JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 157.230.109.127

157.230.109.127 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 0%: ?

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 157.230.109.127

Whois 157.230.109.127

IP Abuse Reports for 157.230.109.127:

This IP address has been reported a total of 11 times from 10 distinct sources. 157.230.109.127 was first reported on March 31st 2026, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 SpaceHost-Server	2026-04-01 22:28:09 (3 months ago)		Brute-Force Web App Attack
🇳🇿 Antinson	2026-04-01 14:37:05 (3 months ago)	Scraping with a high error ratio and request rate	Bad Web Bot
Anonymous	2026-04-01 12:05:22 (3 months ago)	Blocked: Reason='Suspicious traffic score=60 (review-based detection)'; Requests=16	Hacking
🇺🇸 TPI-Abuse	2026-04-01 11:58:31 (3 months ago)	(mod_security) mod_security (id:225170) triggered by 157.230.109.127 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:225170) triggered by 157.230.109.127 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 01 07:58:24.510388 2026] [security2:error] [pid 31043:tid 31077] [client 157.230.109.127:54503] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.victorchiarizia.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.victorchiarizia.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ac0IYM4zrSKdmLxn1btmvwAAAJY"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 backslash	2026-04-01 06:12:00 (3 months ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇺🇸 TPI-Abuse	2026-04-01 04:45:01 (3 months ago)	(mod_security) mod_security (id:225170) triggered by 157.230.109.127 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:225170) triggered by 157.230.109.127 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 01 00:44:54.363082 2026] [security2:error] [pid 31829:tid 31829] [client 157.230.109.127:59191] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|prostar.industries\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "prostar.industries"] [uri "/wp-json/wp/v2/users/"] [unique_id "acyixl2bmaKxUJbjEveK_AAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 lufi	2026-04-01 00:02:41 (3 months ago)	2026-04-01 02:02:40 157.230.109.127: blacklisted Pattern: wp-includes/ ...	Web Spam Brute-Force Hacking Web App Attack
🇺🇸 myagent.site	2026-03-31 23:00:01 (3 months ago)	Blocking for trying to access an exploit file: //xmlrpc.php?rsd	Hacking
🇧🇪 cmbplf	2026-03-31 22:02:28 (3 months ago)	125.132 requests in 1 hour (2d11h59m)	Brute-Force Bad Web Bot
🇺🇸 n2nguyenn2nguyen	2026-03-31 20:20:30 (3 months ago)	Blocked by YFC Security on https://fencingforward.com — type: xmlrpc_attempts	Brute-Force Web App Attack
🇩🇪 FeG Deutschland	2026-03-31 20:14:33 (3 months ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247	Exploited Host Web App Attack

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 64.225.72.42

🇳🇱 45.153.34.165

🇰🇷 211.232.210.235

🇺🇸 205.210.31.105

🇹🇷 185.211.100.106

🇨🇳 171.15.55.136

🇻🇪 156.247.239.195

🇺🇸 147.185.132.114

🇮🇹 143.225.22.7

🇨🇳 120.48.92.183

🇭🇰 103.103.245.61

🇻🇳 103.67.162.139

🇷🇺 95.110.66.212

🇺🇿 92.63.205.169

🇺🇸 91.230.168.50

🇫🇷 91.196.152.195

🇳🇱 45.148.10.151

🇺🇸 44.9.86.93

🇺🇸 20.85.246.45

🇰🇷 1.212.225.99