JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 157.137.189.141

157.137.189.141 was found in our database!

This IP was reported 41 times. Confidence of Abuse is 100%: ?

100%

ISP	Oracle Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS31898
Domain Name	oracle.com
Country	🇲🇽 Mexico
City	Triana, Nuevo Leon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 157.137.189.141

Whois 157.137.189.141

IP Abuse Reports for 157.137.189.141:

This IP address has been reported a total of 41 times from 32 distinct sources. 157.137.189.141 was first reported on June 7th 2026, and the most recent report was 11 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 MPL	2026-07-10 04:00:56 (11 hours ago)	tcp/8088	Port Scan
Anonymous	2026-07-09 23:42:41 (16 hours ago)	2026-07-10T01:42:41.096587+02:00 vps kernel: [11431.387009] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa: ... show more 2026-07-10T01:42:41.096587+02:00 vps kernel: [11431.387009] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=157.137.189.141 DST=54.37.14.118 LEN=40 TOS=0x08 PREC=0x20 TTL=233 ID=6250 PROTO=TCP SPT=52082 DPT=5000 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan Brute-Force
🇺🇸 cwytech	2026-07-09 11:03:29 (1 day ago)	Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/pf-geofence-high.	Hacking
🇫🇮 6kilowatti	2026-07-09 08:11:12 (1 day ago)	2026-07-09T11:11:11.849358+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:78:9a:18 ... show more 2026-07-09T11:11:11.849358+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:78:9a:18:bd:57:7e:08:00 SRC=157.137.189.141 DST=5.61.88.83 LEN=40 TOS=0x00 PREC=0x00 TTL=236 ID=62304 PROTO=TCP SPT=55855 DPT=8088 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 Cyber Crusader	2026-07-09 07:39:17 (1 day ago)	Hundreds of Attempts (at least) to Connect to and Access Firewall Ports	Port Scan Hacking Spoofing
🇩🇪 ValtonTahiri	2026-07-02 07:20:18 (1 week ago)	UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly as ... show more UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=157.137.189.141; proto=TCP; source_port=51846; target_port=6379; flags=SYN show less	Port Scan
🇫🇮 sonot	2026-07-02 00:40:23 (1 week ago)	Blocked by UFW on mail [6379/tcp] \| SPT: 49361 \| TTL: 235 \| LEN: 40 \| TOS: 0x00 • Reported by: githu ... show more Blocked by UFW on mail [6379/tcp] \| SPT: 49361 \| TTL: 235 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 xserverx.ru	2026-07-01 21:55:40 (1 week ago)	[UFW SCAN!!!!] SRC=157.137.189.141 LEN=40 TOS=0x08 PREC=0x20 TTL=235 PROTO=TCP SPT=58078 DPT=6379 WI ... show more [UFW SCAN!!!!] SRC=157.137.189.141 LEN=40 TOS=0x08 PREC=0x20 TTL=235 PROTO=TCP SPT=58078 DPT=6379 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇦🇹 centurion	2026-07-01 01:02:45 (1 week ago)	Blocked by UFW on cloud [6379/tcp] Source port: 41914 TTL: 238 Packet length: 40 TOS: 0x00 This rep ... show more Blocked by UFW on cloud [6379/tcp] Source port: 41914 TTL: 238 Packet length: 40 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 SMi-Web	2026-06-30 23:26:23 (1 week ago)	Blocked by firewall on hugin [6379/tcp] \| Rule: UFW \| SPT: 41914 \| TTL: 242 \| LEN: 40 \| TOS: 0x00 • ... show more Blocked by firewall on hugin [6379/tcp] \| Rule: UFW \| SPT: 41914 \| TTL: 242 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 Cyber Crusader	2026-06-29 18:31:35 (1 week ago)	Hundreds of Attempts (at least) to Connect to and Access Firewall Ports	Port Scan Hacking Brute-Force
🇩🇪 Admins@FBN	2026-06-29 14:35:12 (1 week ago)	IPS:drop <match> dstport=11434	Brute-Force Exploited Host
🇫🇷 Petre 21_ip	2026-06-28 19:07:02 (1 week ago)	2026-06-28T21:07:01.801425+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c ... show more 2026-06-28T21:07:01.801425+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c0:69:11:b3:85:db:08:00 SRC=157.137.189.141 DST=155.133.26.57 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=27952 PROTO=TCP SPT=51080 DPT=11434 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇹🇭 Sawasdee	2026-06-28 05:33:08 (1 week ago)	Port Scan ...	Port Scan
🇫🇮 6kilowatti	2026-06-27 22:32:26 (1 week ago)	2026-06-28T01:32:26.091352+03:00 mummo kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:d6:a5:bc:00: ... show more 2026-06-28T01:32:26.091352+03:00 mummo kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:d6:a5:bc:00:00:5e:00:01:58:08:00 SRC=157.137.189.141 DST=83.148.240.21 LEN=40 TOS=0x00 PREC=0x00 TTL=235 ID=27691 PROTO=TCP SPT=51222 DPT=11434 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan

Showing 1 to 15 of 41 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 205.210.31.138

🇷🇴 193.46.255.86

🇵🇱 176.53.159.198

🇮🇳 103.67.236.8

🇳🇱 204.76.203.15

🇭🇰 199.45.154.112

🇺🇸 195.184.76.176

🇭🇰 156.225.1.99

🇫🇮 147.185.133.99

🇳🇬 102.90.97.28

🇸🇪 95.141.241.53

🇸🇬 94.231.206.129

🇺🇸 81.30.98.87

🇺🇸 20.169.105.0

🇳🇱 2001:1c00:8407:3d00:408a:3e9b:7eb5:c724

🇨🇳 125.120.255.206

🇳🇱 91.92.40.233

🇷🇺 87.117.32.22

🇧🇬 79.124.40.138

🇩🇪 45.135.141.20