JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 109.123.237.57

109.123.237.57 was found in our database!

This IP was reported 110 times. Confidence of Abuse is 100%: ?

100%

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS141995
Hostname(s)	vmi3244474.contaboserver.net
Domain Name	contabo.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 109.123.237.57

Whois 109.123.237.57

IP Abuse Reports for 109.123.237.57:

This IP address has been reported a total of 110 times from 60 distinct sources. 109.123.237.57 was first reported on May 25th 2026, and the most recent report was 22 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 FeG Deutschland	2026-07-05 15:03:22 (22 minutes ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 2	Exploited Host Web App Attack
🇧🇷 alcacerlab	2026-07-05 14:16:47 (1 hour ago)	109.123.237.57 - - [05/Jul/2026:11:16:46 -0300] "POST /wp-login.php HTTP/2" 403 712 "https://alcacer ... show more 109.123.237.57 - - [05/Jul/2026:11:16:46 -0300] "POST /wp-login.php HTTP/2" 403 712 "https://alcacerlab.com.br/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 Edg/133.0.0.0" ... show less	Bad Web Bot Web App Attack
🇲🇹 Malta	2026-07-05 14:11:39 (1 hour ago)	109.123.237.57 - - [05/Jul/2026:16:11:38 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Macintos ... show more 109.123.237.57 - - [05/Jul/2026:16:11:38 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 Edg/133.0.0.0" Brute-force password attempt show less	Hacking Web App Attack Brute-Force
🇪🇸 masterguru	2026-07-05 13:47:56 (1 hour ago)	(wplogin) Failed WordPress login from 109.123.237.57 (SG/Singapore/vmi3244474.contaboserver.net): 5 ... show more (wplogin) Failed WordPress login from 109.123.237.57 (SG/Singapore/vmi3244474.contaboserver.net): 5 in the last 3600 secs (0-122) show less	Hacking
Anonymous	2026-07-05 13:46:02 (1 hour ago)	Failed Wordpress Logins	Web App Attack
🇺🇸 ambor	2026-07-05 13:23:59 (2 hours ago)	Honeypot access: WordPress admin access attempt. Path: /wp-login.php	Brute-Force Web App Attack
🇩🇪 LRob	2026-07-05 12:45:06 (2 hours ago)	WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail	Brute-Force Web App Attack
🇺🇸 factor1	2026-07-05 12:42:56 (2 hours ago)	Fail2ban at saturn Reports Abuse.	Brute-Force Web App Attack
🇩🇪 4server	2026-07-05 12:27:44 (2 hours ago)	[SunJul0514:27:40.3028812026][security2:error][pid2826124:tid2826252][client109.123.237.57:0]ModSecu ... show more [SunJul0514:27:40.3028812026][security2:error][pid2826124:tid2826252][client109.123.237.57:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"ipv6.gmint.ch\"][uri\"/xmlrpc.php\"][unique_id\"akpNvPX0Itmiyy_wPwSccAAAAQ0\"] show less	Port Scan Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-05 12:17:33 (3 hours ago)	(mod_security) mod_security (id:225170) triggered by 109.123.237.57 (vmi3244474.contaboserver.net): ... show more (mod_security) mod_security (id:225170) triggered by 109.123.237.57 (vmi3244474.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 08:17:25.901026 2026] [security2:error] [pid 20573:tid 20573] [client 109.123.237.57:55170] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|professionalpianomoversinc.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "professionalpianomoversinc.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "akpLVXjvKaT8fbD14ETIoAAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 lostswordfish.com	2026-07-05 10:46:03 (4 hours ago)	Wordfence waf block on jestrellafoundation	Web App Attack
Anonymous	2026-07-05 10:43:31 (4 hours ago)	109.123.237.57 - - [05/Jul/2026:12:36:45 +0200] "POST /wp-login.php HTTP/1.1" 200 2644 "https://elit ... show more 109.123.237.57 - - [05/Jul/2026:12:36:45 +0200] "POST /wp-login.php HTTP/1.1" 200 2644 "https://elitealuminiumsolutions.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 Edg/133.0.0.0" 109.123.237.57 - - [05/Jul/2026:12:36:46 +0200] "POST /wp-login.php HTTP/1.1" 200 2125 "https://elitealuminiumsolutions.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 Edg/133.0.0.0" 109.123.237.57 - - [05/Jul/2026:12:43:21 +0200] "POST /xmlrpc.php HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 109.123.237.57 - - [05/Jul/2026:12:43:22 +0200] "POST /xmlrpc.php HTTP/1.1" 200 225 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 109.123.237.57 - - [05/Jul/2026:12:43:29 +0200] "POST /wp-login. ... show less	Brute-Force Web App Attack
🇮🇩 origrata	2026-07-05 10:35:09 (4 hours ago)	[OGWAF] xmlrpc_bruteforce attack blocked \| severity: critical \| POST /xmlrpc.php \| UA: Mozilla/5.0 ( ... show more [OGWAF] xmlrpc_bruteforce attack blocked \| severity: critical \| POST /xmlrpc.php \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0 \| payload: <?xml version="1.0"?><methodCall><methodName>system.multicall</methodName><params><param><value><array><data><value><struct><member><name>methodName</name><value><string>wp.getUsersBlogs</string></val show less	Web App Attack
🇺🇸 TPI-Abuse	2026-07-05 10:34:39 (4 hours ago)	(mod_security) mod_security (id:225170) triggered by 109.123.237.57 (vmi3244474.contaboserver.net): ... show more (mod_security) mod_security (id:225170) triggered by 109.123.237.57 (vmi3244474.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 06:34:33.899881 2026] [security2:error] [pid 11217:tid 11217] [client 109.123.237.57:53022] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|nextlevelcharge.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "nextlevelcharge.com"] [uri "/wp-includes/wp-json/wp/v2/users/me"] [unique_id "akozOZKen5Pc0RMXZUA0TAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-05 10:34:37 (4 hours ago)	2026-07-05T12:34:35.452897+02:00 aion wordpress[866817]: XML-RPC authentication attempt for unknown ... show more 2026-07-05T12:34:35.452897+02:00 aion wordpress[866817]: XML-RPC authentication attempt for unknown user michael from 109.123.237.57 ... show less	Hacking Brute-Force

Showing 1 to 15 of 110 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 191.102.187.108

🇩🇪 185.242.3.91

🇳🇱 178.16.54.228

🇸🇬 172.253.84.213

🇺🇸 104.234.53.42

🇳🇱 91.148.245.81

🇺🇸 66.132.172.177

🇳🇱 45.148.10.152

🇺🇸 44.52.161.141

🇺🇸 44.41.1.159

🇺🇸 34.122.171.4

🇨🇳 8.138.128.98

🇺🇸 2602:feda:f39a:867d:201f:25c6:854e:64a7

🇦🇱 185.80.226.146

🇩🇪 178.104.181.169

🇨🇳 117.184.105.34

🇮🇩 113.192.48.135

🇸🇪 85.203.44.124

🇱🇹 77.90.185.20

🇺🇸 75.223.55.187