JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

185.157.163.138

Recent Activity

Abuse confidence score ?

37% Elevated

15 reports

11 reporters · latest 2 days ago

ISP	OVPN Gothenburg
Usage Type	Data Center/Web Hosting/Transit
ASN	AS42675
Hostname(s)	185-157-163-138.pool.ovpn.com
Domain Name	ovpn.com
Country	🇸🇪 Sweden
City	Gothenburg, Vastra Gotaland

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 185.157.163.138

Export CSV

This IP address has been reported a total of 15 times from 11 distinct sources. 185.157.163.138 was first reported on May 31st 2025, and the most recent report was 2 days ago. In the last 60 days, the top reporter locations were: United States of America with 5 reports; Germany with 2 reports; Estonia with 1 report. The most common categories in these recent reports were: Port Scan 9 times; Hacking 2 times; Brute-Force 2 times; SSH 1 time; Web App Attack 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 cwytech	2026-10-08 04:33:15 (2 days ago)	Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/pf-geofence-high.	Hacking
🇺🇸 xmission.com	2026-10-06 14:44:34 (4 days ago)	Blocked by UFW (TCP on 61916) Source port: 9099 TTL: 235 Packet length: 40 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 61916) Source port: 9099 TTL: 235 Packet length: 40 TOS: 0x08 This report (for 185.157.163.138) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇪🇪 Tsumugi Kotobuki	2026-09-23 05:02:37 (2 weeks ago)	Port Scan on Honeypot \| Ports: 80/HTTP \| Proto: TCP(1) \| Flags: all SYN \| TTL: 244 \| Len: 40B \| Win: ... show more Port Scan on Honeypot \| Ports: 80/HTTP \| Proto: TCP(1) \| Flags: all SYN \| TTL: 244 \| Len: 40B \| Win: 1024(1) \| rDNS: 185-157-163-138.pool.ovpn.com \| F2B/ufw-honeypot@2026-09-23T05:02:37Z show less	Port Scan Hacking
🇩🇪 ghostwarriors	2026-09-20 14:20:20 (2 weeks ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
🇩🇪 Ilop	2026-09-20 14:00:03 (2 weeks ago)	[hp-100] 26 unsolicited packets to honeypot ports 36655,62150,7391,53250,10999,17358 (OCI DShield se ... show more [hp-100] 26 unsolicited packets to honeypot ports 36655,62150,7391,53250,10999,17358 (OCI DShield sensor) show less	Port Scan
🇺🇸 MPL	2026-09-07 02:01:44 (1 month ago)	tcp port scan (1051 or more attempts)	Port Scan
🇺🇸 xmission.com	2026-09-07 00:51:40 (1 month ago)	Blocked by UFW (TCP on 40478) Source port: 9099 TTL: 233 Packet length: 40 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 40478) Source port: 9099 TTL: 233 Packet length: 40 TOS: 0x00 This report (for 185.157.163.138) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇬🇧 OptimusGO	2026-08-21 13:40:20 (1 month ago)	Malicious activity detected: web_attack Server: commstackbc (185.127.18.66) Attack: web_attack Time ... show more Malicious activity detected: web_attack Server: commstackbc (185.127.18.66) Attack: web_attack Timestamp: 2026-08-21 14:40:20 UTC Log evidence: 08/21/2026-14:40:19.313196 [] [1:1000101:2] SECURITY Port Scan Detected - Multiple Unauthorized Ports [] [Classification: Attempted Information Leak] [Priority: 1] {TCP} 185.157.163.138:9099 -> 185.127.18.66:17962 08/21/2026-14:40:19.319247 [] [1:1000090:1] POLICY Unauthorized Management Port Access [] [Classification: Attempted Administrator Privilege Gain] [Priority: 1] {TCP} 185.157.163.138:9099 -> 185.127.18.66:22 show less	Port Scan Brute-Force
🇵🇱 li sek	2026-08-21 03:18:28 (1 month ago)	Skanowanie (HoneyTrap)	Port Scan
🇺🇸 xmission.com	2026-08-21 02:54:00 (1 month ago)	Blocked by UFW (TCP on 80) Source port: 9099 TTL: 233 Packet length: 40 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 80) Source port: 9099 TTL: 233 Packet length: 40 TOS: 0x00 This report (for 185.157.163.138) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇺🇸 xmission.com	2026-07-04 14:54:59 (3 months ago)	Blocked by UFW (TCP on 22969) Source port: 46091 TTL: 44 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 22969) Source port: 46091 TTL: 44 Packet length: 60 TOS: 0x08 This report (for 185.157.163.138) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 matthieul.dev	2026-06-18 21:50:19 (3 months ago)	Blocked by os-abuseipdb; 10 hits, proto=tcp,udp, ports=2118	Port Scan Brute-Force
🇺🇸 xmission.com	2026-03-22 10:23:48 (6 months ago)	Blocked by UFW (TCP on 53406) Source port: 59471 TTL: 106 Packet length: 52 TOS: 0x08 This report ( ... show more Blocked by UFW (TCP on 53406) Source port: 59471 TTL: 106 Packet length: 52 TOS: 0x08 This report (for 185.157.163.138) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2025-06-13 09:42:43 (1 year ago)	Aggressive web scan	Web App Attack
🇺🇸 COMPLEX	2025-05-31 17:03:24 (1 year ago)	Triggered Cloudflare WAF (l7ddos) from SE. Action taken: BLOCK ASN: 42675 (OBEHOSTING Obehosting AB) ... show more Triggered Cloudflare WAF (l7ddos) from SE. Action taken: BLOCK ASN: 42675 (OBEHOSTING Obehosting AB) Protocol: HTTP/2 (GET method) Endpoint: / show less	DDoS Attack Bad Web Bot

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 194.67.109.34

🇸🇬 159.65.5.51

🇩🇪 109.160.32.173

🇬🇧 86.178.23.181

🇰🇷 52.141.3.247

🇳🇱 45.148.10.157

🇮🇳 20.207.121.172

🇺🇸 216.25.89.129

🇧🇷 191.251.9.23

🇮🇩 152.32.153.130

🇷🇺 91.189.167.167

🇨🇦 85.217.149.61

🇬🇧 64.205.72.168

🇨🇦 45.198.224.125

🇧🇪 35.241.178.74

🇮🇩 182.11.155.128

🇺🇸 172.208.48.177

🇺🇸 162.216.150.83

🇺🇸 162.216.149.215

🇮🇳 125.21.59.218