JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 157.230.9.107

157.230.9.107 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 0%: ?

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	North Bergen, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 157.230.9.107

Whois 157.230.9.107

IP Abuse Reports for 157.230.9.107:

This IP address has been reported a total of 16 times from 13 distinct sources. 157.230.9.107 was first reported on May 7th 2025, and the most recent report was 5 months ago.

Old Reports: The most recent abuse report for this IP address is from 5 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 arirabinowitz.com	2026-01-23 21:13:00 (5 months ago)	157.230.9.107 - - [18/Jan/2026:05:12:33 -0500] "DELETE /actuator/gateway/routes/38QDjytWyOrNT44c1veO ... show more 157.230.9.107 - - [18/Jan/2026:05:12:33 -0500] "DELETE /actuator/gateway/routes/38QDjytWyOrNT44c1veOZWkfmLF HTTP/1.1" 404 29326 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" 157.230.9.107 - - [18/Jan/2026:05:12:33 -0500] "POST /actuator/gateway/refresh HTTP/1.1" 404 29326 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.3 Safari/605.1.15" 157.230.9.107 - - [18/Jan/2026:05:12:33 -0500] "POST /actuator/gateway/routes/38QDjytWyOrNT44c1veOZWkfmLF HTTP/1.1" 404 29326 "-" "Mozilla/5.0 (Macintosh, Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.3 Safari/605.1.15" show less	Hacking Web App Attack
🇺🇸 arirabinowitz.com	2026-01-19 21:22:00 (5 months ago)	157.230.9.107 - - [18/Jan/2026:05:12:33 -0500] "DELETE /actuator/gateway/routes/38QDjytWyOrNT44c1veO ... show more 157.230.9.107 - - [18/Jan/2026:05:12:33 -0500] "DELETE /actuator/gateway/routes/38QDjytWyOrNT44c1veOZWkfmLF HTTP/1.1" 404 29326 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" 157.230.9.107 - - [18/Jan/2026:05:12:33 -0500] "POST /actuator/gateway/refresh HTTP/1.1" 404 29326 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.3 Safari/605.1.15" 157.230.9.107 - - [18/Jan/2026:05:12:33 -0500] "POST /actuator/gateway/routes/38QDjytWyOrNT44c1veOZWkfmLF HTTP/1.1" 404 29326 "-" "Mozilla/5.0 (Macintosh, Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.3 Safari/605.1.15" show less	Hacking Web App Attack
🇬🇧 seniorlinuxadmin	2026-01-19 09:14:19 (5 months ago)	157.230.9.107 - - [19/Jan/2026:09:14:17 +0000] "GET /geoserver/wfs?service=WFS&request=GetCapabiliti ... show more 157.230.9.107 - - [19/Jan/2026:09:14:17 +0000] "GET /geoserver/wfs?service=WFS&request=GetCapabilities HTTP/1.1" 403 158 "-" "Mozilla/5.0 (ZZ; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36" show less	Port Scan Web App Attack
🇩🇪 dpsbs	2026-01-19 07:49:46 (5 months ago)	url scanning on multiple public ips detected	Bad Web Bot
🇬🇧 essinghigh	2026-01-18 08:23:20 (5 months ago)	IPS Detection: 157.230.9.107 -> DPT: 80	Port Scan
🇩🇰 RhQM	2026-01-17 23:55:45 (5 months ago)		Bad Web Bot Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-01-17 23:12:57 (5 months ago)	(mod_security) mod_security (id:210730) triggered by 157.230.9.107 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 157.230.9.107 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jan 17 18:12:53.462234 2026] [security2:error] [pid 9678:tid 9678] [client 157.230.9.107:60112] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|192.64.150.114\|F\|2"] [data ".web.ui.webresource.axd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "192.64.150.114"] [uri "/Telerik.Web.UI.WebResource.axd"] [unique_id "aWwXdSOUzyLUX8DX2BZoIQAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇷 SOC Blue Team	2026-01-17 09:35:35 (5 months ago)	Tatic: TA0040 \| Technique: T1499 \| Source: SIEM \| Country Destination: BR	Port Scan
Anonymous	2026-01-17 06:20:01 (5 months ago)		Brute-Force Bad Web Bot Web App Attack
🇺🇸 MPL	2025-12-18 06:25:32 (6 months ago)	tcp/27017 (3 or more attempts)	Port Scan
🇬🇧 guldkage	2025-12-18 06:22:30 (6 months ago)	Unauthorized connection attempt detected from IP address 157.230.9.107 to port 27017 (uk-01) [MONGOD ... show more Unauthorized connection attempt detected from IP address 157.230.9.107 to port 27017 (uk-01) [MONGODB] show less	Exploited Host
🇺🇸 donarev419	2025-12-18 06:13:22 (6 months ago)	Abused mongodb on 27017 2025-12-18T06:13:22Z client ":	Hacking SQL Injection
🇺🇸 MPL	2025-07-15 09:14:26 (11 months ago)	tcp/8883 (2 or more attempts)	Port Scan
🇳🇱 Study Bitcoin 🤗	2025-07-13 06:42:26 (1 year ago)	SSH Fail2Ban [srv67]	Brute-Force
🇳🇱 Study Bitcoin 🤗	2025-07-13 06:32:47 (1 year ago)	Port probe to tcp/8888 (newsedge) [ros]	Port Scan

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 1.212.87.26

🇮🇩 210.210.155.71

🇧🇯 154.127.36.237

🇮🇳 123.253.162.254

🇵🇰 103.73.102.106

🇫🇷 91.231.89.145

🇺🇸 54.91.122.193

🇳🇱 45.148.10.152

🇧🇪 34.156.169.85

🇺🇸 165.154.172.97

🇺🇸 104.28.195.187

🇳🇱 91.92.40.66

🇨🇳 14.103.117.105

🇧🇷 118.26.105.116

🇮🇳 103.228.146.246

🇵🇰 103.82.120.81

🇫🇷 88.142.46.185

🇨🇳 222.176.201.149

🇧🇷 190.89.184.79

🇲🇽 189.204.230.91