JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 157.230.99.181

157.230.99.181 was found in our database!

This IP was reported 33 times. Confidence of Abuse is 37%: ?

37%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 157.230.99.181

Whois 157.230.99.181

IP Abuse Reports for 157.230.99.181:

This IP address has been reported a total of 33 times from 22 distinct sources. 157.230.99.181 was first reported on March 10th 2021, and the most recent report was 18 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 MPL	2026-07-09 08:47:44 (18 hours ago)	tcp/3306	Port Scan
🇫🇷 Petre 21_ip	2026-07-09 08:30:49 (18 hours ago)	2026-07-09T10:30:47.846008+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c ... show more 2026-07-09T10:30:47.846008+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c0:69:11:b3:85:db:08:00 SRC=157.230.99.181 DST=155.133.26.57 LEN=44 TOS=0x00 PREC=0x00 TTL=245 ID=26317 PROTO=TCP SPT=61004 DPT=27017 WINDOW=1025 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 xmission.com	2026-07-09 08:30:09 (18 hours ago)	Blocked by UFW (TCP on 1000) Source port: 61001 TTL: 238 Packet length: 44 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 1000) Source port: 61001 TTL: 238 Packet length: 44 TOS: 0x08 This report (for 157.230.99.181) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 Axel	2026-07-09 08:18:21 (18 hours ago)	[2026-07-09 08:18:21 UTC] Honeypot Dev Web Server connection attempt \| AXFRA HONEYPOT	Web App Attack
Anonymous	2026-07-05 19:36:11 (4 days ago)	157.230.99.181 - - [05/Jul/2026:21:35:09 +0200] "GET /DiscoveryService?returnIDParam=idp&return=//d2 ... show more 157.230.99.181 - - [05/Jul/2026:21:35:09 +0200] "GET /DiscoveryService?returnIDParam=idp&return=//d261ab72wzzsk0.cloudfront.net/ HTTP/1.1" 404 29229 157.230.99.181 - - [05/Jul/2026:21:35:13 +0200] "GET /adserver/api/click.asp?b=1&u=1&r=//d261ab72wzzsk0.cloudfront.net/ HTTP/1.1" 404 29229 157.230.99.181 - - [05/Jul/2026:21:35:19 +0200] "GET /track/clk?r=//d261ab72wzzsk0.cloudfront.net/ HTTP/1.1" 404 29229 157.230.99.181 - - [05/Jul/2026:21:35:28 +0200] "GET /wp-json/featured-news/category?lang_slug=/d261ab72wzzsk0.cloudfront.net HTTP/1.1" 404 2394 157.230.99.181 - - [05/Jul/2026:21:35:34 +0200] "GET /d261ab72wzzsk0.cloudfront.net/ HTTP/1.1" 404 29869 157.230.99.181 - - [05/Jul/2026:21:35:45 +0200] "GET /d261ab72wzzsk0.cloudfront.net/..;/ HTTP/1.1" 404 29869 157.230.99.181 - - [05/Jul/2026:21:35:50 +0200] "GET //%2fd261ab72wzzsk0.cloudfront.net/ HTTP/1.1" 404 2103 157.230.99.181 - - [05/Jul/2026:21:35:56 +0200] "GET /d261ab72wzzsk0.cloudfront.net HTTP/1.1" 404 29869 157.230.99.181 - - [0 ... show less	Web Spam Web App Attack
🇺🇸 MPL	2025-10-07 13:02:46 (9 months ago)	tcp/8089 (2 or more attempts)	Port Scan
🇳🇱 EGP Abuse Dept	2025-10-07 12:55:55 (9 months ago)	Unauthorized connection to proxy port 8080	Port Scan Hacking
🇺🇸 xmission.com	2025-10-07 12:50:49 (9 months ago)	Blocked by UFW (TCP on 4782) Source port: 61012 TTL: 234 Packet length: 44 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 4782) Source port: 61012 TTL: 234 Packet length: 44 TOS: 0x08 This report (for 157.230.99.181) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 MPL	2025-10-07 12:22:03 (9 months ago)	tcp/14000 (2 or more attempts)	Port Scan
🇭🇰 Harold Wong	2025-10-07 12:07:39 (9 months ago)	$f2bV_matches	Brute-Force
Anonymous	2021-04-11 01:36:17 (5 years ago)	www.geburtshaus-fulda.de 157.230.99.181 [09/Apr/2021:16:03:50 +0200] "POST /wp-login.php HTTP/1.1" 2 ... show more www.geburtshaus-fulda.de 157.230.99.181 [09/Apr/2021:16:03:50 +0200] "POST /wp-login.php HTTP/1.1" 200 6772 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" www.geburtshaus-fulda.de 157.230.99.181 [09/Apr/2021:16:03:50 +0200] "POST /xmlrpc.php HTTP/1.1" 200 3978 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" show less	Web App Attack
🇩🇪 cerberusinformatica	2021-04-10 08:55:12 (5 years ago)	157.230.99.181 - - [10/Apr/2021:14:51:57 +0200] "POST /xmlrpc.php HTTP/1.1" 403 31 "-" "Mozilla/5.0 ... show more 157.230.99.181 - - [10/Apr/2021:14:51:57 +0200] "POST /xmlrpc.php HTTP/1.1" 403 31 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 157.230.99.181 - - [10/Apr/2021:14:55:11 +0200] "POST /xmlrpc.php HTTP/1.1" 403 461 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... show less	Web App Attack
🇬🇧 UKFast Security	2021-04-10 04:45:56 (5 years ago)	WordPress XML RPC POST Brute Force Attack	Web App Attack
🇩🇪 emha.koeln	2021-04-10 02:27:24 (5 years ago)	v2202006123119120844 157.230.99.181 - - [10/Apr/2021:08:19:36 +0200] "POST /wp-login.php HTTP/1.1" 2 ... show more v2202006123119120844 157.230.99.181 - - [10/Apr/2021:08:19:36 +0200] "POST /wp-login.php HTTP/1.1" 200 10180 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" v2202006123119120844 157.230.99.181 - - [10/Apr/2021:08:19:42 +0200] "POST /xmlrpc.php HTTP/1.1" 200 404 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" v2202006123119120844 157.230.99.181 - - [10/Apr/2021:08:27:23 +0200] "POST /wp-login.php HTTP/1.1" 200 10180 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" show less	Brute-Force Web App Attack
🇩🇪 iNetWorker	2021-04-09 18:08:05 (5 years ago)	trolling for resource vulnerabilities	Web App Attack

Showing 1 to 15 of 33 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇩 163.7.6.114

🇺🇸 147.185.132.81

🇩🇪 64.226.126.224

🇺🇸 64.62.156.140

🇺🇸 64.62.156.132

🇱🇹 62.60.130.219

🇲🇾 49.124.151.81

🇰🇷 222.96.44.234

🇩🇪 167.172.162.122

🇫🇮 147.185.133.33

🇺🇸 147.185.132.49

🇺🇸 147.185.132.30

🇩🇪 140.248.75.130

🇺🇸 136.35.246.152

🇮🇳 122.187.173.86

🇨🇦 68.183.202.94

🇳🇬 62.173.38.229

🇫🇷 62.171.151.236

🇰🇷 61.41.4.17

🇬🇧 35.203.211.35