AbuseIPDB » 157.245.13.252

157.245.13.252 was found in our database!

This IP was reported 22 times. Confidence of Abuse is 35%: ?

35%

ISP	DigitalOcean LLC
Usage Type	Data Center/Web Hosting/Transit
Domain Name	digitalocean.com
Country	United States of America
City	Clifton, New Jersey

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 157.245.13.252

Whois 157.245.13.252

IP Abuse Reports for 157.245.13.252:

This IP address has been reported a total of 22 times from 18 distinct sources. 157.245.13.252 was first reported on August 6th 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
gu-alvareza	2024-08-07 07:05:54 (1 month ago)	SystemBC.Botnet	DDoS Attack Hacking
Admin MGA	2024-08-06 23:13:05 (1 month ago)	157.245.13.252 - - [07/Aug/2024:06:13:04 +0700] "GET /form.html HTTP/1.1" 404 196 "-" "curl/8.1.2"<b ... show more157.245.13.252 - - [07/Aug/2024:06:13:04 +0700] "GET /form.html HTTP/1.1" 404 196 "-" "curl/8.1.2" 157.245.13.252 - - [07/Aug/2024:06:13:05 +0700] "GET /upl.php HTTP/1.1" 404 16 "-" "Mozilla/5.0" 157.245.13.252 - - [07/Aug/2024:06:13:05 +0700] "GET /t4 HTTP/1.1" 404 196 "-" "Mozilla/5.0" ... show less	Web App Attack
FireballDWF	2024-08-06 21:35:08 (1 month ago)	404 NOT FOUND	Web App Attack
Cloudkul Cloudkul	2024-08-06 21:15:19 (1 month ago)	Multiple unauthorized attempts to access web resources	Brute-Force Web App Attack
muhammad isa	2024-08-06 20:52:34 (1 month ago)	157.245.13.252 - - [06/Aug/2024:21:52:27 +0100] " " 400 345 "-" "-" 157.245.13.252 - - [06/Au ... show more157.245.13.252 - - [06/Aug/2024:21:52:27 +0100] " " 400 345 "-" "-" 157.245.13.252 - - [06/Aug/2024:21:52:28 +0100] " " 400 345 "-" "-" show less	Hacking Web App Attack
ozisp.com.au	2024-08-06 18:21:41 (1 month ago)	US_DigitalOcean,_<33>1722968500 [119:33:2] (http_inspect) UNESCAPED SPACE IN HTTP URI [Classificatio ... show moreUS_DigitalOcean,_<33>1722968500 [119:33:2] (http_inspect) UNESCAPED SPACE IN HTTP URI [Classification: Unknown Traffic] [Priority: 3] {TCP} 157.245.13.252:50362 show less	Hacking
ICT KnTl	2024-08-06 16:34:41 (1 month ago)	[Tue Aug 06 07:02:22.609229 2024] [php7:error] [pid 99236:tid 99236] [client 157.245.13.252:53256] s ... show more[Tue Aug 06 07:02:22.609229 2024] [php7:error] [pid 99236:tid 99236] [client 157.245.13.252:53256] script '/var/www/html/alive.php' not found or unable to stat [Tue Aug 06 18:34:40.190876 2024] [php7:error] [pid 102023:tid 102023] [client 157.245.13.252:51920] script '/var/www/html/upl.php' not found or unable to stat [Tue Aug 06 18:34:41.023060 2024] [php7:error] [pid 102021:tid 102021] [client 157.245.13.252:59304] script '/var/www/html/1.php' not found or unable to stat [Tue Aug 06 18:34:41.439630 2024] [php7:error] [pid 98043:tid 98043] [client 157.245.13.252:59324] script '/var/www/html/password.php' not found or unable to stat ... show less	Web App Attack
Countryman	2024-08-06 15:58:41 (1 month ago)	repeated unauthorized connection attempts, host sweep, port scan	Port Scan
diego	2024-08-06 15:37:30 (1 month ago)	Events: TCP SYN Discovery or Flooding, Seen 4 times in the last 10800 seconds	DDoS Attack
MPL	2024-08-06 15:37:07 (1 month ago)	tcp/80 (4 or more attempts)	Port Scan
mailox	2024-08-06 14:06:24 (1 month ago)	157.245.13.252 - - [06/Aug/2024:16:06:23 +0200] "GET / HTTP/1.1" 400 650 "-" "Mozilla/5.0 (Windows N ... show more157.245.13.252 - - [06/Aug/2024:16:06:23 +0200] "GET / HTTP/1.1" 400 650 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" "-" ... show less	Port Scan Bad Web Bot Web App Attack
IT RDC	2024-08-06 11:17:26 (1 month ago)	2024/08/06 13:17:25 [info] 20889#0: 7420507 client sent plain HTTP request to HTTPS port while read ... show more2024/08/06 13:17:25 [info] 20889#0: 7420507 client sent plain HTTP request to HTTPS port while reading client request headers, client: 157.245.13.252, server: zimbra, request: "GET / HTTP/1.1", host: "83.238.86.34:443" ... show less	Web App Attack
Anonymous	2024-08-06 11:14:31 (1 month ago)	VPN Authentication Brute Force	Brute-Force
Anonymous	2024-08-06 10:41:24 (1 month ago)	[Tue Aug 06 07:41:23.468059 2024] [proxy_fcgi:error] [pid 274379:tid 274379] [client 157.245.13.252: ... show more[Tue Aug 06 07:41:23.468059 2024] [proxy_fcgi:error] [pid 274379:tid 274379] [client 157.245.13.252:49114] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
muhammad isa	2024-08-06 09:56:29 (1 month ago)	2024-08-06 10:56:21: (mod_openssl.c.3371) SSL: 1 error:0A0000C1:SSL routines::no shared cipher (157. ... show more2024-08-06 10:56:21: (mod_openssl.c.3371) SSL: 1 error:0A0000C1:SSL routines::no shared cipher (157.245.13.252) 2024-08-06 10:56:22: (mod_openssl.c.3378) SSL: 1 error:0A000102:SSL routines::unsupported protocol (157.245.13.252) show less	Hacking