Significant Threat
IP 157.230.19.140 identified as significant threat (8/10) from 27 events.
Multiple malicious indicators detected. Confidence level: 84%.
More threatening than 90% of monitored IPs
IP Address
157.230.19.140
IPv4
Public
DE
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 10% High Threat
DE
Location
DIGITALOCEAN-ASN
ASN 14061
27
Reports
Mixed
Data Source
Threat Categories
Bad Web Bot
12
Web App Attack
10
Hacking
9
WP Config Exposure
8
WP Plugin Exploit
6
WP User Enumeration
6
Technical Details
Bad web bots ignore robots.txt, scrape content aggressively, and may probe for vulnerabilities.
Recommended Mitigations
Implement bot detection, rate limiting, and use services like Cloudflare Bot Management.
Behavioral Analysis
Activity Pattern:
Recent Spike
Significant activity increase over past 7 days indicates renewed threat actor interest or system compromise.
First Observed
11. September 2026
Last Activity
5. October 2026
Recent (7 days)
3 incidents
Cloud Infrastructure
This IP operates from DigitalOcean cloud infrastructure. Cloud-hosted threats can be provisioned and abandoned quickly, affecting attribution.
Cloud-hosted malicious activity often indicates automated or scalable attack infrastructure.
Security Recommendations
Implement rate limiting or temporary blocking measures.
Immediate monitoring recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
6/10
Moderate
Confidence Score
84%
Verified
Confidence History
28. Aug 2025 - 5. Oct 2026
84%
Current
Stable
Trend
Security Reports (27)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Port Scan Hacking Web App Attack +7 | Honeypot x10 | 75% | |
| Bad Web Bot Web App Attack | Community | 75% | |
| Exploited Host | Honeypot | 75% | |
| Bad Web Bot Web App Attack | Community | 75% | |
| Bad Web Bot Web App Attack | Community | 75% | |
| Bad Web Bot Web App Attack | Community | 75% | |
| Bad Web Bot Web App Attack | Community | 75% | |
| Bad Web Bot Web App Attack | Community | 75% | |
| Bad Web Bot Web App Attack | Community | 75% | |
| Port Scan Hacking Web App Attack +6 | Honeypot x7 | 75% | |
| Hacking | Community | 75% | |
| Port Scan Hacking Web App Attack +7 | Honeypot x6 | 75% | |
| WP Config Exposure WP Plugin Exploit WP User Enumeration | Honeypot x3 | 75% | |
| WP Config Exposure Brute-Force WP Login Brute Force +3 | Honeypot x5 | 75% | |
| WP Config Exposure Brute-Force WP Login Brute Force +3 | Honeypot x5 | 75% | |
| Hacking | Community | 75% | |
| WP Plugin Scanning WP Version Scanning WP Config Exposure | Community | 75% | |
| WP Plugin Scanning WP Version Scanning WP Config Exposure | Community | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Bad Web Bot | Community | 75% | |
| Bad Web Bot | Community | 75% | |
| Bad Web Bot | Community | 75% | |
| Bad Web Bot | Community | 75% | |
| Bad Web Bot | Community | 75% |
Technical Details
Basic Information
- IP Address
- 157.230.19.140
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class B
Geolocation
- Country
-
DE
- ASN
- AS14061
- ISP
- DIGITALOCEAN-ASN
DNS Information
- Reverse DNS
- d9fc35a06b.scan.leakix.org
- PTR Record
- Yes
- Connection Type
- Static
Statistics
- Total Reports
- 27
- First Reported
- 28 Aug 2025
- Last Reported
- 5 Oct 2026, 19:06
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS14061
DigitalOcean, LLC
NL
Network Threat Assessment
4/10
This network has low threat indicators with minimal suspicious activity.
Network Statistics
10,971
Total IPs Monitored
417,845
Total Reports
38.1
Reports per IP
Network Context
This IP address belongs to DigitalOcean, LLC (AS14061), which manages 10,971 IP addresses in our monitoring system. Out of these, 417,845 have been reported for suspicious activities, resulting in a network-wide threat level of 4/10.
Network notice:
This network shows some suspicious activity patterns. Monitor interactions with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
90
%
Global Threat Ranking
This IP is more threatening than 90% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 837,776 reported IPs worldwide
Threat Level
8/10
avg: 6.3
+
Total Reports
27
avg: 9
++
Network Comparison
Compared against 24,617 IPs in ASN 14061
Threat Level
8/10
network avg: 7.5
=
Total Reports
27
network avg: 25
=
Network DIGITALOCEAN-ASN has overall threat level 4/10
Geographic Comparison
Compared against 18,549 IPs in DE
Threat Level
8/10
country avg: 7.3
=
Total Reports
27
country avg: 30
=
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
1 Oct 2026
5 reports
Daily Average
0.4
reports/day
Most Active
Thursday
12 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
4/10
Current Threat
5/10
Distribution of threat categories reported over time.
Top Threat Categories
Bad Web Bot
12
Web App Attack
10
Hacking
9
WP Config Exposure
8
WP Plugin Exploit
6
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 22:00 with 8 reports
Weekly Activity
Geographic Threat Distribution
761,580 threat incidents tracked globally • Last 24h: 30,347 Logs
FEED
Top Threat Sources
-
01
United States149,044 19.6% -
02
Brazil112,099 14.7%
-
03
India88,130 11.6%
-
04
China46,240 6.1%
-
05
SC29,255 3.8%
-
06
Germany18,549 2.4%
-
07
Netherlands18,096 2.4%
-
08
Pakistan18,020 2.4%
-
09
Argentina16,337 2.1%
-
10
Colombia15,199 2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
9.1/10
Avg Threat
100%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
165.227.15.209
8/10
Confidence
100%
Reports
269
Location
US
US
139.59.83.112
10/10
Confidence
100%
Reports
37
Location
IN
IN
188.166.159.7
10/10
Confidence
100%
Reports
32
Location
GB
GB
167.172.176.118
10/10
Confidence
100%
Reports
23
Location
DE
DE
157.230.59.111
10/10
Confidence
100%
Reports
22
Location
US
US
167.71.81.88
8/10
Confidence
100%
Reports
21
Location
US
US
159.65.5.51
10/10
Confidence
100%
Reports
21
Location
SG
SG
157.230.218.106
10/10
Confidence
100%
Reports
18
Location
US
US
167.99.210.137
8/10
Confidence
100%
Reports
18
Location
NL
NL
174.138.12.72
10/10
Confidence
100%
Reports
17
Location
NL
NL
209.38.69.12
8/10
Confidence
100%
Reports
16
Location
US
US
159.65.224.88
10/10
Confidence
100%
Reports
15
Location
US
US
143.110.217.244
8/10
Confidence
100%
Reports
15
Location
CA
CA
209.38.120.71
10/10
Confidence
99%
Reports
18
Location
IN
IN
206.81.24.74
8/10
Confidence
99%
Reports
17
Location
DE
DE
188.166.29.60
10/10
Confidence
99%
Reports
16
Location
NL
NL
46.101.137.209
10/10
Confidence
99%
Reports
15
Location
DE
DE
147.182.149.75
8/10
Confidence
99%
Reports
14
Location
CA
CA
134.209.147.251
8/10
Confidence
98%
Reports
91
Location
IN
IN
164.92.211.98
8/10
Confidence
98%
Reports
59
Location
NL
NL
IPs from the same subnet range, likely same network segment.
1
Related IPs
7/10
Avg Threat
3%
Avg Confidence
1
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
9.1/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
213.209.159.208
10/10
Confidence
100%
Reports
1,063
ISP
Feo Prest SRL
136.92.16.48
8/10
Confidence
100%
Reports
231
ISP
Google LLC
193.24.211.218
10/10
Confidence
100%
Reports
126
ISP
Data Campus Lim...
136.92.26.87
10/10
Confidence
100%
Reports
96
ISP
Google LLC
62.80.98.102
10/10
Confidence
100%
Reports
53
ISP
euNetworks GmbH
2a0f:ca80:b00b:8089::5
8/10
Confidence
100%
Reports
48
ISP
TechTies Inc.
136.92.29.89
8/10
Confidence
100%
Reports
40
ISP
Google LLC
35.234.68.116
10/10
Confidence
100%
Reports
38
ISP
Google LLC
34.159.0.93
8/10
Confidence
100%
Reports
37
ISP
Google LLC
34.185.254.148
8/10
Confidence
100%
Reports
27
ISP
Google LLC
167.172.176.118
10/10
Confidence
100%
Reports
23
ISP
DigitalOcean, LLC
151.243.113.84
8/10
Confidence
100%
Reports
18
ISP
Dedik Services ...
45.140.42.24
10/10
Confidence
100%
Reports
16
ISP
Clouvider Limited
213.165.52.39
10/10
Confidence
100%
Reports
14
ISP
Chsl One Ltd
50.7.86.141
8/10
Confidence
100%
Reports
14
ISP
FDCservers.net
IPs with similar threat level and confidence scores.
15
Related IPs
9.3/10
Avg Threat
84%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
49.36.16.44
10/10
Confidence
84%
Reports
8
Location
IN
IN
123.20.15.83
10/10
Confidence
84%
Reports
7
Location
VN
VN
188.92.131.62
8/10
Confidence
84%
Reports
11
Location
DE
DE
103.240.232.212
10/10
Confidence
84%
Reports
8
Location
IN
IN
101.189.82.235
10/10
Confidence
84%
Reports
8
Location
AU
AU
103.171.189.64
10/10
Confidence
84%
Reports
8
Location
IN
IN
2a02:a58:8488:6000:5b5:49c:bdee:3e84
10/10
Confidence
84%
Reports
8
Location
RO
RO
89.109.51.76
10/10
Confidence
84%
Reports
8
Location
RU
RU
136.85.69.100
8/10
Confidence
84%
Reports
8
Location
SG
SG
2603:9001:a200:140c:a1d3:227:c345:4f9a
10/10
Confidence
84%
Reports
8
Location
US
US
120.60.110.244
10/10
Confidence
84%
Reports
8
Location
IN
IN
210.112.129.221
8/10
Confidence
84%
Reports
11
Location
KR
KR
35.245.119.157
8/10
Confidence
84%
Reports
8
Location
US
US
190.6.73.132
10/10
Confidence
84%
Reports
8
Location
CU
CU
146.59.16.244
8/10
Confidence
84%
Reports
8
Location
FR
FR