JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 64.23.157.103

64.23.157.103 was found in our database!

This IP was reported 76 times. Confidence of Abuse is 65%: ?

65%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	Santa Clara, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 64.23.157.103

Whois 64.23.157.103

IP Abuse Reports for 64.23.157.103:

This IP address has been reported a total of 76 times from 42 distinct sources. 64.23.157.103 was first reported on January 8th 2024, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-07-29 07:00:00 (3 hours ago)	Automated Apache web application probing in selected 24h window; attempts=433, unique_paths=1, error ... show more Automated Apache web application probing in selected 24h window; attempts=433, unique_paths=1, error_responses=3; targets include WordPress, .env/.git, phpMyAdmin, autodiscover, wpad.dat and related probe paths. show less	Web App Attack
🇩🇪 Marc	2026-07-28 15:08:38 (18 hours ago)	64.23.157.103 - - [28/Jul/2026:16:20:41 +0200] "POST /wp-login.php HTTP/1.1" 200 17667 "-" "Mozilla/ ... show more 64.23.157.103 - - [28/Jul/2026:16:20:41 +0200] "POST /wp-login.php HTTP/1.1" 200 17667 "-" "Mozilla/5.0" 64.23.157.103 - - [28/Jul/2026:16:32:58 +0200] "POST /wp-login.php HTTP/1.1" 200 17667 "-" "Mozilla/5.0" 64.23.157.103 - - [28/Jul/2026:16:44:43 +0200] "POST /wp-login.php HTTP/1.1" 200 17667 "-" "Mozilla/5.0" 64.23.157.103 - - [28/Jul/2026:16:56:36 +0200] "POST /wp-login.php HTTP/1.1" 200 17728 "-" "Mozilla/5.0" 64.23.157.103 - - [28/Jul/2026:17:08:38 +0200] "POST /wp-login.php HTTP/1.1" 200 17726 "-" "Mozilla/5.0" show less	Brute-Force Web App Attack
🇮🇹 CoreTech srl	2026-07-28 08:53:57 (1 day ago)	cloudlinux2 fail2ban: 2026-07-28 10:49:07,372 fail2ban.filter [1917]: INFO [plesk-wordpre ... show more cloudlinux2 fail2ban: 2026-07-28 10:49:07,372 fail2ban.filter [1917]: INFO [plesk-wordpress] Found 64.23.157.103 - 2026-07-28 10:49:06cloudlinux2 fail2ban: 2026-07-28 10:49:28,848 fail2ban.filter [1917]: INFO [plesk-wordpress] Found 173.239.218.55 - 2026-07-28 10:49:28cloudlinux2 fail2ban: 2026-07-28 10:49:47,926 fail2ban.filter [1917]: INFO [plesk-modsecurity] Found 171.61.2.138 - 2026-07-28 10:49:47cloudlinux2 fail2ban: 2026-07-28 10:50:40,149 fail2ban.filter [1917]: INFO [plesk-modsecurity] Found 171.61.2.138 - 2026-07-28 10:50:40cloudlinux2 fail2ban: 2026-07-28 10:50:40,519 fail2ban.filter [1917]: INFO [recidive] Found 171.61.2.138 - 2026-07-28 10:50:40cloudlinux2 fail2ban: 2026-07-28 10:50:40,511 fail2ban.actions [1917]: NOTICE [plesk-modsecurity] Ban 171.61.2.138cloudlinux2 fail2ban: 2026-07-28 10:51:50,148 fail2ban.filter [1917]: INFO [plesk-modsecurity] Found 117.255.41.101 - 2026-07-28 10:51:50cloudlinux2 fail2ban: 2026-07-28 1 show less	FTP Brute-Force Web App Attack
🇩🇪 stinpriza	2026-07-28 04:21:48 (1 day ago)	Web App Attack	Web App Attack
🇩🇪 Marc	2026-07-28 02:18:41 (1 day ago)	64.23.157.103 - - [28/Jul/2026:02:30:18 +0200] "GET /wp-login.php HTTP/1.1" 200 7459 "-" "Mozilla/5. ... show more 64.23.157.103 - - [28/Jul/2026:02:30:18 +0200] "GET /wp-login.php HTTP/1.1" 200 7459 "-" "Mozilla/5.0" 64.23.157.103 - - [28/Jul/2026:04:06:11 +0200] "POST /wp-login.php HTTP/1.1" 200 17667 "-" "Mozilla/5.0" 64.23.157.103 - - [28/Jul/2026:04:10:05 +0200] "POST /wp-login.php HTTP/1.1" 200 17666 "-" "Mozilla/5.0" 64.23.157.103 - - [28/Jul/2026:04:13:31 +0200] "POST /wp-login.php HTTP/1.1" 200 14098 "-" "Mozilla/5.0" 64.23.157.103 - - [28/Jul/2026:04:18:39 +0200] "POST /wp-login.php HTTP/1.1" 200 17727 "-" "Mozilla/5.0" show less	Brute-Force Web App Attack
🇫🇷 Kenshin869	2026-07-28 02:09:39 (1 day ago)	Wordpress unauthorized access attempt	Brute-Force
🇬🇧 foxxelabs	2026-07-28 01:04:00 (1 day ago)	Automated report from FoxxeLabs Sentinel. Path probed: /wp-login.php \| Project: anseo \| Reason(s): K ... show more Automated report from FoxxeLabs Sentinel. Path probed: /wp-login.php \| Project: anseo \| Reason(s): Known exploit path: /wp-login.php \| User-Agent: Mozilla/5.0 show less	Web App Attack
🇬🇧 venus.launch.bz	2026-07-28 00:47:09 (1 day ago)	(wpscan) WordPress probe detected from 64.23.157.103 (US/United States/-)	Hacking
🇺🇸 Rip	2026-07-28 00:46:43 (1 day ago)	Authentication attack attempt. CMS Brute Force - Access Forbidden	Brute-Force Web App Attack
🇩🇪 todix	2026-07-28 00:42:53 (1 day ago)	Web App Attack Exploid from 64.23.157.103	Web App Attack
🇩🇪 on-com	2026-07-28 00:32:33 (1 day ago)	URL scan	Brute-Force Web App Attack
🇺🇸 MPL	2026-07-17 01:04:23 (1 week ago)	tcp/5552 (2 or more attempts)	Port Scan
Anonymous	2026-07-02 08:59:58 (3 weeks ago)	2026-07-02T09:59:57.143228+01:00 vps kernel: [44722935.637226] [PORTSCAN DETECTED] IN=ens3 OUT= MAC= ... show more 2026-07-02T09:59:57.143228+01:00 vps kernel: [44722935.637226] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=64.23.157.103 DST=54.37.14.118 LEN=44 TOS=0x00 PREC=0x00 TTL=237 ID=27631 PROTO=TCP SPT=61008 DPT=5555 WINDOW=1025 RES=0x00 SYN URGP=0 ... show less	Port Scan Brute-Force
🇺🇸 MPL	2026-07-02 08:16:58 (3 weeks ago)	tcp/22	Port Scan
🇫🇷 masterguru	2026-04-03 11:21:37 (3 months ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 64.23.157.103 (US/United States/-): 2 ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 64.23.157.103 (US/United States/-): 2 in the last 3600 secs (0-201) show less	Hacking

Showing 1 to 15 of 76 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 198.244.226.17

🇭🇰 121.202.206.119

🇮🇳 103.90.156.57

🇹🇷 94.154.43.96

🇩🇪 69.5.169.210

🇺🇸 46.202.68.209

🇳🇱 45.153.34.72

🇮🇩 8.215.205.243

🇺🇸 2604:a880:400:d1:0:4:c258:8001

🇺🇸 195.184.76.71

🇻🇳 171.231.196.169

🇩🇪 164.92.161.148

🇮🇩 163.7.11.155

🇸🇬 140.245.63.215

🇧🇩 103.205.135.108

🇺🇸 97.74.6.204

🇫🇷 91.231.89.111

🇫🇷 91.231.89.50

🇸🇬 18.141.228.44

🇩🇪 217.154.77.185