AbuseIPDB » 157.245.157.228

Check an IP Address, Domain Name, or Subnet

e.g. 3.238.180.255, microsoft.com, or 5.188.10.0/24

157.245.157.228 was found in our database!

This IP was reported 47 times. Confidence of Abuse is 100%: ?

100%

ISP	DigitalOcean LLC
Usage Type	Data Center/Web Hosting/Transit
Domain Name	digitalocean.com
Country	Singapore
City	Singapore, Singapore

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 157.245.157.228

Whois 157.245.157.228

IP Abuse Reports for 157.245.157.228:

This IP address has been reported a total of 47 times from 22 distinct sources. 157.245.157.228 was first reported on January 22nd 2022, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	Date	Comment	Categories
nextweb	08 May 2022	(mod_security) mod_security (id:210492) triggered by 157.245.157.228 (SG/Singapore/-/Singapore/-/[AS ... show more(mod_security) mod_security (id:210492) triggered by 157.245.157.228 (SG/Singapore/-/Singapore/-/[AS14061 DIGITALOCEAN-ASN]): 5 in the last 3600 secs (CF_ENABLE) show less	Brute-Force
Anonymous	08 May 2022	Time: Sun May 8 07:35:25 2022 -0300 IP: 157.245.157.228 (SG/Singapore/-) Fa ... show moreTime: Sun May 8 07:35:25 2022 -0300 IP: 157.245.157.228 (SG/Singapore/-) Failures: 5 (mod_security) Interval: 3600 seconds Blocked: Permanent Block show less	Web App Attack
sdos.es	08 May 2022	"Restricted File Access Attempt - Matched Data: /.env found within REQUEST_FILENAME: /api/.env"	Web App Attack
4server	07 May 2022	[SatMay0718:13:57.5546012022][:error][pid19660:tid47897817261824][client157.245.157.228:56580][clien ... show more[SatMay0718:13:57.5546012022][:error][pid19660:tid47897817261824][client157.245.157.228:56580][client157.245.157.228]ModSecurity:Accessdeniedwithcode403$phase2$.Patternmatch\"$\?:\\\\\\\\b\(\?:\\\\\\\\.\(\?:ht\(\?:access\\|passwd\\|group$\\|www_\?acl\)\\|global\\\\\\\\.asa\\|httpd\\\\\\\\.conf\\|boot\\\\\\\\.ini\\|web.config\)\\\\\\\\b\\|$\\|\^\\|\\\\\\\\.\\\\\\\\.$/etc/\\|/\\\\\\\\.$\?:history\\|bash_history\\|sh_history\\|env$\$\)\"atREQUEST_FILENAME.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"189\"][id\"390709\"][rev\"30\"][msg\"Atomicorp.comWAFRules:Attempttoaccessprotectedfileremotely\"][data\"/.env\"][severity\"CRITICAL\"][hostname\"hosting-domain-swiss.com\"][uri\"/.env\"][unique_id\"Ynaaxc0BnYzm1ytQ4p4vwgAAAMk\"][SatMay0718:13:58.0674012022][:error][pid19720:tid47897804654336][client157.245.157.228:56610][client157.245.157.228]ModSecurity:Accessdeniedwithcode403$phase2$.Patternmatch\"$\?:\\\\\\\\b\(\?:\\\\\\\\.\(\?:ht\(\?:access\\|passwd\\|group$\\|www_\?acl\)\\|global\\\\\\\\.asa\\|ht show less	Blog Spam
MSZ	07 May 2022	Fail2Ban Sat 07 May 2022 08:33:33 AM CEST	Hacking Brute-Force Web App Attack
sigma	06 May 2022	[07/May/2022:02:48:35 +0100] YnXP8yK51g873Ruch4lXJwAAAEs 157.245.157.228 59828 85.25.196.171 7081<br ... show more[07/May/2022:02:48:35 +0100] YnXP8yK51g873Ruch4lXJwAAAEs 157.245.157.228 59828 85.25.196.171 7081 [07/May/2022:02:48:36 +0100] YnXP9CK51g873Ruch4lXKgAAAEg 157.245.157.228 59834 85.25.196.171 7081 [07/May/2022:02:48:36 +0100] YnXP9BqdBHhBuI7qd4VQ0gAAABY 157.245.157.228 59846 85.25.196.171 7081 ... show less	Exploited Host Web App Attack
Maykson	06 May 2022	157.245.157.228 - - [06/May/2022:18:27:13 -0300] "GET /.env HTTP/1.1" 403 4466 "-" "Mozilla/5.0 (X11 ... show more157.245.157.228 - - [06/May/2022:18:27:13 -0300] "GET /.env HTTP/1.1" 403 4466 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" ... show less	Exploited Host Web App Attack
Maykson	06 May 2022	157.245.157.228 - - [06/May/2022:16:38:37 -0300] "GET /.env HTTP/1.1" 403 4450 "-" "Mozilla/5.0 (X11 ... show more157.245.157.228 - - [06/May/2022:16:38:37 -0300] "GET /.env HTTP/1.1" 403 4450 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" ... show less	Exploited Host Web App Attack
Steptoe	04 May 2022	/public/.env /laravel/.env /backend/.env /old/.env /new/.env /cor ... show more/public/.env /laravel/.env /backend/.env /old/.env /new/.env /core/.env /admin/.env /crm/.env /application/.env /app/.env /api/public/.env /api/.env /.env show less	Hacking
WebNiraj	01 May 2022	(mod_security) mod_security (id:949110) triggered by 157.245.157.228 (SG/Singapore/-): 5 in the last ... show more(mod_security) mod_security (id:949110) triggered by 157.245.157.228 (SG/Singapore/-): 5 in the last 3600 secs show less	Brute-Force
sigma	01 May 2022	[01/May/2022:14:57:16 +0100] Ym6RvInmPL-oSR2IMaekJQAAAIs 157.245.157.228 47102 85.25.196.171 7081<br ... show more[01/May/2022:14:57:16 +0100] Ym6RvInmPL-oSR2IMaekJQAAAIs 157.245.157.228 47102 85.25.196.171 7081 [01/May/2022:14:57:17 +0100] Ym6RvYnmPL-oSR2IMaekJgAAAI8 157.245.157.228 47104 85.25.196.171 7081 [01/May/2022:14:57:18 +0100] Ym6RvonmPL-oSR2IMaekKAAAAIM 157.245.157.228 47108 85.25.196.171 7081 ... show less	Exploited Host Web App Attack
Maykson	01 May 2022	157.245.157.228 - - [01/May/2022:09:35:44 -0300] "GET /.env HTTP/1.1" 403 3621 "-" "Mozilla/5.0 (X11 ... show more157.245.157.228 - - [01/May/2022:09:35:44 -0300] "GET /.env HTTP/1.1" 403 3621 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" ... show less	Exploited Host Web App Attack
Maykson	01 May 2022	157.245.157.228 - - [01/May/2022:03:18:06 -0300] "GET /.env HTTP/1.1" 403 4415 "-" "Mozilla/5.0 (X11 ... show more157.245.157.228 - - [01/May/2022:03:18:06 -0300] "GET /.env HTTP/1.1" 403 4415 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" ... show less	Exploited Host Web App Attack
Clapper	01 May 2022	(mod_security) mod_security (id:949110) triggered by 157.245.157.228 (SG/Singapore/-): 5 in the last ... show more(mod_security) mod_security (id:949110) triggered by 157.245.157.228 (SG/Singapore/-): 5 in the last 14400 secs; ID: rub show less	Brute-Force Bad Web Bot
Anonymous	29 Apr 2022	Hacking Attempt (Website Honeypot)	Hacking Web App Attack