JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 157.245.106.180

157.245.106.180 was found in our database!

This IP was reported 47 times. Confidence of Abuse is 0%: ?

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Hostname(s)	aicquire-prod-3d517fec.mongo.ondigitalocean.com
Domain Name	digitalocean.com
Country	🇮🇳 India
City	Bashettihalli, Karnataka

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 157.245.106.180

Whois 157.245.106.180

IP Abuse Reports for 157.245.106.180:

This IP address has been reported a total of 47 times from 15 distinct sources. 157.245.106.180 was first reported on October 18th 2022, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 wHosts	2026-06-11 03:07:05 (2 months ago)	Blocked by Fail2Ban	Brute-Force Web App Attack
🇺🇸 MPL	2026-06-11 02:29:07 (2 months ago)	tcp/3389 (2 or more attempts)	Port Scan
🇮🇩 sockominfo	2026-04-17 22:01:06 (4 months ago)	Reported by TangerangKota-CSIRT. Status: MALICIOUS	Hacking Web App Attack
🇮🇩 sockominfo	2026-04-17 21:00:28 (4 months ago)	TheHive Threat Scoring assessment: 157.245.106.180 CVSS v3.1: 0/10 (None) CVSS Vector: CVSS:3.1/AV:u ... show more TheHive Threat Scoring assessment: 157.245.106.180 CVSS v3.1: 0/10 (None) CVSS Vector: CVSS:3.1/AV:undefined/AC:undefined/PR:undefined/UI:undefined/S:undefined/C:undefined/I:undefined/A:undefined Bayesian Probability: 80% MITRE ATT&CK: Exploit Public-Facing Application, Valid Accounts, Command and Scripting Interpreter, Application Layer Protocol, Brute Force, Account Manipulation OWASP Risk: High (L:8, I:6) Combined Score: 4.92/10 Confidence Interval: ±0.01 Status: Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-04-17 20:00:15 (4 months ago)	Access to CMS OPD Sites outside office hour.. Threat Score: 7.7/10 (HIGH). Reported by TangerangKota ... show more Access to CMS OPD Sites outside office hour.. Threat Score: 7.7/10 (HIGH). Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇺🇸 mawan	2026-04-17 19:06:52 (4 months ago)	Suspected of having performed illicit activity on LAX server.	Web App Attack
🇺🇸 nyt	2026-04-13 02:12:17 (4 months ago)	404 flood (16/60s), 404 flood (17/60s)	Bad Web Bot Web App Attack
🇩🇪 updown.io	2026-04-12 21:02:38 (4 months ago)	{"level":"info","ts":1776027660.7245936,"logger":"http.log.access.log1","msg":"handled request","req ... show more {"level":"info","ts":1776027660.7245936,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"157.245.106.180","remote_port":"56524","client_ip":"157.245.106.180","proto":"HTTP/1.1","method":"GET","host":"status.bsre.go.id","uri":"/.env","headers":{"User-Agent":["Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534+ (KHTML, like Gecko) MsnBot-Media /1.0b"],"Accept-Encoding":["gzip, deflate"],"Accept":["/"],"Connection":["keep-alive"]}},"bytes_read":0,"user_id":"","duration":0.000065045,"size":0,"status":308,"resp_headers":{"Server":["Caddy"],"Connection":["close"],"Location":["https://status.bsre.go.id/.env"],"Content-Type":[]}} {"level":"info","ts":1776027662.1707506,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"157.245.106.180","remote_port":"56636","client_ip":"157.245.106.180","proto":"HTTP/1.1","method":"GET","host":"status.bsre.go.id","uri":"/config.json","headers":{"Connection":["keep-alive"],"User-Agent":["Mozilla/5.0 ... show less	DDoS Attack Web App Attack
🇺🇸 nyt	2026-04-12 02:12:08 (4 months ago)	404 flood (16/60s)	Bad Web Bot Web App Attack
🇮🇩 Burayot	2026-04-08 18:34:07 (4 months ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 157.245.106.180 (IN/India/-): 1 in ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 157.245.106.180 (IN/India/-): 1 in the last 3600 secs show less	Web App Attack
🇺🇸 nyt	2026-04-08 07:39:02 (4 months ago)	Known Backdoor Name	Hacking Web App Attack
🇺🇸 nyt	2026-04-07 07:38:55 (4 months ago)	Non-standard WP File, Accessing backup file, potential unauthorized access attempt.	Web App Attack
🇺🇸 nyt	2026-04-06 07:37:42 (4 months ago)	Known Backdoor Name	Hacking Web App Attack
🇺🇸 nyt	2026-04-05 07:37:37 (4 months ago)	404 flood (16/60s), 404 flood (17/60s)	Bad Web Bot Web App Attack
🇺🇸 nyt	2026-04-04 07:37:20 (4 months ago)	404 flood (16/60s), 404 flood (17/60s)	Bad Web Bot Web App Attack

Showing 1 to 15 of 47 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇩 180.254.76.74

🇺🇸 34.22.40.84

🇩🇪 2a01:4f8:c2c:f002::1

🇨🇳 218.29.196.162

🇬🇭 197.159.139.180

🇪🇹 196.189.126.10

🇷🇴 193.239.176.184

🇺🇸 185.184.68.24

🇨🇳 171.40.221.247

🇺🇸 136.144.43.245

🇳🇵 103.130.207.227

🇺🇸 74.208.169.77

🇺🇸 52.159.140.57

🇺🇸 45.79.149.50

🇸🇬 45.78.235.121

🇺🇸 20.46.239.178

🇯🇵 8.216.27.202

🇮🇳 223.185.53.192

🇻🇪 200.125.188.214

🇺🇾 200.40.52.146