JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

157.230.237.131

Recent Activity

Abuse confidence score ?

100% Critical

165 reports

122 reporters · latest 1 hour ago

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	North Bergen, New Jersey

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 157.230.237.131

Export CSV

This IP address has been reported a total of 165 times from 122 distinct sources. 157.230.237.131 was first reported on October 16th 2026, and the most recent report was 1 hour ago. In the last 60 days, the top reporter locations were: Germany with 38 reports; United States of America with 38 reports; Netherlands with 20 reports. The most common categories in these recent reports were: Web App Attack 131 times; Bad Web Bot 53 times; Brute-Force 45 times; Hacking 35 times; SQL Injection 7 times; Other 18 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 JLKnoch Software GmbH	2026-10-19 04:37:32 (1 hour ago)	CrowdSec crowdsecurity/http-sensitive-files	Brute-Force Web App Attack
🇫🇷 dynamix	2026-10-19 04:29:04 (2 hours ago)	Multiple WAF Violations	Web App Attack
🇫🇮 as211431.net	2026-10-19 04:23:57 (2 hours ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /login/.git/config UA: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇳🇱 e.fierstra	2026-10-19 03:29:45 (2 hours ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇧🇷 Peregrine	2026-10-19 03:17:09 (3 hours ago)	Fail2Ban Jail:IU tomcat-honeypot \| Evidence: 157.230.237.131 104.23.190.122 - - [17/Oct/2026:01:06:1 ... show more Fail2Ban Jail:IU tomcat-honeypot \| Evidence: 157.230.237.131 104.23.190.122 - - [17/Oct/2026:01:06:18 -0300] "GET /concurso/.git/config HTTP/1.1" 404 - 157.230.237.131 172.70.111.128 - - [17/Oct/2026:01:06:18 -0300] "GET /cadastrarCandidato/.git/config HTTP/1.1" 404 - 157.230.237.131 162.158.158.105 - - [17/Oct/2026:01:06:19 -0300] "GET /categoria/.git/config HTTP/1.1" 404 - show less	Bad Web Bot
🇬🇧 Aetherweb Ark	2026-10-19 02:48:11 (3 hours ago)	(mod_security) mod_security (id:949110) triggered by 157.230.237.131 (US/United States/-): N in the ... show more (mod_security) mod_security (id:949110) triggered by 157.230.237.131 (US/United States/-): N in the last X secs show less	Web App Attack
🇩🇪 netclix.gr	2026-10-19 02:47:28 (3 hours ago)	(security_scan) Sensitive File Scan Blocked 157.230.237.131 (US/United States/-)	Hacking
🇩🇪 conseilgouz	2026-10-19 01:13:56 (5 hours ago)	coe-17 : Block hidden directories=>/securite/.git/config(/)	Hacking
🇺🇸 zcampbell	2026-10-19 00:57:19 (5 hours ago)	Web vulnerability scanning: probing for exposed sensitive files (.git). Detected and blocked automat ... show more Web vulnerability scanning: probing for exposed sensitive files (.git). Detected and blocked automatically. show less	Web App Attack Bad Web Bot
🇷🇴 iulianh	2026-10-19 00:37:54 (5 hours ago)	80,443	Brute-Force SSH
🇦🇺 A.i.D.A.N.N	2026-10-19 00:30:34 (5 hours ago)	A.i.D.A.N.N: Anomaly Detected - Signature match Web Service - Web application attack detected	Web App Attack
🇺🇸 factor1	2026-10-18 23:23:08 (7 hours ago)	CrowdSec at apollo Reports Abuse	Web App Attack
🇺🇸 TPI-Abuse	2026-10-18 23:18:07 (7 hours ago)	(mod_security) mod_security (id:210492) triggered by 157.230.237.131 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 157.230.237.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 19:18:03.969853 2026] [security2:error] [pid 31804:tid 31804] [client 157.230.237.131:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cloudex.link"] [uri "/blog/.git/config"] [unique_id "atVTq8QlkApzY7DEXPTTMgAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 AvonleaConsulting	2026-10-18 23:17:12 (7 hours ago)	Scanning unused Default website or suspicious access to valid sites from IP marked as abusive	Bad Web Bot Web App Attack
🇷🇴 clauss	2026-10-18 23:08:24 (7 hours ago)	157.230.237.131 - - [19/Oct/2026:02:08:24 +0300] "GET /2018/.git/config HTTP/2.0" 404 20469 "-" "Moz ... show more 157.230.237.131 - - [19/Oct/2026:02:08:24 +0300] "GET /2018/.git/config HTTP/2.0" 404 20469 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Ubuntu Chromium/75.0.3770.90 Chrome/75.0.3770.90 Safari/537.36" 157.230.237.131 - - [19/Oct/2026:02:08:24 +0300] "GET /2017/.git/config HTTP/2.0" 404 20468 "-" "Mozilla/5.0 (Linux; Android 5.1.1; SM-E700H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Mobile Safari/537.36" ... show less	Web App Attack

Showing 1 to 15 of 165 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 205.210.31.225

🇺🇸 129.121.142.157

🇨🇳 114.98.230.202

🇨🇳 112.94.252.167

🇩🇪 109.160.32.161

🇹🇷 85.98.36.209

🇮🇳 59.178.165.209

🇧🇩 58.147.171.11

🇺🇸 40.124.84.250

🇧🇪 35.241.202.225

🇫🇮 35.228.49.173

🇨🇳 219.154.25.8

🇬🇧 200.138.46.158

🇬🇧 193.176.29.21

🇷🇴 185.19.40.202

🇳🇱 176.65.132.251

🇺🇸 171.22.217.34

🇺🇸 147.185.132.196

🇨🇳 115.190.229.67

🇺🇸 100.52.229.156