JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 157.230.161.25

157.230.161.25 was found in our database!

This IP was reported 200 times. Confidence of Abuse is 93%: ?

93%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	Santa Clara, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 157.230.161.25

Whois 157.230.161.25

IP Abuse Reports for 157.230.161.25:

This IP address has been reported a total of 200 times from 84 distinct sources. 157.230.161.25 was first reported on February 27th 2026, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇹 urnilxfgbez	2026-06-15 22:45:00 (2 weeks ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇩🇪 ValtonTahiri	2026-06-14 09:35:50 (2 weeks ago)	UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly as ... show more UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=157.230.161.25; proto=TCP; source_port=23199; target_port=2083; flags=SYN show less	Port Scan
🇳🇱 rmvanderspek	2026-06-14 02:45:07 (2 weeks ago)	Telnet Brute-force (IoT Botnet scan) detected.	Brute-Force IoT Targeted
🇮🇹 RaffOne	2026-06-14 01:07:47 (2 weeks ago)	SSH - Attempt to login using invalid or illegal credential	Brute-Force SSH
🇫🇷 TheHoneyPotter	2026-06-13 22:26:01 (2 weeks ago)	Honeypot [fc-honeypot]: HTTP/1.1 request on 18789 GET / User-Agent: Mozilla/5.0 (Windows NT 10.0; W ... show more Honeypot [fc-honeypot]: HTTP/1.1 request on 18789 GET / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36 Accept: / Accept-Language: zh-CN,zh;q=0.9,zh-TW;q=0.8,en;q=0.7,*;q=0.5; 18789 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇫🇷 security.rdmc.fr	2026-06-13 12:05:10 (2 weeks ago)	VoIP Attack proto:UDP src:18506 dst:5060	Port Scan Fraud VoIP
🇺🇸 donarev419	2026-06-13 00:57:00 (2 weeks ago)	Connection to port 18789 with data transfer. Data preview: GET / HTTP/1.1 Host: 107.175.212.44:1878 ... show more Connection to port 18789 with data transfer. Data preview: GET / HTTP/1.1 Host: 107.175.212.44:18789 Accept: / Connection: Close Accept-Language: zh-CN,z show less	Port Scan Hacking
🇫🇷 sbocquet	2026-06-13 00:08:41 (2 weeks ago)	Port 443 scanned from 157.230.161.25:15866.	Port Scan
🇨🇭 amaco	2026-06-12 21:37:45 (2 weeks ago)	SSH brute-force attempt from 157.230.161.25.	Port Scan Brute-Force SSH
🇺🇸 xxkodedxx	2026-06-11 14:22:40 (2 weeks ago)	[Zorvexus edge-defense] Edge-block (probe URI / bad UA / hostile vhost) Trigger: 1× edge-block in 10 ... show more [Zorvexus edge-defense] Edge-block (probe URI / bad UA / hostile vhost) Trigger: 1× edge-block in 10m window. Origin: US / AS14061 DigitalOcean, LLC Active: 14:21:49 UTC Volume: 1 HTTP req Probed: / Status mix: 444×1 Vhost fishing: 67.217.240.72 UA: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" Auto-banned 30d. zorvexus-banner. show less	Bad Web Bot Web App Attack
🇧🇷 diego	2026-06-10 02:40:50 (2 weeks ago)	[probe-68-69] 2026-06-10 02:22:51, Client: 157.230.161.25, Protocol: 6, Unauthorized activity to HTT ... show more [probe-68-69] 2026-06-10 02:22:51, Client: 157.230.161.25, Protocol: 6, Unauthorized activity to HTTP: GET / show less	Web App Attack
🇧🇷 diego	2026-06-10 02:22:50 (2 weeks ago)	[rede-164-29] 06/09/2026-23:22:50.387878, 157.230.161.25, Protocol: 6, ET CINS Active Threat Intelli ... show more [rede-164-29] 06/09/2026-23:22:50.387878, 157.230.161.25, Protocol: 6, ET CINS Active Threat Intelligence Poor Reputation IP group 208 show less	Hacking
🇺🇸 NetGuard	2026-06-09 13:12:38 (3 weeks ago)	#honeypot #netguard247 #dionaea #networkexploit Captured by NetGuard 24/7 T-Pot honeypot (netguard24 ... show more #honeypot #netguard247 #dionaea #networkexploit Captured by NetGuard 24/7 T-Pot honeypot (netguard24-7.com). Timestamp: 2026-06-09T13:12:38.438+00:00 Attacker IP: 157.230.161.25 \| Port: 1723 \| Country: United States Honeypot: dionaea \| Attack: network_exploit Source: NetGuard 24/7 (netguard24-7.com) \| PhantomGrid Defense show less	Hacking SQL Injection Web App Attack
🇺🇸 MPL	2026-06-09 09:31:03 (3 weeks ago)	tcp/18789	Port Scan
🇯🇵 mkaraki	2026-06-08 18:37:09 (3 weeks ago)	1780943828 # Service_probe # SIGNATURE_SEND # source_ip:157.230.161.25 # dst_port:2078 ...	Port Scan

Showing 1 to 15 of 200 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 158.94.187.249

🇵🇰 110.93.224.226

🇳🇱 91.92.40.19

🇩🇪 44.190.1.201

🇳🇱 212.192.240.10

🇿🇦 209.203.43.198

🇳🇱 185.242.226.71

🇨🇴 152.200.205.179

🇨🇳 106.13.114.235

🇲🇦 81.192.46.49

🇩🇪 64.188.83.244

🇬🇧 35.203.211.114

🇨🇳 223.104.221.131

🇪🇨 201.182.148.54

🇧🇷 201.95.134.129

🇲🇽 187.191.48.4

🇩🇪 164.92.161.148

🇺🇸 156.146.39.55

🇧🇪 198.235.24.226

🇷🇺 176.112.169.195