AbuseIPDB » 157.245.57.142

157.245.57.142 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 29%: ?

29%

ISP	DigitalOcean LLC
Usage Type	Data Center/Web Hosting/Transit
Domain Name	digitalocean.com
Country	Singapore
City	Singapore, Singapore

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 157.245.57.142

Whois 157.245.57.142

IP Abuse Reports for 157.245.57.142:

This IP address has been reported a total of 10 times from 9 distinct sources. 157.245.57.142 was first reported on September 9th 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
myintarweb	2024-09-09 18:16:19 (1 month ago)	157.245.57.142 - - [09/Sep/2024:19:16:18 +0100] 443 "GET /.env HTTP/1.1" 404 29080 "-" "Mozilla/5.0 ... show more157.245.57.142 - - [09/Sep/2024:19:16:18 +0100] 443 "GET /.env HTTP/1.1" 404 29080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" ... show less	Hacking Bad Web Bot Web App Attack
LRNP	2024-09-09 18:15:20 (1 month ago)	_:443 157.245.57.142 - - [09/Sep/2024:18:15:32 +0000] "GET /.env HTTP/1.1" 404 181 "-" "Mozilla/5.0 ... show more_:443 157.245.57.142 - - [09/Sep/2024:18:15:32 +0000] "GET /.env HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
TPI-Abuse	2024-09-09 18:13:02 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 157.245.57.142 (-): 1 in the last 300 secs; Por ... show more(mod_security) mod_security (id:210492) triggered by 157.245.57.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 09 14:12:54.205898 2024] [security2:error] [pid 18651:tid 18651] [client 157.245.57.142:59788] [client 157.245.57.142] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.188"] [uri "/.env"] [unique_id "Zt86pssTA_atwr9FMGIYIAAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-09-09 18:11:34 (1 month ago)	Unsolicited multiport scan	Port Scan
MPL	2024-09-09 18:09:39 (1 month ago)	tcp/443 (2 or more attempts)	Port Scan
diego	2024-09-09 18:05:13 (1 month ago)	Events: TCP SYN Discovery or Flooding, Seen 5 times in the last 10800 seconds	DDoS Attack
Anonymous	2024-09-09 18:02:21 (1 month ago)	Probe for vulnerabilities. Path attempted: /.env	Web App Attack
RCS	2024-09-09 17:59:59 (1 month ago)	fail2ban apache-modsecurity ...	Bad Web Bot Web App Attack
Holger	2024-09-09 17:53:37 (1 month ago)	URL probing: GET /.env	Web App Attack
diego	2024-09-09 17:53:05 (1 month ago)	Events: TCP SYN Discovery or Flooding, Seen 5 times in the last 10800 seconds	DDoS Attack