JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 157.245.49.0

157.245.49.0 was found in our database!

This IP was reported 46 times. Confidence of Abuse is 0%: ?

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 157.245.49.0

Whois 157.245.49.0

IP Abuse Reports for 157.245.49.0:

This IP address has been reported a total of 46 times from 38 distinct sources. 157.245.49.0 was first reported on September 19th 2021, and the most recent report was 2 years ago.

Old Reports: The most recent abuse report for this IP address is from 2 years ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇯🇵 zwh	2024-05-02 23:24:28 (2 years ago)	Attack for XMLRPC	Web App Attack
🇩🇪 Ba-Yu	2024-05-01 13:17:24 (2 years ago)	WP-xmlrpc exploit	Web Spam Blog Spam Hacking Exploited Host Web App Attack
🇬🇧 aricooperdavis	2024-05-01 12:47:04 (2 years ago)	Probe for vulnerabilities. Path attempted: /wp-includes/wlwmanifest	Web App Attack
🇧🇪 cmbplf	2024-05-01 12:00:27 (2 years ago)	7.593 POST requests in 1 hour (3d23h33m)	Brute-Force Bad Web Bot
🇫🇷 francoisunix	2024-05-01 08:34:24 (2 years ago)	157.245.49.0 - - [01/May/2024:08:34:21 +0000] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10 ... show more 157.245.49.0 - - [01/May/2024:08:34:21 +0000] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 157.245.49.0 - - [01/May/2024:08:34:22 +0000] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 157.245.49.0 - - [01/May/2024:08:34:22 +0000] "GET //xmlrpc.php?rsd HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" show less	Web App Attack
🇺🇸 TPI-Abuse	2024-05-01 08:19:21 (2 years ago)	(mod_security) mod_security (id:225170) triggered by 157.245.49.0 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 157.245.49.0 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 01 04:19:15.416972 2024] [security2:error] [pid 23198] [client 157.245.49.0:61004] [client 157.245.49.0] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.skintormint.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.skintormint.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZjH7A8CiV46ub5c8atGJOwAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇲🇾 Rizzy	2024-05-01 05:45:30 (2 years ago)	Multiple WAF Violations	Brute-Force Web App Attack
Anonymous	2024-05-01 05:17:24 (2 years ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2024-05-01 04:12:16 (2 years ago)	Ports: 20,21,25,53,80,110,143,443,465,587,993,995,2077,2078,2079,2080,2082,2083,2086,2087,2095,2096, ... show more Ports: 20,21,25,53,80,110,143,443,465,587,993,995,2077,2078,2079,2080,2082,2083,2086,2087,2095,2096,3306,2195; Direction: 0; Trigger: LF_CUSTOMTRIGGER show less	Brute-Force SSH
🇩🇪 Donovan_DMC	2024-05-01 02:03:31 (2 years ago)	GET //wp-includes/wlwmanifest.xml - 157.245.49.0 (Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWeb ... show more GET //wp-includes/wlwmanifest.xml - 157.245.49.0 (Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36) [wp-includes]: WordPress Includes Scanner show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-05-01 01:03:11 (2 years ago)	(mod_security) mod_security (id:225170) triggered by 157.245.49.0 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 157.245.49.0 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 30 21:03:06.689421 2024] [security2:error] [pid 9669] [client 157.245.49.0:64159] [client 157.245.49.0] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|rodandreelpiercam.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "rodandreelpiercam.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZjGUygyIYbFhwaenLNSOewAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 dtorrer	2024-04-30 18:04:05 (2 years ago)	Dictionary attack on login resource.	Brute-Force
🇺🇸 MortimerCat	2024-04-30 15:52:47 (2 years ago)	Unauthorised use of XMLRPC	Web App Attack
Anonymous	2024-04-30 09:34:31 (2 years ago)	(wordpress) Failed wordpress login from 157.245.49.0 (SG/Singapore/-)	Brute-Force
🇺🇸 mnsf	2024-04-30 09:09:12 (2 years ago)	Too many Status 50X (21)	Brute-Force Web App Attack

Showing 1 to 15 of 46 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 101.96.197.182

🇨🇦 85.217.149.59

🇵🇭 38.225.217.33

🇮🇳 223.233.82.200

🇧🇷 201.33.69.16

🇦🇷 190.114.112.40

🇮🇩 182.4.100.203

🇵🇭 180.191.77.76

🇧🇾 178.121.28.143

🇺🇸 170.106.181.163

🇺🇸 162.216.149.76

🇬🇧 154.16.44.214

🇭🇰 150.109.115.214

🇮🇳 103.253.174.248

🇨🇳 101.96.195.17

🇨🇳 101.96.193.131

🇨🇳 101.96.192.45

🇫🇷 91.231.89.166

🇹🇷 78.187.9.53

🇺🇸 66.132.186.132