City: Frankfurt am Main
Region: Hessen
Country: Germany
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 157.230.104.94 | attackspam | Invalid user ubnt from 157.230.104.94 port 40546 |
2020-09-16 02:27:23 |
| 157.230.104.94 | attackbotsspam | Scanning |
2020-09-15 18:23:23 |
| 157.230.104.185 | attack | Automatic report - Banned IP Access |
2020-08-07 18:51:10 |
| 157.230.104.185 | attackbotsspam | 157.230.104.185 - - [03/Aug/2020:13:26:19 +0100] "POST /wp-login.php HTTP/1.1" 200 1875 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 157.230.104.185 - - [03/Aug/2020:13:26:22 +0100] "POST /wp-login.php HTTP/1.1" 200 1875 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 157.230.104.185 - - [03/Aug/2020:13:26:26 +0100] "POST /wp-login.php HTTP/1.1" 200 1875 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-08-03 22:25:01 |
| 157.230.104.185 | attackbotsspam | Malicious/Probing: /wp-login.php |
2020-08-03 02:19:52 |
| 157.230.104.185 | attackspam | 157.230.104.185 - - [23/Jul/2020:05:58:45 +0200] "GET /wp-login.php HTTP/1.1" 200 6060 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 157.230.104.185 - - [23/Jul/2020:05:58:47 +0200] "POST /wp-login.php HTTP/1.1" 200 6311 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 157.230.104.185 - - [23/Jul/2020:05:58:49 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2020-07-23 12:54:42 |
| 157.230.104.51 | attack | Port scanning [2 denied] |
2020-06-14 15:15:14 |
| 157.230.104.51 | attackspambots | Jun 9 23:19:20 debian kernel: [636516.139741] [UFW BLOCK] IN=eth0 OUT= MAC=52:54:00:be:e4:65:08:e8:4f:6e:48:0c:08:00 SRC=157.230.104.51 DST=89.252.131.35 LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=20266 PROTO=TCP SPT=32767 DPT=8545 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-06-10 05:57:17 |
| 157.230.104.54 | attack | As always with digital ocean |
2019-10-17 03:13:11 |
| 157.230.104.176 | attackbotsspam | Jul 30 18:28:17 server sshd\[74621\]: Invalid user kathleen from 157.230.104.176 Jul 30 18:28:17 server sshd\[74621\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.104.176 Jul 30 18:28:19 server sshd\[74621\]: Failed password for invalid user kathleen from 157.230.104.176 port 46766 ssh2 ... |
2019-10-09 19:16:27 |
| 157.230.104.176 | attackspam | Aug 8 22:48:22 XXX sshd[29748]: Invalid user ma from 157.230.104.176 port 58758 |
2019-08-09 09:17:56 |
| 157.230.104.176 | attackspam | Automatic report - Banned IP Access |
2019-08-04 03:06:55 |
| 157.230.104.176 | attackspambots | Jul 5 09:13:30 pornomens sshd\[32118\]: Invalid user tim from 157.230.104.176 port 59632 Jul 5 09:13:30 pornomens sshd\[32118\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.104.176 Jul 5 09:13:32 pornomens sshd\[32118\]: Failed password for invalid user tim from 157.230.104.176 port 59632 ssh2 ... |
2019-07-05 16:00:29 |
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 157.230.0.0 - 157.230.255.255
CIDR: 157.230.0.0/16
NetName: DIGITALOCEAN-157-230-0-0
NetHandle: NET-157-230-0-0-1
Parent: NET157 (NET-157-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: DigitalOcean, LLC (DO-13)
RegDate: 2018-08-22
Updated: 2020-04-03
Comment: Routing and Peering Policy can be found at https://www.as14061.net
Comment:
Comment: Please submit abuse reports at https://www.digitalocean.com/company/contact/#abuse
Ref: https://rdap.arin.net/registry/ip/157.230.0.0
OrgName: DigitalOcean, LLC
OrgId: DO-13
Address: 105 Edgeview Drive, Suite 425
City: Broomfield
StateProv: CO
PostalCode: 80021
Country: US
RegDate: 2012-05-14
Updated: 2025-04-11
Ref: https://rdap.arin.net/registry/entity/DO-13
OrgNOCHandle: NOC32014-ARIN
OrgNOCName: Network Operations Center
OrgNOCPhone: +1-646-827-4366
OrgNOCEmail: noc@digitalocean.com
OrgNOCRef: https://rdap.arin.net/registry/entity/NOC32014-ARIN
OrgAbuseHandle: DIGIT19-ARIN
OrgAbuseName: DigitalOcean Abuse
OrgAbusePhone: +1-646-827-4366
OrgAbuseEmail: abuse@digitalocean.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/DIGIT19-ARIN
OrgTechHandle: NOC32014-ARIN
OrgTechName: Network Operations Center
OrgTechPhone: +1-646-827-4366
OrgTechEmail: noc@digitalocean.com
OrgTechRef: https://rdap.arin.net/registry/entity/NOC32014-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#; <<>> DiG 9.10.3-P4-Ubuntu <<>> 157.230.104.210
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 22719
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;157.230.104.210. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026040902 1800 900 604800 86400
;; Query time: 11 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Apr 10 14:00:48 CST 2026
;; MSG SIZE rcvd: 108Host 210.104.230.157.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 210.104.230.157.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 179.109.7.144 | attack | $f2bV_matches |
2020-07-04 17:54:16 |
| 192.83.166.81 | attackbots | Jul 4 09:18:50 debian-2gb-nbg1-2 kernel: \[16105749.986656\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=192.83.166.81 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=40541 PROTO=TCP SPT=58520 DPT=8227 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-07-04 17:58:00 |
| 220.248.101.54 | attack | Invalid user ghost from 220.248.101.54 port 50955 |
2020-07-04 18:11:09 |
| 183.134.91.158 | attackspambots | 2020-07-03 UTC: (89x) - ace,admin,aji,anisa,bash,cameo,cnt,crh,cui,czerda,dhg,dulce,elli,fsj,ftp,ghost,guest,haha,hemant,hxz,jasper,jc,katy,kenji,kobayashi,lcm,long,luser,marketing,mininet,moo,mss,myftp,mysql,nikhil,noc,nproc,oracle,oz,pg,postgres(2x),rm,root(31x),root2,saq,tb,testing,tf2server,tomcat,ts,ubuntu,union,vitaly,vito,vnc,vue,weblogic,ydb |
2020-07-04 18:14:51 |
| 114.64.251.121 | attack | $f2bV_matches |
2020-07-04 18:03:39 |
| 107.170.227.141 | attack | sshd: Failed password for invalid user .... from 107.170.227.141 port 40880 ssh2 (6 attempts) |
2020-07-04 18:24:55 |
| 118.89.228.58 | attackbotsspam | Jul 4 09:11:37 meumeu sshd[488926]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.89.228.58 user=root Jul 4 09:11:39 meumeu sshd[488926]: Failed password for root from 118.89.228.58 port 9976 ssh2 Jul 4 09:14:00 meumeu sshd[489009]: Invalid user tms from 118.89.228.58 port 25591 Jul 4 09:14:00 meumeu sshd[489009]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.89.228.58 Jul 4 09:14:00 meumeu sshd[489009]: Invalid user tms from 118.89.228.58 port 25591 Jul 4 09:14:02 meumeu sshd[489009]: Failed password for invalid user tms from 118.89.228.58 port 25591 ssh2 Jul 4 09:16:27 meumeu sshd[489121]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.89.228.58 user=root Jul 4 09:16:29 meumeu sshd[489121]: Failed password for root from 118.89.228.58 port 41206 ssh2 Jul 4 09:18:54 meumeu sshd[489181]: Invalid user rli from 118.89.228.58 port 56821 ... |
2020-07-04 17:55:14 |
| 179.93.149.17 | attackspambots | Jul 4 03:03:30 server1 sshd\[28692\]: Invalid user daniel from 179.93.149.17 Jul 4 03:03:30 server1 sshd\[28692\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.93.149.17 Jul 4 03:03:32 server1 sshd\[28692\]: Failed password for invalid user daniel from 179.93.149.17 port 48610 ssh2 Jul 4 03:08:37 server1 sshd\[31001\]: Invalid user rk from 179.93.149.17 Jul 4 03:08:37 server1 sshd\[31001\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.93.149.17 ... |
2020-07-04 17:56:24 |
| 185.39.11.57 | attackspambots | SmallBizIT.US 9 packets to tcp(30637,30640,30651,30654,30662,30664,30666,30669,30686) |
2020-07-04 18:00:26 |
| 129.226.154.67 | attack | Automatic report - Banned IP Access |
2020-07-04 18:17:23 |
| 112.85.42.173 | attackbots | Jul 4 12:05:06 server sshd[28080]: Failed none for root from 112.85.42.173 port 10968 ssh2 Jul 4 12:05:08 server sshd[28080]: Failed password for root from 112.85.42.173 port 10968 ssh2 Jul 4 12:05:14 server sshd[28080]: Failed password for root from 112.85.42.173 port 10968 ssh2 |
2020-07-04 18:07:15 |
| 1.203.115.141 | attackbots | Invalid user guest from 1.203.115.141 port 54437 |
2020-07-04 18:20:56 |
| 58.186.79.73 | attack | 1593847094 - 07/04/2020 09:18:14 Host: 58.186.79.73/58.186.79.73 Port: 445 TCP Blocked |
2020-07-04 18:30:58 |
| 5.232.184.45 | attackspambots | 20/7/4@03:59:50: FAIL: Alarm-Network address from=5.232.184.45 ... |
2020-07-04 18:23:17 |
| 201.122.102.140 | attackspam | Automatic report - Banned IP Access |
2020-07-04 18:06:12 |