Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: North Bergen

Region: New Jersey

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
157.230.118.118 attack
Automatic report - Banned IP Access
2020-09-26 07:46:23
157.230.118.118 attackbots
"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:
2020-09-26 01:00:36
157.230.118.118 attack
157.230.118.118 - - [25/Sep/2020:09:03:31 +0200] "GET /wp-login.php HTTP/1.1" 200 8558 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
157.230.118.118 - - [25/Sep/2020:09:03:33 +0200] "POST /wp-login.php HTTP/1.1" 200 8809 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
157.230.118.118 - - [25/Sep/2020:09:03:35 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-09-25 16:36:49
157.230.118.118 attack
157.230.118.118 - - \[20/Sep/2020:13:43:54 +0200\] "POST /wp-login.php HTTP/1.0" 200 9641 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
157.230.118.118 - - \[20/Sep/2020:13:43:58 +0200\] "POST /wp-login.php HTTP/1.0" 200 9456 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
157.230.118.118 - - \[20/Sep/2020:13:44:03 +0200\] "POST /wp-login.php HTTP/1.0" 200 9453 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
2020-09-20 20:11:20
157.230.118.118 attackbots
masters-of-media.de 157.230.118.118 [19/Sep/2020:21:30:46 +0200] "POST /wp-login.php HTTP/1.1" 200 6822 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
masters-of-media.de 157.230.118.118 [19/Sep/2020:21:30:49 +0200] "POST /wp-login.php HTTP/1.1" 200 6781 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-09-20 12:09:59
157.230.118.118 attackbotsspam
masters-of-media.de 157.230.118.118 [19/Sep/2020:21:30:46 +0200] "POST /wp-login.php HTTP/1.1" 200 6822 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
masters-of-media.de 157.230.118.118 [19/Sep/2020:21:30:49 +0200] "POST /wp-login.php HTTP/1.1" 200 6781 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-09-20 04:06:43
157.230.111.49 attackspam
"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:
2020-09-06 20:22:47
157.230.111.49 attackbotsspam
WordPress login Brute force / Web App Attack on client site.
2020-09-06 12:01:27
157.230.111.49 attackbotsspam
WordPress login Brute force / Web App Attack on client site.
2020-09-06 04:26:57
157.230.112.195 attackspambots
Unauthorized connection attempt detected from IP address 157.230.112.195 to port 8123 [T]
2020-08-22 03:09:27
157.230.112.195 attack
Unauthorized connection attempt detected from IP address 157.230.112.195 to port 10001 [T]
2020-08-16 01:39:13
157.230.111.136 attackbots
Automatic report - XMLRPC Attack
2020-08-05 14:32:56
157.230.111.136 attackbots
xmlrpc attack
2020-07-24 13:15:46
157.230.119.3 attackspam
Jul  4 02:20:25 debian-2gb-nbg1-2 kernel: \[16080646.510566\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=157.230.119.3 DST=195.201.40.59 LEN=29 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=UDP SPT=53489 DPT=1434 LEN=9
2020-07-04 15:11:06
157.230.112.34 attack
Multiple SSH authentication failures from 157.230.112.34
2020-07-01 23:27:02
Whois info:
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#


NetRange:       157.230.0.0 - 157.230.255.255
CIDR:           157.230.0.0/16
NetName:        DIGITALOCEAN-157-230-0-0
NetHandle:      NET-157-230-0-0-1
Parent:         NET157 (NET-157-0-0-0-0)
NetType:        Direct Allocation
OriginAS:       
Organization:   DigitalOcean, LLC (DO-13)
RegDate:        2018-08-22
Updated:        2020-04-03
Comment:        Routing and Peering Policy can be found at https://www.as14061.net
Comment:        
Comment:        Please submit abuse reports at https://www.digitalocean.com/company/contact/#abuse
Ref:            https://rdap.arin.net/registry/ip/157.230.0.0



OrgName:        DigitalOcean, LLC
OrgId:          DO-13
Address:        105 Edgeview Drive, Suite 425
City:           Broomfield
StateProv:      CO
PostalCode:     80021
Country:        US
RegDate:        2012-05-14
Updated:        2025-04-11
Ref:            https://rdap.arin.net/registry/entity/DO-13


OrgTechHandle: NOC32014-ARIN
OrgTechName:   Network Operations Center
OrgTechPhone:  +1-646-827-4366 
OrgTechEmail:  noc@digitalocean.com
OrgTechRef:    https://rdap.arin.net/registry/entity/NOC32014-ARIN

OrgAbuseHandle: DIGIT19-ARIN
OrgAbuseName:   DigitalOcean Abuse
OrgAbusePhone:  +1-646-827-4366 
OrgAbuseEmail:  abuse@digitalocean.com
OrgAbuseRef:    https://rdap.arin.net/registry/entity/DIGIT19-ARIN

OrgNOCHandle: NOC32014-ARIN
OrgNOCName:   Network Operations Center
OrgNOCPhone:  +1-646-827-4366 
OrgNOCEmail:  noc@digitalocean.com
OrgNOCRef:    https://rdap.arin.net/registry/entity/NOC32014-ARIN


#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 157.230.11.189
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 12147
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;157.230.11.189.			IN	A

;; AUTHORITY SECTION:
.			29	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026102100 1800 900 604800 86400

;; Query time: 26 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Oct 21 19:58:41 CST 2026
;; MSG SIZE  rcvd: 107
Host info
Host 189.11.230.157.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 189.11.230.157.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
189.59.5.49 attackspam
(imapd) Failed IMAP login from 189.59.5.49 (BR/Brazil/orthosaude.static.gvt.net.br): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Sep  7 12:51:27 ir1 dovecot[3110802]: imap-login: Disconnected (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=189.59.5.49, lip=5.63.12.44, TLS: Connection closed, session=
2020-09-07 16:43:05
92.249.14.159 attackbotsspam
Registration form abuse
2020-09-07 16:43:28
139.99.141.237 attackspambots
SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: svr02-vs02.svr02.goau.net.au.
2020-09-07 16:53:12
188.166.217.55 attack
Failed password for invalid user nginx from 188.166.217.55 port 50470 ssh2
2020-09-07 17:16:16
2.50.170.54 attack
1599410962 - 09/06/2020 18:49:22 Host: 2.50.170.54/2.50.170.54 Port: 23 TCP Blocked
...
2020-09-07 16:55:15
42.81.126.7 attackspam
SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found
2020-09-07 16:58:39
136.232.227.178 attackbots
Port probing on unauthorized port 445
2020-09-07 16:56:42
51.91.45.12 attack
This client attempted to login to an administrator account on a Website, or abused from another resource.
2020-09-07 17:13:35
101.108.115.48 attack
Wordpress File Manager Plugin Remote Code Execution Vulnerability, PTR: node-mr4.pool-101-108.dynamic.totinternet.net.
2020-09-07 17:19:56
198.46.233.148 attackbots
Sep  7 04:02:25 electroncash sshd[27870]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.46.233.148 
Sep  7 04:02:25 electroncash sshd[27870]: Invalid user internet from 198.46.233.148 port 35424
Sep  7 04:02:27 electroncash sshd[27870]: Failed password for invalid user internet from 198.46.233.148 port 35424 ssh2
Sep  7 04:06:33 electroncash sshd[28974]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.46.233.148  user=root
Sep  7 04:06:35 electroncash sshd[28974]: Failed password for root from 198.46.233.148 port 43110 ssh2
...
2020-09-07 16:59:01
148.228.19.2 attack
Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-09-07T07:46:19Z and 2020-09-07T07:56:30Z
2020-09-07 16:40:09
78.186.191.31 attackbots
SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: 78.186.191.31.static.ttnet.com.tr.
2020-09-07 17:12:34
142.44.137.97 attack
SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: ns550033.ip-142-44-137.net.
2020-09-07 17:01:23
45.142.120.20 attackspambots
2020-09-07 11:47:01 auth_plain authenticator failed for (User) [45.142.120.20]: 535 Incorrect authentication data (set_id=calgary@com.ua)
2020-09-07 11:47:41 auth_plain authenticator failed for (User) [45.142.120.20]: 535 Incorrect authentication data (set_id=ay@com.ua)
...
2020-09-07 16:52:22
129.154.67.65 attackspambots
$f2bV_matches
2020-09-07 17:19:05

Recently Reported IPs

10.50.112.60 10.3.98.217 85.11.167.243 40.124.84.61
211.161.118.79 152.236.14.137 111.172.4.59 156.245.205.20
118.81.123.253 123.235.51.106 157.245.131.206 2606:4700:10::6814:6150
61.43.242.66 69.5.169.247 69.5.169.200 69.5.169.179
69.5.169.164 69.5.169.147 5.188.86.234 135.119.112.229