157.245.202.13
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- DigitalOcean, LLC
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS14061
- Domain Name
- digitalocean.com
- Country
- 🇸🇬 Singapore
- City
- Singapore
Abuse Reports
Total reports
18 from
17 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇩🇪 Viveronese |
HTTP vulnerability scanning
|
Web App Attack | |
| 🇦🇺 Proxay Fox |
|
Brute-Force Web App Attack | |
| 🇩🇪 Callum |
probing for exposed files and admin pages: 28 attempts within 1 minutes, seen by web server log
|
Web App Attack | |
| 🇩🇪 heyzg |
HTTP secret_harvesting (observed): 30 HTTP, 14s
|
Brute-Force | |
| 🇹🇷 Threat.live |
Threat.live: Web Scan
|
Web App Attack | |
| 🇳🇬 lendsqr |
Automated attack on our web servers: asked for 24 secret-file paths. Blocked.
|
Bad Web Bot Web App Attack | |
| 🇦🇺 clapper |
(mod_security) mod_security (id:949110) triggered by 157.245.202.13 (SG/Singapore/-): 5 in the last 600 secs; ID: rub
|
Brute-Force Bad Web Bot | |
| 🇺🇸 cwytech |
Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/tpot-web-high.
|
Bad Web Bot Web App Attack | |
| 🇫🇷 regishoussin |
Automated web scanning detected by Wazuh (rule 100150): repeated 400/404 errors from mass probing of admin/backdoor paths (e.g. wp-login.php, known CMS shell filenames) on an Apache web server, on 2026-11-15 18:11 UTC.
|
Bad Web Bot Web App Attack | |
| 🇫🇷 OrchidsRadiant |
|
Bad Web Bot Web App Attack | |
| 🇫🇷 security.rdmc.fr |
Web scan: 4xx requests without User-Agent
|
Web App Attack Bad Web Bot | |
| 🇳🇱 tpjg |
|
Web App Attack | |
| 🇺🇸 HamSammich |
Automated sensor: 29 HTTP connection/probe attempts over the last 24h (latest 2026-11-15T17:36Z).
|
Port Scan Web App Attack | |
| 🇫🇷 Kejult |
Honeypot Finding: active TCP application payload captured by Honeytrap; 30 payload-bearing connection/event(s), 4497 payload byte(s) total, maximum payload 157 byte(s). Target port(s): 4000.
|
Port Scan Hacking | |
| 🇫🇷 Kejult |
Honeypot Finding: verified TCP multi-port scan/probing; 62 application-level events across 2 target ports and 31 source port(s). Ports: 80/HTTP, 4000/service. Sensors: Tanner, Honeytrap.
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown