AbuseIPDB » 157.230.119.53

157.230.119.53 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 39%: ?

39%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 157.230.119.53

Whois 157.230.119.53

IP Abuse Reports for 157.230.119.53:

This IP address has been reported a total of 17 times from 14 distinct sources. 157.230.119.53 was first reported on December 9th 2024, and the most recent report was 4 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 4 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Kraften	2024-12-14 11:03:16 (4 weeks ago)	Dovecot imap-login 2 ...	DDoS Attack Brute-Force
Anonymous	2024-12-14 06:40:49 (1 month ago)	Dec 14 07:40:49 rendez-vous dovecot: imap-login: Disconnected: Connection closed (no auth attempts i ... show moreDec 14 07:40:49 rendez-vous dovecot: imap-login: Disconnected: Connection closed (no auth attempts in 0 secs): user=<>, rip=157.230.119.53, lip=*, session=<9wpYOjUpMU6d5nc1> show less	Brute-Force
Hobby Bob	2024-12-13 12:03:28 (1 month ago)	Dec 13 13:03:14 server dovecot: pop3-login: Disconnected (no auth attempts in 0 secs): user=, rip=15 ... show moreDec 13 13:03:14 server dovecot: pop3-login: Disconnected (no auth attempts in 0 secs): user=, rip=157.230.119.53, lip=X.X.X.X session= show less	Port Scan Hacking
abusiveIntelligence	2024-12-12 19:30:00 (1 month ago)	RDP connect attempt: Nmap Scanner	Brute-Force
jk jk	2024-12-12 13:36:22 (1 month ago)	GoPot Honeypot	Port Scan Hacking
gu-alvareza	2024-12-12 07:05:27 (1 month ago)	Nmap.Script.Scanner	Port Scan
webbfabriken	2024-12-12 03:07:52 (1 month ago)	spam or other hacking activities reported by webbfabriken security servers Attack reported by ... show morespam or other hacking activities reported by webbfabriken security servers Attack reported by Webbfabriken Security API - WFSecAPI show less	Web Spam
DAUGDE	2024-12-11 18:41:57 (1 month ago)	2024-12-11T19:41:42.869746v2202104133598150667 2aba009fea6c[3306057]: Dec 11 19:41:42 2aba009fea6c p ... show more2024-12-11T19:41:42.869746v2202104133598150667 2aba009fea6c[3306057]: Dec 11 19:41:42 2aba009fea6c postfix/smtps/smtpd[4642]: lost connection after CONNECT from unknown[157.230.119.53] 2024-12-11T19:41:56.409963v2202104133598150667 2aba009fea6c[3306057]: Dec 11 19:41:56 2aba009fea6c postfix/smtps/smtpd[4642]: lost connection after EHLO from unknown[157.230.119.53] 2024-12-11T19:41:56.439387v2202104133598150667 2aba009fea6c[3306057]: Dec 11 19:41:56 2aba009fea6c postfix/smtps/smtpd[4642]: lost connection after UNKNOWN from unknown[157.230.119.53] ... show less	Email Spam Spoofing Brute-Force
dwmp	2024-12-11 04:31:10 (1 month ago)	Dec 11 04:30:58 news1 sshd[2915922]: refused connect from 157.230.119.53 (157.230.119.53) Dec ... show moreDec 11 04:30:58 news1 sshd[2915922]: refused connect from 157.230.119.53 (157.230.119.53) Dec 11 04:31:03 news1 sshd[2915963]: refused connect from 157.230.119.53 (157.230.119.53) Dec 11 04:31:08 news1 sshd[2915991]: refused connect from 157.230.119.53 (157.230.119.53) ... show less	Brute-Force SSH
webbfabriken	2024-12-11 02:28:39 (1 month ago)	spam or other hacking activities reported by webbfabriken security servers Attack reported by ... show morespam or other hacking activities reported by webbfabriken security servers Attack reported by Webbfabriken Security API - WFSecAPI show less	Web Spam
Deveroonie	2024-12-10 23:30:19 (1 month ago)	Unauthorized port scanning detected by 157.230.119.53 on port 110 [V]	Port Scan Hacking
oh.mg	2024-12-10 22:30:47 (1 month ago)	(mod_security) mod_security (id:949110) triggered by 157.230.119.53 (DE/Germany/-): 1 in the last 36 ... show more(mod_security) mod_security (id:949110) triggered by 157.230.119.53 (DE/Germany/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Tue Dec 10 22:30:41.658635 2024] [:error] [pid 3888031:tid 140622978623232] [client 157.230.119.53:24029] [client 157.230.119.53] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "184"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.0.0-rc1"] [tag "anomaly-evaluation"] [hostname "82.66.98.178"] [uri "/sdk"] [unique_id "Z1jBEcLWXJGahb86vcd5FwAAAIA"] show less	Port Scan
hermawan	2024-12-10 13:27:02 (1 month ago)	1733836852 - 12/10/2024 20:20:52 Host: 157.230.119.53/157.230.119.53 Port: 21 TCP Blocked ...	Port Scan Hacking
david1117	2024-12-10 08:11:19 (1 month ago)	Bruteforcing Access to Web Application	Web App Attack IoT Targeted
EGP Abuse Dept	2024-12-09 09:16:35 (1 month ago)	Unauthorized connection to SSH port 22	Port Scan Hacking SSH