JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 157.230.251.56

157.230.251.56 was found in our database!

This IP was reported 71 times. Confidence of Abuse is 100%: ?

100%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 157.230.251.56

Whois 157.230.251.56

IP Abuse Reports for 157.230.251.56:

This IP address has been reported a total of 71 times from 46 distinct sources. 157.230.251.56 was first reported on June 10th 2021, and the most recent report was 19 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Site.eu	2026-07-16 05:44:15 (19 hours ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇺🇸 TPI-Abuse	2026-07-14 18:37:11 (2 days ago)	(mod_security) mod_security (id:225170) triggered by 2002:9de6:fb38::9de6:fb38 (Unknown): 1 in the l ... show more (mod_security) mod_security (id:225170) triggered by 2002:9de6:fb38::9de6:fb38 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 14 14:37:03.824711 2026] [security2:error] [pid 32331:tid 32331] [client 2002:9de6:fb38::9de6:fb38:57303] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.fatbastardcompetition.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.fatbastardcompetition.com"] [uri "/wp-json/wp/v2/users"] [unique_id "alaBz01_ut1V5vuRo47VcwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-07-14 18:22:03 (2 days ago)	Excessive 404/403 errors	Brute-Force
🇫🇷 Campus France	2026-07-14 17:57:49 (2 days ago)	157.230.251.56 - - [14/Jul/2026:19:57:48 +0200] "POST /wp-login.php HTTP/1.1" 200 2531 "https://www. ... show more 157.230.251.56 - - [14/Jul/2026:19:57:48 +0200] "POST /wp-login.php HTTP/1.1" 200 2531 "https://www.perpignan.radio-campus.fr/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15" 157.230.251.56 - - [14/Jul/2026:19:57:48 +0200] "POST /wp-login.php HTTP/1.1" 200 2531 "https://www.perpignan.radio-campus.fr/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" 157.230.251.56 - - [14/Jul/2026:19:57:48 +0200] "POST /wp-login.php HTTP/1.1" 200 2531 "https://www.perpignan.radio-campus.fr/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" 157.230.251.56 - - [14/Jul/2026:19:57:49 +0200] "POST /wp-login.php HTTP/1.1" 200 2531 "https://www.perpignan.radio-campus.fr/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like ... show less	Brute-Force Web App Attack
🇩🇪 ger-stg-sifi1	2026-07-14 17:43:06 (2 days ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
🇫🇷 Campus France	2026-07-14 16:50:06 (2 days ago)	157.230.251.56 - - [14/Jul/2026:18:50:02 +0200] "POST /wp-login.php HTTP/1.1" 200 2535 "https://www. ... show more 157.230.251.56 - - [14/Jul/2026:18:50:02 +0200] "POST /wp-login.php HTTP/1.1" 200 2535 "https://www.perpignan.radio-campus.org/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 157.230.251.56 - - [14/Jul/2026:18:50:03 +0200] "POST /wp-login.php HTTP/1.1" 200 2535 "https://www.perpignan.radio-campus.org/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64; rv:118.0) Gecko/20100101 Firefox/118.0" 157.230.251.56 - - [14/Jul/2026:18:50:04 +0200] "POST /wp-login.php HTTP/1.1" 200 2535 "https://www.perpignan.radio-campus.org/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:119.0) Gecko/20100101 Firefox/119.0" 157.230.251.56 - - [14/Jul/2026:18:50:05 +0200] "POST /wp-login.php HTTP/1.1" 200 2535 "https://www.perpignan.radio-campus.org/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" 157.230.251.56 - - [14/Ju ... show less	Brute-Force Web App Attack
🇦🇺 paulshipley.com.au	2026-07-14 16:07:48 (2 days ago)	ccideas.com.au:443 157.230.251.56 - - [15/Jul/2026:02:07:45 +1000] "GET /?author=1 HTTP/1.1" 404 247 ... show more ccideas.com.au:443 157.230.251.56 - - [15/Jul/2026:02:07:45 +1000] "GET /?author=1 HTTP/1.1" 404 247520 "https://www.facebook.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:119.0) Gecko/20100101 Firefox/119.0" ... show less	Web App Attack
Anonymous	2026-07-14 15:04:00 (2 days ago)	CPOWCO WEBEXPLOIT 157.230.251.56 (157.230.251.56)	Web App Attack
🇩🇪 FeG Deutschland	2026-07-14 14:25:32 (2 days ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
🇩🇪 conseilgouz	2026-07-14 10:22:02 (2 days ago)	ave-6 : Trying access system files=>/license.txt(license.txt)	Hacking
🇺🇸 Lezetho	2026-07-14 08:00:22 (2 days ago)	DDoS, WebSpam, Web Attack, and Brute-force blocked by Cloudflare	DDoS Attack Email Spam Hacking Brute-Force
🇺🇸 Equity Steward	2026-07-14 07:29:13 (2 days ago)	Automated threat intelligence block — AbuseIPDB confidence 100%, 58 prior reports. IP contacted equi ... show more Automated threat intelligence block — AbuseIPDB confidence 100%, 58 prior reports. IP contacted equitysteward.org. ISP: DigitalOcean, LLC. Auto-blocked at 2026-07-14T07:29:13.937Z. show less	Bad Web Bot Web App Attack
🇭🇺 DumaNet	2026-07-14 03:53:00 (2 days ago)	WordPress (CMS) attack attempts. Date: 2026 Jul 14. 05:28:15 Source IP: 157.230.251.56 Portion ... show more WordPress (CMS) attack attempts. Date: 2026 Jul 14. 05:28:15 Source IP: 157.230.251.56 Portion of the log(s): 157.230.251.56 - [14/Jul/2026:05:28:13 +0200] "POST /wp-login.php HTTP/1.1" 301 169 "https://[removed].org/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.130 Safari/537.36" 157.230.251.56 - [14/Jul/2026:05:28:10 +0200] "POST /wp-login.php HTTP/1.1" 301 169 "https://[removed].org/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.5993.88 Safari/537.36" 157.230.251.56 - [14/Jul/2026:05:28:08 +0200] "POST /wp-login.php HTTP/1.1" 301 169 "https://[removed].org/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) Gecko/20100101 Firefox/120.0.1" 157.230.251.56 - [14/Jul/2026:05:28:05 +0200] "POST /wp-login.php HTTP/1.1" 301 169 "https://[removed].org/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) Gecko/20100101 Firefox/122.0" 157.230.251.56 - [14/Jul/2026:05:28:03 +0200] "POST /wp-login show less	Brute-Force Web App Attack
🇭🇺 DumaNet	2026-07-14 03:38:00 (2 days ago)	WordPress (CMS) attack attempts. Date: 2026 Jul 14. 05:17:22 Source IP: 157.230.251.56 Portion ... show more WordPress (CMS) attack attempts. Date: 2026 Jul 14. 05:17:22 Source IP: 157.230.251.56 Portion of the log(s): 157.230.251.56 - [14/Jul/2026:05:17:07 +0200] "POST /wp-login.php HTTP/1.1" 301 169 "https://[removed].org/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Gecko/20100101 Firefox/121.0" 157.230.251.56 - [14/Jul/2026:05:16:50 +0200] "POST /wp-login.php HTTP/1.1" 301 169 "https://[removed].org/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Gecko/20100101 Firefox/122.0" 157.230.251.56 - [14/Jul/2026:05:16:34 +0200] "POST /wp-login.php HTTP/1.1" 301 169 "https://[removed].org/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.6167.85 Safari/537.36" 157.230.251.56 - [14/Jul/2026:05:16:21 +0200] "POST /wp-login.php HTTP/1.1" 301 169 "https://[removed].org/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.130 Safari/537.36" .... show less	Brute-Force Web App Attack
🇬🇷 setupgr	2026-07-14 01:59:23 (2 days ago)	(wplogin_block) Blocked WP-Login Access Attempt 157.230.251.56 (SG/Singapore/-/Singapore (Pioneer)/- ... show more (wplogin_block) Blocked WP-Login Access Attempt 157.230.251.56 (SG/Singapore/-/Singapore (Pioneer)/-/[AS14061 DIGITALOCEAN-ASN]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 157.230.251.56 - - [14/Jul/2026:04:59:08 +0300] "POST /wp-login.php HTTP/1.1" 200 4838 "https://www.ftiaxtomonosou.gr/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Gecko/20100101 Firefox/118.0.2" show less	Port Scan

Showing 1 to 15 of 71 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 205.210.31.72

🇧🇴 200.58.83.79

🇰🇿 194.67.82.11

🇵🇱 185.16.38.37

🇺🇸 172.253.214.19

🇰🇷 121.131.220.157

🇦🇺 115.70.16.87

🇺🇸 50.6.229.52

🇺🇸 44.200.31.135

🇰🇷 211.240.117.71

🇺🇸 192.169.213.186

🇨🇳 183.152.70.241

🇺🇸 136.118.26.234

🇻🇳 118.69.134.243

🇨🇳 111.61.175.117

🇰🇷 110.14.192.20

🇫🇷 91.196.152.27

🇺🇸 66.132.172.250

🇺🇸 66.18.11.227

🇺🇸 20.168.7.214