JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 204.8.96.157

204.8.96.157 was found in our database!

This IP was reported 251 times. Confidence of Abuse is 82%: ?

82%

This address is a Tor exit node. Neither the owner nor the provider are directly behind the offending action.

ISP	Quintex Alliance Consulting
Usage Type	Data Center/Web Hosting/Transit
ASN	AS62744
Hostname(s)	tor68.quintex.com
Domain Name	quintex.com
Country	🇺🇸 United States of America
City	Dallas, Texas

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 204.8.96.157

Whois 204.8.96.157

IP Abuse Reports for 204.8.96.157:

This IP address has been reported a total of 251 times from 84 distinct sources. 204.8.96.157 was first reported on April 15th 2024, and the most recent report was 13 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 neckaralb-admin.de	2026-08-27 00:11:57 (13 hours ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇩🇪 LRob	2026-08-26 22:53:20 (14 hours ago)	L7 DDoS: hammering a site's endpoints (login page, AJAX, dynamic pages) with automated requests far ... show more L7 DDoS: hammering a site's endpoints (login page, AJAX, dynamic pages) with automated requests far beyond any human use \| path: /wp-login.php \| 2026-08-26 22:53 UTC show less	DDoS Attack Web App Attack
🇮🇩 securejdprop	2026-08-26 08:15:36 (1 day ago)	This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET TOR Known Tor R ... show more This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET TOR Known Tor Relay/Router (Not Exit) Node Traffic group 73). show less	Hacking Web App Attack
🇮🇩 securejdprop	2026-08-26 03:13:58 (1 day ago)	This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET TOR Known Tor E ... show more This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET TOR Known Tor Exit Node Traffic group 73). show less	Hacking Web App Attack
🇩🇪 yitzhaq	2026-08-25 10:01:56 (2 days ago)	204.8.96.157 - - [25/Aug/2026:12:01:51 +0200] "POST /xmlrpc.php HTTP/1.1" 403 4199 "-" "Mozilla/5.0 ... show more 204.8.96.157 - - [25/Aug/2026:12:01:51 +0200] "POST /xmlrpc.php HTTP/1.1" 403 4199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Safari/605.1.15" 204.8.96.157 - - [25/Aug/2026:12:01:51 +0200] "POST /xmlrpc.php HTTP/1.1" 403 466 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Safari/605.1.15" 204.8.96.157 - - [25/Aug/2026:12:01:52 +0200] "POST /xmlrpc.php HTTP/1.1" 403 466 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Safari/605.1.15" 204.8.96.157 - - [25/Aug/2026:12:01:53 +0200] "POST /xmlrpc.php HTTP/1.1" 403 466 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Safari/605.1.15" 204.8.96.157 - - [25/Aug/2026:12:01:54 +0200] "POST /xmlrpc.php HTTP/1.1" 403 466 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_6) AppleWebKit/605.1.15 (KHTML, like Gec show less	Web App Attack Brute-Force
🇸🇪 vaia.cloud	2026-08-24 18:10:02 (2 days ago)	crowdsecurity/http-admin-interface-probing	Brute-Force Web App Attack
🇮🇩 securejdprop	2026-08-24 07:37:33 (3 days ago)	This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET TOR Known Tor E ... show more This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET TOR Known Tor Exit Node Traffic group 73). show less	Hacking Web App Attack
🇦🇺 paulshipley.com.au	2026-08-23 21:37:56 (3 days ago)	[Mon Aug 24 07:37:55.364134 2026] [security2:error] [pid 21530] [client 204.8.96.157:53144] [client ... show more [Mon Aug 24 07:37:55.364134 2026] [security2:error] [pid 21530] [client 204.8.96.157:53144] [client 204.8.96.157] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.com.au"] [uri "/xmlrpc.php"] [unique_id "aotoM8eZMbAiPolRpwf_JgAAAAQ"], referer: https://levellapromotions.com.au/the-gist-of-gifts-promotional-products-ideas-that-will-surely-work/ ... show less	Web App Attack
🇬🇧 consul.to	2026-08-22 15:54:23 (4 days ago)	Web attack/malicious scanning detected	Web App Attack
🇸🇬 securejdprop	2026-08-21 07:10:31 (6 days ago)	This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET TOR Known Tor E ... show more This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET TOR Known Tor Exit Node Traffic group 73). show less	Hacking Web App Attack
🇩🇪 raph	2026-08-19 17:56:52 (1 week ago)	[005] content filter failure, web form spam detected	Web Spam Blog Spam
Anonymous	2026-08-19 02:02:36 (1 week ago)	2026-08-18 17:00:55,910 fail2ban.actions [39175]: NOTICE [tor] Ban 204.8.96.157 2026-08-18 2 ... show more 2026-08-18 17:00:55,910 fail2ban.actions [39175]: NOTICE [tor] Ban 204.8.96.157 2026-08-18 20:00:42,508 fail2ban.actions [39175]: NOTICE [tor] Ban 204.8.96.157 2026-08-18 23:00:31,163 fail2ban.actions [39175]: NOTICE [tor] Ban 204.8.96.157 2026-08-19 02:00:46,838 fail2ban.actions [39175]: NOTICE [tor] Ban 204.8.96.157 2026-08-19 05:02:35,630 fail2ban.actions [39175]: NOTICE [tor] Ban 204.8.96.157 show less	Brute-Force
🇺🇸 mnsf	2026-08-17 17:05:03 (1 week ago)	Xmlrpc Caught (6)	Brute-Force Web App Attack
🇮🇩 securejdprop	2026-08-16 21:12:47 (1 week ago)	This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET TOR Known Tor E ... show more This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET TOR Known Tor Exit Node Traffic group 73). show less	Hacking Web App Attack
🇸🇬 securejdprop	2026-08-16 09:29:51 (1 week ago)	This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET TOR Known Tor E ... show more This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET TOR Known Tor Exit Node Traffic group 74). show less	Hacking Web App Attack

Showing 1 to 15 of 251 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2400:cb00:988:1000:adad:7496:a3f4:b804

🇨🇱 190.5.35.91

🇮🇩 182.23.83.98

🇺🇸 45.61.177.200

🇬🇧 35.203.211.91

🇺🇸 34.123.233.216

🇺🇦 31.28.172.207

🇦🇷 190.221.191.251

🇺🇸 172.202.9.120

🇩🇿 154.241.0.158

🇫🇮 147.185.133.138

🇬🇧 141.101.99.124

🇺🇸 136.112.193.102

🇳🇬 102.90.103.28

🇲🇾 47.250.162.17

🇸🇬 47.128.121.76

🇳🇱 45.148.10.141

🇳🇴 209.198.156.49

🇹🇼 198.235.24.122

🇵🇱 185.67.8.73