AbuseIPDB » 157.230.80.149

157.230.80.149 was found in our database!

This IP was reported 71 times. Confidence of Abuse is 25%: ?

25%

ISP	DigitalOcean LLC
Usage Type	Data Center/Web Hosting/Transit
Domain Name	digitalocean.com
Country	United States of America
City	North Bergen, New Jersey

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 157.230.80.149

Whois 157.230.80.149

IP Abuse Reports for 157.230.80.149:

This IP address has been reported a total of 71 times from 37 distinct sources. 157.230.80.149 was first reported on October 22nd 2022, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
BSG Webmaster	2024-07-29 07:35:08 (1 month ago)	Port scanning (Port 443)	Port Scan Hacking
gu-alvareza	2024-07-29 07:05:17 (1 month ago)	SystemBC.Botnet	DDoS Attack Hacking
Bon I.T	2024-07-29 06:17:00 (1 month ago)	GET /upl.php HTTP/1.1 GET /geoip/ HTTP/1.1 \x16\x03\x01 GET /form.html HTTP/1.1	Hacking Web App Attack
dendi awa	2024-07-29 04:26:23 (1 month ago)	backdoor: SystemBC.Botnet	Web App Attack
Anonymous	2024-07-29 02:52:23 (1 month ago)	Ports: 20,21,25,53,80,110,143,443,465,587,993,995,2077,2078,2079,2080,2082,2083,2086,2087,2095,2096, ... show morePorts: 20,21,25,53,80,110,143,443,465,587,993,995,2077,2078,2079,2080,2082,2083,2086,2087,2095,2096,3306,2195; Direction: 0; Trigger: LF_CUSTOMTRIGGER show less	Brute-Force SSH
Kraften	2024-07-29 01:32:53 (1 month ago)	Trying script web attack ...	Web App Attack
mw	2024-07-28 23:15:23 (1 month ago)	157.230.80.149 - - [28/Jul/2024:18:15:23 -0500] "GET / HTTP/1.1" 404 193 "-" "Mozilla/5.0 (Windows N ... show more157.230.80.149 - - [28/Jul/2024:18:15:23 -0500] "GET / HTTP/1.1" 404 193 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 157.230.80.149 - - [28/Jul/2024:18:15:23 -0500] "GET /form.html HTTP/1.1" 404 136 "-" "curl/8.1.2" 157.230.80.149 - - [28/Jul/2024:18:15:23 -0500] "GET /upl.php HTTP/1.1" 404 136 "-" "Mozilla/5.0" 157.230.80.149 - - [28/Jul/2024:18:15:23 -0500] "GET /geoip/ HTTP/1.1" 404 193 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 157.230.80.149 - - [28/Jul/2024:18:15:23 -0500] "GET /favicon.ico HTTP/1.1" 404 193 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
Anonymous	2024-07-28 23:03:09 (1 month ago)	Drop from IP address 157.230.80.149 to tcp-port 80	Port Scan
www.remote24.se	2024-07-28 20:00:48 (1 month ago)	3389BruteforceStormFW21	Brute-Force
SilverZippo	2024-07-28 17:01:09 (1 month ago)	Web App Attack	Web App Attack
webbie	2024-07-28 16:06:41 (1 month ago)	157.230.80.149 - - [28/Jul/2024:18:06:35 +0200] "GET /ab2g HTTP/1.1" 403 3446 "Mozilla/5.0 zgrab/0.x ... show more157.230.80.149 - - [28/Jul/2024:18:06:35 +0200] "GET /ab2g HTTP/1.1" 403 3446 "Mozilla/5.0 zgrab/0.x" 157.230.80.149 - - [28/Jul/2024:18:06:36 +0200] "GET /ab2h HTTP/1.1" 403 3446 "Mozilla/5.0 zgrab/0.x" 157.230.80.149 - - [28/Jul/2024:18:06:36 +0200] "GET /alive.php HTTP/1.1" 404 3443 "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 157.230.80.149 - - [28/Jul/2024:18:06:39 +0200] "GET / HTTP/1.0" 400 528 "-" 157.230.80.149 - - [28/Jul/2024:18:06:39 +0200] "GET /t4 HTTP/1.1" 404 3443 "Mozilla/5.0" ... show less	Brute-Force Web App Attack
mw	2024-07-28 14:22:17 (1 month ago)	157.230.80.149 - - [28/Jul/2024:09:22:13 -0500] "GET /ab2g HTTP/1.1" 404 36274 "-" "Mozilla/5.0 zgra ... show more157.230.80.149 - - [28/Jul/2024:09:22:13 -0500] "GET /ab2g HTTP/1.1" 404 36274 "-" "Mozilla/5.0 zgrab/0.x" 157.230.80.149 - - [28/Jul/2024:09:22:14 -0500] "GET /ab2h HTTP/1.1" 404 36273 "-" "Mozilla/5.0 zgrab/0.x" 157.230.80.149 - - [28/Jul/2024:09:22:14 -0500] "GET /alive.php HTTP/1.1" 404 193 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 157.230.80.149 - - [28/Jul/2024:09:22:16 -0500] "GET /t4 HTTP/1.1" 404 36267 "-" "Mozilla/5.0" 157.230.80.149 - - [28/Jul/2024:09:22:17 -0500] "GET /teorema505?t=1 HTTP/1.1" 404 36286 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
mr_whitehat	2023-03-24 00:38:54 (1 year ago)	Probed for vulnerable web application: request line: /ab2g (Possible exploit:Scanning for Cobalt Str ... show moreProbed for vulnerable web application: request line: /ab2g (Possible exploit:Scanning for Cobalt Strike C2 server) show less	Web App Attack
BarBonnetje	2023-03-23 14:18:03 (1 year ago)	157.230.80.149 - - [23/Mar/2023:15:18:02 +0100] "\x07\x9F\xA0(Q}j\xF7\x1A\xA8\xFF\xFD_\xD5\x1D7" 400 ... show more157.230.80.149 - - [23/Mar/2023:15:18:02 +0100] "\x07\x9F\xA0(Q}j\xF7\x1A\xA8\xFF\xFD_\xD5\x1D7" 400 166 "-" "-" ... show less	Web App Attack
i-turnradio.nl	2023-03-23 13:21:05 (1 year ago)	2023-03-23 @ 14:21:05 (CET) ~ Blocked for trying to access: /ab2g	Web App Attack