JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 157.230.28.93

157.230.28.93

Neutral Activity

98 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

DigitalOcean, LLC

Usage Type

Data Center/Web Hosting/Transit

ASN

AS14061

Domain Name

digitalocean.com

Country

🇩🇪 Germany

City

Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

157.230.28.93 has been reported 98 times. The most recent report is from 3 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 157.230.28.93:

This IP address has been reported a total of 98 times from 63 distinct sources. 157.230.28.93 was first reported on September 25th 2021, and the most recent report was 3 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Mailguard-FRD	2026-05-22 21:56:19 (3 months ago)	May 22 23:56:18 [redacted] postfix/submission/smtpd[4183171]: lost connection after CONNECT from unk ... show more May 22 23:56:18 [redacted] postfix/submission/smtpd[4183171]: lost connection after CONNECT from unknown[157.230.28.93] ... show less	Email Spam Brute-Force
🇦🇺 LiftUp Hosting	2026-05-22 20:33:58 (3 months ago)	Honeypot hit: Empty payload (likely service probe); 1911 [15] TCP	Port Scan
🇦🇪 abusiveIntelligence	2026-05-22 07:20:00 (3 months ago)	RDP connect attempt: Nmap Scanner	Brute-Force
🇺🇸 donarev419	2026-05-22 06:18:12 (3 months ago)	Port scan detected on port 18789 (connection without data transfer)	Port Scan
🇺🇸 xxkodedxx	2026-05-21 18:23:31 (3 months ago)	[Zorvexus edge-defense] Edge-block (probe URI / bad UA / hostile vhost) Trigger: 16× edge-block in 1 ... show more [Zorvexus edge-defense] Edge-block (probe URI / bad UA / hostile vhost) Trigger: 16× edge-block in 10m window. Origin: DE / AS14061 DigitalOcean, LLC Active: 18:22:47→18:22:53 UTC Volume: 16 HTTP req Probed: /, /odinhttpcall1779387768, \xB1P7\x19!j\x8DC\xDF\x90\x01n\x22\xCC'/\xF3\x90J\x822\x89\xEF\x15F\xE8, \xECe^\x17\xCA\xE2JIFu\xDD\x22\x04)6\xA2\xFCj\xD6'\xB2\xD1\xEF\x90\x88\xBF\xAF\xB16a, _\xA8\xDE Status mix: 444×9 400×7 Vhost fishing: 67.217.240.72 UA: "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)" Auto-banned 30d. zorvexus-banner. show less	Bad Web Bot Web App Attack
🇺🇸 drewf.ink	2026-05-21 11:28:37 (3 months ago)	[11:28] Port scanning. Port(s) scanned: TCP/8080	Port Scan
🇺🇸 drewf.ink	2026-05-21 11:09:35 (3 months ago)	[11:09] Port scanning. Port(s) scanned: TCP/6443	Port Scan
🇨🇿 sajmon0011	2026-05-21 07:16:05 (3 months ago)	157.230.28.93 - - [21/May/2026:09:16:04 +0200] "POST /sdk HTTP/1.1" 404 196 "-" "Mozilla/5.0 (compat ... show more 157.230.28.93 - - [21/May/2026:09:16:04 +0200] "POST /sdk HTTP/1.1" 404 196 "-" "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)" ... show less	Web App Attack
🇺🇸 gu-alvareza	2026-05-21 07:05:28 (3 months ago)	Nmap.Script.Scanner	Port Scan
🇩🇪 dispaisyenterprises	2026-05-21 06:39:46 (3 months ago)	Honeypot [fra-de-honeypot]: Empty payload (likely service probe); 9092 [33] TCP Reported by DisPaisy ... show more Honeypot [fra-de-honeypot]: Empty payload (likely service probe); 9092 [33] TCP Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇫🇷 Security_Whaller	2026-05-21 00:38:20 (3 months ago)	Malicious activity detected on Honeypot.	Brute-Force Hacking Web App Attack
🇩🇪 Dominik Lysiak	2026-05-20 11:52:27 (3 months ago)	157.230.28.93 - - [20/May/2026:13:52:26 +0200] "GET / HTTP/1.0" 444 0 "-" "-" 157.230.28.93 - - [20/ ... show more 157.230.28.93 - - [20/May/2026:13:52:26 +0200] "GET / HTTP/1.0" 444 0 "-" "-" 157.230.28.93 - - [20/May/2026:13:52:26 +0200] "OPTIONS / HTTP/1.0" 444 0 "-" "-" 157.230.28.93 - - [20/May/2026:13:52:26 +0200] "OPTIONS / RTSP/1.0" 400 150 "-" "-" 157.230.28.93 - - [20/May/2026:13:52:26 +0200] "POST /sdk HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)" 157.230.28.93 - - [20/May/2026:13:52:26 +0200] "GET / HTTP/1.0" 444 0 "-" "-" 157.230.28.93 - - [20/May/2026:13:52:26 +0200] "GET /odinhttpcall1779277946 HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)" 157.230.28.93 - - [20/May/2026:13:52:26 +0200] "\x16\x03\x01\x02\x00\x01\x00\x01\xFC\x03\x03\xF2\xE5Q\xA9\x8F\xEE\xB9x/5\xBD\xEC\x83\x86?\x22\x0B\xAE\xADT\x18H]\xE2\x07E6" 400 150 "-" "-" 157.230.28.93 - - [20/May/2026:13:52:26 +0200] "\x16\x03\x01\x02\x00\x01\x00\x01\xFC\x03\x03\x16\xDE\x12g\xCD\xF9\x8A\xA0" 400 150 "-" "-" 157.230.28.93 - - [20/May/2026:13:52:26 +0200] "\x16\x03\ ... show less	Web App Attack
🇺🇸 gu-alvareza	2026-05-20 07:05:28 (3 months ago)	Nmap.Script.Scanner	Port Scan
Anonymous	2026-05-20 03:08:07 (3 months ago)	157.230.28.93 - - [20/May/2026:05:08:05 +0200] "GET / HTTP/1.0" 400 248 "-" "-" 157.230.28.93 - - [2 ... show more 157.230.28.93 - - [20/May/2026:05:08:05 +0200] "GET / HTTP/1.0" 400 248 "-" "-" 157.230.28.93 - - [20/May/2026:05:08:06 +0200] "POST /sdk HTTP/1.1" 400 248 "-" "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)" 157.230.28.93 - - [20/May/2026:05:08:06 +0200] "GET /odinhttpcall1779246485 HTTP/1.1" 400 248 "-" "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)" 157.230.28.93 - - [20/May/2026:05:08:07 +0200] "GET /HNAP1 HTTP/1.1" 400 248 "-" "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)" 157.230.28.93 - - [20/May/2026:05:08:07 +0200] "GET /evox/about HTTP/1.1" 400 248 "-" "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)" ... show less	Web App Attack
🇩🇪 lumbermatt_de	2026-05-19 19:04:50 (3 months ago)	Nmap probe detected	Hacking

Showing 1 to 15 of 98 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇮 193.187.110.213

🇺🇸 172.253.251.152

🇬🇷 62.38.20.61

🇹🇭 58.137.94.220

🇨🇳 183.199.42.210

🇷🇺 178.140.129.139

🇧🇷 170.83.36.12

🇵🇭 119.93.249.179

🇮🇳 103.180.215.70

🇻🇳 103.161.17.103

🇷🇴 80.94.95.116

🇳🇱 63.250.56.12

🇺🇦 37.53.42.180

🇮🇹 34.154.181.16

🇺🇸 24.251.174.177

🇨🇳 14.103.20.9

🇺🇸 192.220.112.74

🇦🇪 176.204.246.102

🇮🇩 103.165.228.210

🇳🇱 77.91.71.67