JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

157.230.7.215

Activity Trending Down

Abuse confidence score ?

14% Caution

104 reports

48 reporters · latest 3 weeks ago

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	North Bergen, New Jersey

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 157.230.7.215

This IP address has been reported a total of 104 times from 48 distinct sources. 157.230.7.215 was first reported on May 22nd 2026, and the most recent report was 3 weeks ago. In the last 60 days, the top reporter locations were: Germany with 1 report; India with 1 report; United States of America with 1 report. The most common categories in these recent reports were: Hacking 3 times; Brute-Force 2 times; Port Scan 2 times; SSH 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-08-28 06:45:42 (3 weeks ago)	denied traffic to a honeypot network. destination port 5601.	Port Scan Hacking
🇺🇸 Cyber Crusader	2026-08-28 00:11:41 (3 weeks ago)	Hundreds of Attempts (at least) to Connect to and Access Firewall Ports	Port Scan Hacking Brute-Force
🇮🇳 evicky2002	2026-08-01 06:00:04 (1 month ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇺🇸 RAP	2026-07-08 01:14:49 (2 months ago)	2026-07-08 01:14:49 UTC Unauthorized activity to TCP port 8443. Web App	Port Scan Web App Attack
🇧🇬 pa4080	2026-07-08 00:55:50 (2 months ago)	Detected by ModSecurity. Host header is an IP address, Request URI: /	Hacking Web App Attack
🇫🇷 Fasetech	2026-06-08 22:34:26 (3 months ago)	SecLedge detected suspicious activity. Score: 135.6. Sensor: T-Pot.	Brute-Force
🇺🇸 NetGuard	2026-05-30 11:44:01 (3 months ago)	#honeypot #netguard247 #dionaea #networkexploit Captured by NetGuard 24/7 T-Pot honeypot (netguard24 ... show more #honeypot #netguard247 #dionaea #networkexploit Captured by NetGuard 24/7 T-Pot honeypot (netguard24-7.com). Timestamp: 2026-05-23T11:39:30.83+00:00 Attacker IP: 157.230.7.215 \| Port: 1433 \| Country: United States Honeypot: dionaea \| Attack: network_exploit Source: NetGuard 24/7 (netguard24-7.com) \| PhantomGrid Defense show less	Hacking SQL Injection Web App Attack
🇨🇦 Luhte	2026-05-26 18:21:01 (3 months ago)	Unsolicited TCP connection from 157.230.7.215 to port 0 at 2026-05-26T18:21:01Z. Source IP completed ... show more Unsolicited TCP connection from 157.230.7.215 to port 0 at 2026-05-26T18:21:01Z. Source IP completed three-way handshake to non-public service on this host. Detected by automated intrusion monitoring. show less	Port Scan Hacking
🇨🇦 Luhte	2026-05-26 12:37:32 (3 months ago)	Unsolicited TCP connection from 157.230.7.215 to port 0 at 2026-05-26T12:37:32Z. Source IP completed ... show more Unsolicited TCP connection from 157.230.7.215 to port 0 at 2026-05-26T12:37:32Z. Source IP completed three-way handshake to non-public service on this host. Detected by automated intrusion monitoring. show less	Port Scan Hacking
🇮🇩 Konaa	2026-05-25 16:03:12 (3 months ago)	Mail/Postfix abuse detected on SMTP/submission/custom mail ports. Attempts in recent mail log: 4. Ra ... show more Mail/Postfix abuse detected on SMTP/submission/custom mail ports. Attempts in recent mail log: 4. Raw evidence: 2026-05-24T18:39:45.832066+07:00 rapi postfix/8087/smtpd[1742662]: improper command pipelining after CONNECT from unknown[157.230.7.215]: GET /query?q=SHOW+DIAGNOSTICS HTTP/1.1\r Host: 31.56.192.16:8087\r User-Agent: Go-http-client/1.1\r Con 2026-05-24T18:39:46.059547+07:00 rapi postfix/8087/smtpd[1742629]: lost connection after CONNECT from unknown[157.230.7.215] 2026-05-24T18:39:46.314915+07:00 rapi postfix/8087/smtpd[1742662]: improper command pipelining after CONNECT from unknown[157.230.7.215]: GET /query?q=SHOW+DIAGNOSTICS HTTP/1.1\r Host: 31.56.192.16:8087\r User-Agent: Go-http-client/1.1\r Con 2026-05-24T18:39:46.807803+07:00 rapi postfix/8087/smtpd[1742662]: improper command pipelining after CONNECT from unknown[157.230.7.215]: GET /query?q=SHOW+DIAGNOSTICS HTTP/1.1\r Host: 31.56.192.16:8087\r User-Agent: Go-http-client/1.1\r Con show less	Email Spam Port Scan Brute-Force
🇩🇪 EnthecSolutions	2026-05-25 06:01:02 (3 months ago)	Detected by Enthec Solutions. \| Attempts: 101 in 24h \| Target port: 1434	Port Scan Hacking
🇨🇦 Luhte	2026-05-25 04:29:46 (3 months ago)	Unsolicited TCP connection from 157.230.7.215 to port 0 at 2026-05-25T04:29:46Z. Source IP completed ... show more Unsolicited TCP connection from 157.230.7.215 to port 0 at 2026-05-25T04:29:46Z. Source IP completed three-way handshake to non-public service on this host. Detected by automated intrusion monitoring. show less	Port Scan Hacking
🇬🇧 PeravixGroup	2026-05-24 20:22:24 (3 months ago)	Honeypot detection: Memcached unauthorized access / amplification attempt on port 11211. Severity: M ... show more Honeypot detection: Memcached unauthorized access / amplification attempt on port 11211. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇩🇪 guldkage	2026-05-24 18:13:40 (3 months ago)	Unauthorized connection attempt detected from IP address 157.230.7.215 to port 3306 (ger-02) [MYSQL]	Exploited Host
🇱🇺 SiteXL	2026-05-24 18:06:02 (3 months ago)	{"event":{"DateTime":"2026-05-24T17:53:27Z","RemoteAddr":"157.230.7.215:23854","Protocol":"TCP","Com ... show more {"event":{"DateTime":"2026-05-24T17:53:27Z","RemoteAddr":"157.230.7.215:23854","Protocol":"TCP","Command":"GET /query?q=SHOW+DIAGNOSTICS HTTP/1.1\r\nHost: 192.98.123.11:3306\r\nUser-Agent: Go-http-client/1.1\r\nConnection: close\r\n\r\n","CommandOutput":"","Status":"Stateless","Msg":"New TCP attempt","ID":"01dd381a-1d16-499b-afd4-bfaf1dc84d1a","Environ":"","User":"","Password":"","Client":"","Headers":"","HeadersMap":null,"Cookies":"","UserAgent":"","HostHTTPRequest":"","Body":"","HTTPMethod":"","RequestURI":"","Description":"Mysql 8.0.29","SourceIp":"157.230.7.215","SourcePort":"23854","TLSServerName":"","Handler":""},"level":"info","msg":"New Event","status":"Stateless"} {"event":{"DateTime":"2026-05-24T17:53:27Z","RemoteAddr":"157.230.7.215:23864","Protocol":"TCP","Command":"GET /v2/_catalog HTTP/1.1\r\nHost: 192.98.123.11:3306\r\nUser-Agent: Go-http-client/1.1\r\nConnection: close\r\n\r\n","CommandOutput":"","Status":"Stateless","Msg":"New TCP attempt","ID":"0c198d44-9e58-440e-9549-37ef4746f55a","Environ" show less	Hacking Port Scan Brute-Force

Showing 1 to 15 of 104 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇦 188.163.93.49

🇨🇳 116.179.32.164

🇧🇬 78.128.114.162

🇺🇸 63.135.161.71

🇧🇪 34.77.23.255

🇺🇸 20.118.237.46

🇺🇦 193.138.144.215

🇷🇴 193.46.255.86

🇵🇱 188.146.46.161

🇺🇸 172.236.111.98

🇺🇸 172.110.223.179

🇩🇪 172.68.192.176

🇷🇴 141.98.83.48

🇨🇳 140.246.137.102

🇮🇳 125.62.146.6

🇮🇳 122.170.99.195

🇳🇱 109.160.32.238

🇺🇸 104.234.53.215

🇧🇩 103.158.119.148

🇰🇪 102.0.30.82