JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 157.245.56.220

157.245.56.220 was found in our database!

This IP was reported 111 times. Confidence of Abuse is 0%: ?

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 157.245.56.220

Whois 157.245.56.220

IP Abuse Reports for 157.245.56.220:

This IP address has been reported a total of 111 times from 52 distinct sources. 157.245.56.220 was first reported on June 29th 2024, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 nNordic	2024-10-25 05:10:45 (1 year ago)	Connection attempt blocked by IDS/IPS from 157.245.56.220/32	Hacking Web App Attack
🇮🇪 Jim Keir	2024-10-03 21:38:48 (1 year ago)	2024-10-03 21:38:47 157.245.56.220 File scanning, blocking 157.245.56.220 for 5 minutes	Web App Attack
🇨🇴 adalbertoreyes.org	2024-10-03 15:10:12 (1 year ago)	CategoryPortScan	Port Scan
🇮🇪 Jim Keir	2024-10-03 10:30:22 (1 year ago)	2024-10-03 10:30:21 157.245.56.220 File scanning, blocking 157.245.56.220 for 5 minutes	Web App Attack
🇺🇸 mawan	2024-09-25 03:00:08 (1 year ago)	Suspected of having performed illicit activity on LAX server.	Web App Attack
🇺🇸 TPI-Abuse	2024-09-22 04:41:45 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 157.245.56.220 (windows12.gz-s-4vcpu-8gb-sgp1-0 ... show more (mod_security) mod_security (id:210492) triggered by 157.245.56.220 (windows12.gz-s-4vcpu-8gb-sgp1-01): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 22 00:41:37.490471 2024] [security2:error] [pid 23692:tid 23692] [client 157.245.56.220:61108] [client 157.245.56.220] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.catholicshopper.com"] [uri "/.env"] [unique_id "Zu-gAacMH9OxCqUZiFJ1uwAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇦 Mediashaker	2024-09-21 22:18:54 (1 year ago)	(apache-scanners) Failed apache-scanners trigger with match [redacted] from 157.245.56.220 (SG/Singa ... show more (apache-scanners) Failed apache-scanners trigger with match [redacted] from 157.245.56.220 (SG/Singapore/windows12.gz-s-4vcpu-8gb-sgp1-01) show less	Port Scan
🇺🇸 TPI-Abuse	2024-09-21 11:45:50 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 157.245.56.220 (windows12.gz-s-4vcpu-8gb-sgp1-0 ... show more (mod_security) mod_security (id:210492) triggered by 157.245.56.220 (windows12.gz-s-4vcpu-8gb-sgp1-01): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 21 07:45:45.506484 2024] [security2:error] [pid 2225439:tid 2225458] [client 157.245.56.220:49781] [client 157.245.56.220] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jaslae.com"] [uri "/.env"] [unique_id "Zu6x6Yc-jNWU5Fs0ONO-xwAAAUU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mawan	2024-09-21 00:58:50 (1 year ago)	Suspected of having performed illicit activity on LAX server.	Web App Attack
🇺🇸 snappic	2024-09-20 07:43:26 (1 year ago)	Malicious URI path & DigitalOcean User Agent Spoofing [GET /.env] [Mozilla/5.0 (Linux; U; Android 4. ... show more Malicious URI path & DigitalOcean User Agent Spoofing [GET /.env] [Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30] Reported from WAF sampled requests show less	Bad Web Bot Web App Attack
🇺🇸 mnsf	2024-09-20 04:03:48 (1 year ago)	Too many Status 40X (18)	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2024-09-01 18:57:19 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 157.245.56.220 (windows12.gz-s-4vcpu-8gb-sgp1-0 ... show more (mod_security) mod_security (id:210492) triggered by 157.245.56.220 (windows12.gz-s-4vcpu-8gb-sgp1-01): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 01 14:57:16.078321 2024] [security2:error] [pid 23412:tid 23412] [client 157.245.56.220:64110] [client 157.245.56.220] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dualspiralsystems.com"] [uri "/.env"] [unique_id "ZtS5DCN9Rp01cMQcruOceAAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-08-30 06:51:16 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 157.245.56.220 (windows12.gz-s-4vcpu-8gb-sgp1-0 ... show more (mod_security) mod_security (id:210492) triggered by 157.245.56.220 (windows12.gz-s-4vcpu-8gb-sgp1-01): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 30 02:51:10.425879 2024] [security2:error] [pid 32002:tid 32002] [client 157.245.56.220:50523] [client 157.245.56.220] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fydelitybags.com"] [uri "/.env"] [unique_id "ZtFr3mFU_y8lqI2COl4vBwAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 rdpguard.com	2024-08-19 14:57:19 (2 years ago)	RdpGuard detected brute-force attempt on HTTP	Brute-Force
🇨🇭 SOC [GOLINE SA]	2024-08-18 20:38:50 (2 years ago)	FortiGate detected IPS attempt	Hacking

Showing 1 to 15 of 111 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 125.22.69.166

🇩🇪 167.99.250.53

🇻🇳 163.223.8.141

🇷🇺 31.130.35.29

🇺🇸 24.97.253.246

🇩🇪 213.209.159.231

🇰🇷 211.247.127.250

🇰🇷 211.62.96.42

🇷🇴 193.46.255.86

🇫🇷 185.177.72.205

🇧🇷 181.218.172.74

🇺🇸 162.216.149.248

🇩🇪 154.16.69.81

🇻🇳 123.30.238.247

🇧🇬 87.121.166.146

🇺🇸 35.225.252.237

🇺🇸 35.185.58.114

🇺🇸 195.252.196.198

🇺🇸 162.158.174.96

🇵🇰 149.40.250.97