AbuseIPDB » 157.230.111.142

157.230.111.142 was found in our database!

This IP was reported 127 times. Confidence of Abuse is 100%: ?

100%

ISP	DigitalOcean LLC
Usage Type	Data Center/Web Hosting/Transit
Domain Name	digitalocean.com
Country	Germany
City	Frankfurt am Main, Hessen

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 157.230.111.142

Whois 157.230.111.142

IP Abuse Reports for 157.230.111.142:

This IP address has been reported a total of 127 times from 84 distinct sources. 157.230.111.142 was first reported on August 12th 2024, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
noxtec GmbH	2024-09-01 12:48:01 (6 days ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 157.230.111.142 (DE/ ... show more(apache-useragents) Failed apache-useragents trigger with match [redacted] from 157.230.111.142 (DE/Germany/1725185640.067155) show less	Bad Web Bot
llighthunter	2024-08-28 12:07:43 (1 week ago)	Aug 21 23:05:23 mail postfix/submission/smtpd[2218]: lost connection after STARTTLS from unknown[157 ... show moreAug 21 23:05:23 mail postfix/submission/smtpd[2218]: lost connection after STARTTLS from unknown[157.230.111.142] Aug 21 23:05:41 mail postfix/submission/smtpd[2218]: improper command pipelining after CONNECT from unknown[157.230.111.142]: \026\003\003\001\247\001\000\001\243\003\003\2561a+Uua\320\314\364\325\373g\221z\316\217F\301\033^Y\352\030\217\206\034\274\357\205>\301 441\030\002\357((M\017\017\030\316Qg9\344\377Q\212\023\3565\266\v\252\233\v\312\322\351\203\000\212\000\026\0003\000g\300\236\300\242\000\236\0009\000k\300\237\300\243\000\237 show less	Port Scan Hacking Spoofing
llighthunter	2024-08-27 09:06:15 (1 week ago)	Aug 21 23:05:23 mail postfix/submission/smtpd[2218]: lost connection after STARTTLS from unknown[157 ... show moreAug 21 23:05:23 mail postfix/submission/smtpd[2218]: lost connection after STARTTLS from unknown[157.230.111.142] Aug 21 23:05:41 mail postfix/submission/smtpd[2218]: improper command pipelining after CONNECT from unknown[157.230.111.142]: \026\003\003\001\247\001\000\001\243\003\003\2561a+Uua\320\314\364\325\373g\221z\316\217F\301\033^Y\352\030\217\206\034\274\357\205>\301 441\030\002\357((M\017\017\030\316Qg9\344\377Q\212\023\3565\266\v\252\233\v\312\322\351\203\000\212\000\026\0003\000g\300\236\300\242\000\236\0009\000k\300\237\300\243\000\237 show less	Port Scan Hacking Spoofing
chronos	2024-08-26 21:11:07 (1 week ago)	[AUTORAVALT][[26/08/2024 - 18:11:07 -03:00 UTC] Attack from [DigitalOcean, LLC] [157.230 ... show more[AUTORAVALT][[26/08/2024 - 18:11:07 -03:00 UTC] Attack from [DigitalOcean, LLC] [157.230.111.142] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infected attachments, and phishing emails. Hacking... Unauthorized attempts to access the server. Spoofing -> Email sender spoofing. Brute-Force -> Credential brute-force] ... show less	Phishing Email Spam Hacking Spoofing Brute-Force
llighthunter	2024-08-26 05:39:27 (1 week ago)	Aug 21 23:05:23 mail postfix/submission/smtpd[2218]: lost connection after STARTTLS from unknown[157 ... show moreAug 21 23:05:23 mail postfix/submission/smtpd[2218]: lost connection after STARTTLS from unknown[157.230.111.142] Aug 21 23:05:41 mail postfix/submission/smtpd[2218]: improper command pipelining after CONNECT from unknown[157.230.111.142]: \026\003\003\001\247\001\000\001\243\003\003\2561a+Uua\320\314\364\325\373g\221z\316\217F\301\033^Y\352\030\217\206\034\274\357\205>\301 441\030\002\357((M\017\017\030\316Qg9\344\377Q\212\023\3565\266\v\252\233\v\312\322\351\203\000\212\000\026\0003\000g\300\236\300\242\000\236\0009\000k\300\237\300\243\000\237 show less	Port Scan Hacking Spoofing
AutoBlockIP	2024-08-24 05:24:16 (2 weeks ago)	Suspicious behaviour detected (tcp/587)	Port Scan Hacking Brute-Force
jk jk	2024-08-24 03:35:35 (2 weeks ago)	GoPot Honeypot 1	Hacking Web App Attack
Anonymous	2024-08-24 02:15:08 (2 weeks ago)	ssh port scan	Port Scan
rtbh.com.tr	2024-08-24 00:56:07 (2 weeks ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
drewf.ink	2024-08-24 00:48:37 (2 weeks ago)	[00:48] Port scanning. Port(s) scanned: TCP/502	Port Scan
kiokoman	2024-08-24 00:18:14 (2 weeks ago)	Aug 24 02:17:12 nanto postfix/submission/smtpd[3013173]: improper command pipelining after CONNECT f ... show moreAug 24 02:17:12 nanto postfix/submission/smtpd[3013173]: improper command pipelining after CONNECT from unknown[157.230.111.142]: \026\003\003\001\244\001\000\001\240\003\003.\273T\315\370.K\317s\312)\214\032\347\200\n9\266\221$\253\324\234\2318\021#\320\220\346n\\ Z\317M\366\231)\204\373\226\243\314v\325\207\2058<KF\353B\372\364\3034/\361h\2342\025E\000\212\000\026\0003\000g\300\236\300\242\000\236\0009\000k\300\237\300\243\000\237 ... show less	Email Spam
marioselgreco	2024-08-24 00:09:45 (2 weeks ago)	Automated report from mail server logs	Email Spam Hacking Spoofing
USIRT	2024-08-23 21:12:19 (2 weeks ago)	2024-08-23T23:12:18.850198+02:00 usirt postfix/submission/smtpd[56390]: improper command pipelining ... show more2024-08-23T23:12:18.850198+02:00 usirt postfix/submission/smtpd[56390]: improper command pipelining after CONNECT from unknown[157.230.111.142]: \026\003\003\001\246\001\000\001\242\003\003\332\035\|\371\345Wo%+\357\at =3&\220h\201\237\3434\210\221\342R\200+G\344\234[ 7}\245\323K(\270\300;\332K8K\350\213\233\225\210\377\322\226\260\202\3440\270\no4\244~\343\000\212\000\026\0003\000g\300\236\300\242\000\236\0009\000k\300\237\300\243\000\237 ... show less	Port Scan Hacking
Largnet SOC	2024-08-23 18:42:52 (2 weeks ago)	157.230.111.142 triggered Icarus honeypot on port 445. Check us out on github.	Port Scan Hacking
chronos	2024-08-23 15:40:07 (2 weeks ago)	[AUTORAVALT][[23/08/2024 - 12:40:07 -03:00 UTC] Attack from [DigitalOcean, LLC] [157.230 ... show more[AUTORAVALT][[23/08/2024 - 12:40:07 -03:00 UTC] Attack from [DigitalOcean, LLC] [157.230.111.142] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infected attachments, and phishing emails. Hacking... Unauthorized attempts to access the server. Spoofing -> Email sender spoofing. Brute-Force -> Credential brute-force] ... show less	Phishing Email Spam Hacking Spoofing Brute-Force