JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 157.245.201.88

157.245.201.88 was found in our database!

This IP was reported 27 times. Confidence of Abuse is 82%: ?

82%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 157.245.201.88

Whois 157.245.201.88

IP Abuse Reports for 157.245.201.88:

This IP address has been reported a total of 27 times from 25 distinct sources. 157.245.201.88 was first reported on December 10th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-06-29 22:00:04 (1 day ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-28. show less	Web App Attack SSH Hacking
Anonymous	2026-06-29 05:27:02 (2 days ago)	Bot / scanning and/or hacking attempts: GET /.env.dist HTTP/1.1, GET /.env.old HTTP/1.1, GET //cron/ ... show more Bot / scanning and/or hacking attempts: GET /.env.dist HTTP/1.1, GET /.env.old HTTP/1.1, GET //cron/.env HTTP/1.1, GET //lib/.env HTTP/1.1, GET //vendor/.env HTTP/1.1, GET //core/app/.env HTTP/1.1, GET /.env.conf HTTP/1.1, GET //lab/.env HTTP/1.1, GET /.env.config HTTP/1.1, GET //core/.env HTTP/1.1, GET //cronlab/.env HTTP/1.1, GET /.env.inc HTTP/1.1, GET / HTTP/1.1 show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-06-29 01:47:39 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 157.245.201.88 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 157.245.201.88 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 28 21:47:36.611180 2026] [security2:error] [pid 28102:tid 28102] [client 157.245.201.88:58086] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "globalsolutions.technology"] [uri "/.env"] [unique_id "akHOuE0FNLpmh7yAmBi9ugAAAAo"], referer: https://www.google.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-06-28 22:45:59 (2 days ago)	Multiple WAF Violations	Web App Attack
🇲🇾 Rizzy	2026-06-28 22:07:44 (2 days ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇺🇸 mnsf	2026-06-28 22:05:12 (2 days ago)	Abuse Detected (11)	Brute-Force Web App Attack
🇧🇪 webbie	2026-06-28 21:29:53 (2 days ago)	157.245.201.88 - - [28/Jun/2026:23:29:48 +0200] "GET /.env HTTP/1.1" 404 5273 "https://www.google.co ... show more 157.245.201.88 - - [28/Jun/2026:23:29:48 +0200] "GET /.env HTTP/1.1" 404 5273 "https://www.google.com/" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.3; Trident/4.0; Win64; x64)" 157.245.201.88 - - [28/Jun/2026:23:29:49 +0200] "GET /.env.example HTTP/1.1" 404 458 "https://www.google.com/" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.3; Trident/4.0; Win64; x64)" 157.245.201.88 - - [28/Jun/2026:23:29:50 +0200] "GET /.env.bak HTTP/1.1" 404 458 "https://www.google.com/" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.3; Trident/4.0; Win64; x64)" 157.245.201.88 - - [28/Jun/2026:23:29:50 +0200] "GET /.env.old HTTP/1.1" 404 458 "https://www.google.com/" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.3; Trident/4.0; Win64; x64)" 157.245.201.88 - - [28/Jun/2026:23:29:51 +0200] "GET /.env.local HTTP/1.1" 404 458 "https://www.google.com/" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.3; Trident/4.0; Win64; x64)" ... show less	Brute-Force Web App Attack
🇮🇹 VHosting	2026-06-28 12:55:07 (2 days ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇵🇱 skoczo	2026-06-28 09:44:10 (3 days ago)	Honeytoken tripped (detected by https://github.com/skoczo/repgate): /.env	Web App Attack
🇨🇭 zynex	2026-06-28 09:13:28 (3 days ago)	URL Probing: /database/.env	Web App Attack
🇳🇱 e.fierstra	2026-06-27 16:17:59 (3 days ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
Anonymous	2026-06-27 07:27:19 (4 days ago)	157.245.201.88 - - [27/Jun/2026:09:26:49 +0200] "GET / HTTP/1.1" 404 158 "-" "Mozilla/5.0 (X11; Linu ... show more 157.245.201.88 - - [27/Jun/2026:09:26:49 +0200] "GET / HTTP/1.1" 404 158 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 157.245.201.88 - - [27/Jun/2026:09:26:50 +0200] "POST / HTTP/1.1" 404 158 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 157.245.201.88 - - [27/Jun/2026:09:26:51 +0200] "POST / HTTP/1.1" 404 158 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 157.245.201.88 - - [27/Jun/2026:09:26:52 +0200] "POST / HTTP/1.1" 404 158 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 157.245.201.88 - - [27/Jun/2026:09:26:52 +0200] "GET /.git/config HTTP/1.1" 404 158 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 157.245.201.88 - - [27/Jun/2026:09:26:53 +0200] "POST / HTTP/1.1" 404 158 "-" "Mo ... show less	Bad Web Bot Web App Attack
🇧🇪 cmbplf	2026-06-26 07:37:27 (5 days ago)	778 requests with url.path *.env	Brute-Force Bad Web Bot
🇵🇱 strefapi_com	2026-06-26 01:25:54 (5 days ago)	Brute-force on web app ...	Brute-Force Web App Attack
Anonymous	2026-06-25 17:30:05 (5 days ago)	\| Suspicious URL access.	Web App Attack Hacking SQL Injection

Showing 1 to 15 of 27 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 201.71.192.108

🇲🇽 187.190.35.163

🇧🇷 186.248.197.77

🇨🇳 182.204.178.46

🇺🇸 173.239.214.77

🇷🇴 2.57.122.168

🇰🇷 2406:da12:c4c:af03:cb32:430e:442d:bc20

🇮🇳 223.233.84.189

🇨🇴 190.0.63.226

🇺🇸 173.255.235.11

🇺🇸 159.203.109.230

🇦🇺 140.238.207.64

🇮🇳 103.160.27.112

🇭🇰 103.81.170.109

🇹🇷 94.154.43.181

🇳🇱 45.14.134.197

🇺🇸 20.169.107.249

🇺🇸 20.12.41.6

🇩🇪 212.132.120.41

🇰🇷 211.106.133.202