JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

157.245.117.187

Recent Activity

Abuse confidence score ?

3% Caution

99 reports

62 reporters · latest 1 day ago

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	Clifton, New Jersey

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 157.245.117.187

Export CSV

This IP address has been reported a total of 99 times from 62 distinct sources. 157.245.117.187 was first reported on March 31st 2021, and the most recent report was 1 day ago. In the last 60 days, the only reporter location was: Pakistan with 1 report. The only category in these recent reports was: Brute-Force 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇰 sbk97 (https://sayor.net)	2026-10-04 07:42:32 (1 day ago)	SAYOR honeypot: observed attack /.git/config	Brute-Force
🇺🇸 xmission.com	2025-11-02 15:24:13 (11 months ago)	Blocked by UFW (TCP on 5552) Source port: 61010 TTL: 238 Packet length: 44 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 5552) Source port: 61010 TTL: 238 Packet length: 44 TOS: 0x08 This report (for 157.245.117.187) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 chronos	2025-04-21 18:09:13 (1 year ago)	[AUTORAVALT][[21/04/2025 - 15:09:12 -03:00 UTC] Attack from [DigitalOcean, LLC] [157.245.117.187] Ac ... show more [AUTORAVALT][[21/04/2025 - 15:09:12 -03:00 UTC] Attack from [DigitalOcean, LLC] [157.245.117.187] Action: BLocKed Hacking... Unauthorized attempts to access the server. Web App Attack -> Attempts to probe for or exploit installed web applications such as a CMS like WordPress/Drupal, e-commerce solutions, forum software, phpMyAdmin and various other software pl] ... show less	Hacking Web App Attack
🇺🇸 chronos	2025-04-21 17:11:53 (1 year ago)	[AUTORAVALT][[21/04/2025 - 14:11:53 -03:00 UTC] Attack from [DigitalOcean, LLC] [157.245.117.187][pr ... show more [AUTORAVALT][[21/04/2025 - 14:11:53 -03:00 UTC] Attack from [DigitalOcean, LLC] [157.245.117.187][prod-nyc3-4.qencode-encoder-2fabe8581ece11f09ccdd65808120e10] Action: BLocKed DDoS Attack -> Participating in distributed denial-of-service. Phishing -> Phishing websites and/or email. Web Spam -> Comment/forum spam, HTTP referer spam, or other CMS spam. Blog Spa] ... show less	DDoS Attack Phishing Web Spam Blog Spam Web App Attack
🇺🇸 chronos	2025-04-21 07:25:26 (1 year ago)	[AUTORAVALT][[21/04/2025 - 04:25:26 -03:00 UTC] Attack from [DigitalOcean, LLC] [157.245.117.187][pr ... show more [AUTORAVALT][[21/04/2025 - 04:25:26 -03:00 UTC] Attack from [DigitalOcean, LLC] [157.245.117.187][prod-nyc3-4.qencode-encoder-1c17c6041e7411f08b5ed65808120e10] Action: BLocKed Hacking... Unauthorized attempts to access the server. Web App Attack -> Attempts to probe for or exploit installed web applications such as a CMS like WordPress/Drupal, e-commerce solu] ... show less	Hacking Web App Attack
🇺🇸 chronos	2025-04-21 06:18:08 (1 year ago)	[AUTORAVALT][[21/04/2025 - 03:18:08 -03:00 UTC] Attack from [DigitalOcean, LLC] [157.245.117.187][pr ... show more [AUTORAVALT][[21/04/2025 - 03:18:08 -03:00 UTC] Attack from [DigitalOcean, LLC] [157.245.117.187][prod-nyc3-4.qencode-encoder-1c17c6041e7411f08b5ed65808120e10] Action: BLocKed DDoS Attack -> Participating in distributed denial-of-service. Phishing -> Phishing websites and/or email. Web Spam -> Comment/forum spam, HTTP referer spam, or other CMS spam. Blog Spa] ... show less	DDoS Attack Phishing Web Spam Blog Spam Web App Attack
🇩🇪 Hans-Joachim Elflein	2025-04-20 22:08:02 (1 year ago)	Unauthorized access on Port 443 [https]	Port Scan Hacking Brute-Force
🇩🇪 ManagedStack	2025-04-20 21:38:09 (1 year ago)	Probing access to unauthorized locations	Hacking Exploited Host Web App Attack
🇪🇸 Hugopvigo	2025-04-20 21:31:57 (1 year ago)	"2025-04-20 21:31:57+00:00 157.245.117.187 Attempt to access /.env"	Brute-Force SSH
🇺🇸 c y	2025-04-20 16:47:39 (1 year ago)	...	Web App Attack
🇳🇱 JCB	2025-04-20 16:43:00 (1 year ago)	157.245.117.187 - - [20/Apr/2025:00:39:20 +0300] "GET /.env HTTP/1.1" 403 199 "-" "Mozilla/5.0; Keyd ... show more 157.245.117.187 - - [20/Apr/2025:00:39:20 +0300] "GET /.env HTTP/1.1" 403 199 "-" "Mozilla/5.0; Keydrop.io/1.0(onlyscans.com/about);" 157.245.117.187 - - [20/Apr/2025:00:39:20 +0300] "GET /.git/config HTTP/1.1" 403 199 "-" "Mozilla/5.0; Keydrop.io/1.0(onlyscans.com/about);" ... show less	Hacking Bad Web Bot Web App Attack
🇯🇵 VXG-NET	2025-04-20 06:30:08 (1 year ago)	port=443, indicator_type=info-leak	Hacking
🇱🇹 NotACaptcha	2025-04-20 05:52:49 (1 year ago)	webserver:80 [20/Apr/2025] "GET /.git/config HTTP/1.1" 403 344 "-" "Mozilla/5.0; Keydrop.io/1.0(onl ... show more webserver:80 [20/Apr/2025] "GET /.git/config HTTP/1.1" 403 344 "-" "Mozilla/5.0; Keydrop.io/1.0(onlyscans.com/about);" webserver:80 [20/Apr/2025] "GET /.env HTTP/1.1" 404 341 "-" "Mozilla/5.0; Keydrop.io/1.0(onlyscans.com/about);" webserver:443 [20/Apr/2025] "GET / HTTP/1.0" 400 528 webserver:443 [20/Apr/2025] "GET /.env HTTP/1.1" 403 5043 "-" "Mozilla/5.0; Keydrop.io/1.0(onlyscans.com/about);" show less	SQL Injection Web App Attack
🇪🇸 Hugopvigo	2025-04-20 05:28:30 (1 year ago)	157.245.117.187 - - [19/Apr/2025:23:52:16 +0200] "GET /.env HTTP/1.1" 301 506 "-" "Mozilla/5.0; Keyd ... show more 157.245.117.187 - - [19/Apr/2025:23:52:16 +0200] "GET /.env HTTP/1.1" 301 506 "-" "Mozilla/5.0; Keydrop.io/1.0(onlyscans.com/about);" 157.245.117.187 - - [20/Apr/2025:07:28:29 +0200] "GET /.env HTTP/1.1" 403 4218 "-" "Mozilla/5.0; Keydrop.io/1.0(onlyscans.com/about);" ... show less	Hacking Brute-Force Web App Attack SSH
🇯🇵 VXG-NET	2025-04-20 04:55:05 (1 year ago)	port=443, indicator_type=info-leak	Hacking

Showing 1 to 15 of 99 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇪🇸 46.6.127.33

🇺🇸 20.51.189.90

🇰🇷 1.247.245.61

🇲🇽 189.219.16.249

🇧🇷 177.221.131.224

🇨🇴 170.245.158.251

🇧🇷 168.181.222.97

🇺🇸 162.216.149.104

🇸🇬 85.203.23.83

🇩🇪 57.129.120.143

🇫🇷 51.210.10.40

🇰🇷 20.214.170.255

🇬🇧 2.57.17.173

🇺🇦 178.54.78.190

🇺🇸 134.209.120.216

🇮🇳 122.187.228.235

🇷🇴 193.46.255.86

🇹🇷 188.132.230.188

🇹🇼 165.154.227.8

🇮🇩 36.72.32.107