:abc9

🇵🇭 2001:4455:5d9:400:fda0:7913:5ea5:9041

🇨🇳 221.2.9.67

🇺🇸 216.180.246.71

🇬🇧 195.96.139.148

🇩🇪 194.88.98.93

🇺🇸 173.24.185.52

🇩🇪 172.68.195.206

🇨🇳 112.101.18.18

🇳🇱 81.19.216.91

🇺🇸 64.62.156.18

🇺🇸 45.156.129.179

🇳🇱 45.148.10.151

🇺🇸 20.80.85.51

🇺🇸 199.244.88.226

🇭🇰 199.45.154.185

🇬🇧 194.50.235.130

🇨🇴 190.90.37.54

🇨🇴 190.61.42.218