157.245.157.191

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
425 reports
244 reporters · latest 7 minutes ago
ISP
DigitalOcean, LLC
Usage Type
Data Center/Web Hosting/Transit
ASN
AS14061
Domain Name
digitalocean.com
Country
🇸🇬 Singapore
City
Singapore
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
425 from 244 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 129 🇩🇪 Germany 57 🇫🇷 France 43
Most common categories Port Scan 244 Web App Attack 168 Hacking 91 Brute-Force 44 Bad Web Bot 44
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
Anonymous
Remote command execution attempt.
Hacking
🇫🇮 habs
157.245.157.191 - - [10/Nov/2026:08:57:21 +0200] "POST /cgi-bin/luci/;stok=/login HTTP/1.1" 301 162 "-" "Mozilla/5.0" ...
Web App Attack
🇧🇷 diego
[rede-arem1] 11/10/2026-03:50:32.261779, 157.245.157.191, Protocol: 6, LOCAL SCAN horizontal SYN probe
Port Scan
🇺🇸 freehosts.eu
Blocked by UFW [7547/tcp] | SPT: 47235 | TTL: 242 | LEN: 40 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan IoT Targeted
Anonymous
Port Scan Brute-Force
🇮🇩 securejdprop
This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET CINS Active Threat Intelligence Poor Reputation IP group 206).
Hacking Web App Attack
🇸🇪 KIDOS
IIS malicious activity: high_400_error_rate (100% of requests are 400 errors)
Web App Attack
🇭🇰 mutebot.net
SRC=157.245.157.191, PROTO=TCP, SPT=35758, DPT=8080
Port Scan
🇺🇸 xmission.com
Blocked by UFW (TCP on 8080) Source port: 49983 TTL: 242 Packet length: 40 TOS: 0x00 This report (for 157.245.157.191) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan Web App Attack
🇺🇸 donarev419
Connection to port 7547 with data transfer. Data preview: POST /UD/?1 HTTP/1.1 Host: 107.175.212.44:7547 User-Agent: Mozilla/5.0 Content-Length: 450 Conte
Port Scan Hacking
🇺🇸 Ar1s
[1:5000009] ETN AGGRESSIVE IPs Group 9 ::: Port: 80/TCP
Exploited Host
🇨🇦 Arpan Sen
Network port/address scan: probed 5 distinct port(s) across 13 host(s); 100% of connections received no service (SYN, no reply) -- passive network sensor.
Port Scan
🇵🇷 HRCOM
Web App Attack Hacking
🇺🇸 IndigoRidge
Knock-Knock HTTP honeypot activity; time=2026-11-10 05:11:27; http_method=GET; http_path=/GponForm/diag_Form?images/; http_purpose=rce; http_exploit=GPON Router RCE (CVE-2018-10561); http_user_agent=Mozilla/5.0
Web App Attack
🇧🇪 boxed-it
GET /GponForm/diag_Form?images/ (Tarpitted for 4s, wasted 360B)
Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇳 221.229.218.50
🇫🇷 209.242.195.201
🇹🇳 196.203.63.80
🇨🇦 178.128.234.209
🇺🇸 167.71.95.57
🇺🇸 166.70.217.229
🇯🇵 152.32.146.182
🇸🇬 149.118.33.147
🇫🇮 147.185.133.190
🇺🇸 147.185.132.135
🇺🇸 100.50.17.159
🇬🇧 89.37.172.154
🇹🇷 88.230.60.144
🇳🇱 45.148.10.152
🇬🇧 45.133.173.69
🇳🇱 45.74.31.168
feedback