JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 157.245.60.203

157.245.60.203 was found in our database!

This IP was reported 77 times. Confidence of Abuse is 49%: ?

49%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 157.245.60.203

Whois 157.245.60.203

IP Abuse Reports for 157.245.60.203:

This IP address has been reported a total of 77 times from 52 distinct sources. 157.245.60.203 was first reported on September 7th 2025, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇱 ovallevelasquezanibal	2026-07-23 15:23:58 (3 days ago)	Detectado por Wazuh SIEM en api-ux.com \| Alertas: 4 \| Nivel max: 5 \| Agentes: web-apiux-2025 \| Web s ... show more Detectado por Wazuh SIEM en api-ux.com \| Alertas: 4 \| Nivel max: 5 \| Agentes: web-apiux-2025 \| Web server 400 error code. show less	Port Scan Hacking
🇦🇺 2000cn.com.au	2026-07-23 06:09:07 (4 days ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
🇹🇭 MWA SOC	2026-07-23 06:07:57 (4 days ago)		Port Scan
🇦🇺 afleventoffice.com.au	2026-07-22 20:08:02 (4 days ago)	GET /.env HTTP/1.1	Web App Attack
🇺🇸 TPI-Abuse	2026-07-22 19:13:50 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 157.245.60.203 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 157.245.60.203 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 22 15:13:42.928183 2026] [security2:error] [pid 1327961:tid 1327961] [client 157.245.60.203:59314] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.otfes.com"] [uri "/.env"] [unique_id "amEWZqzS4C8yxZUo_Q_fnAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-22 18:50:32 (4 days ago)	157.245.60.203 - - [23/Jul/2026:03:50:24 +0900] "GET /.env HTTP/1.1" 403 495 "-" "Mozilla/5.0 (X11; ... show more 157.245.60.203 - - [23/Jul/2026:03:50:24 +0900] "GET /.env HTTP/1.1" 403 495 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 157.245.60.203 - - [23/Jul/2026:03:50:26 +0900] "POST / HTTP/1.1" 403 495 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 157.245.60.203 - - [23/Jul/2026:03:50:31 +0900] "GET /.env HTTP/1.1" 403 497 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" ... show less	Brute-Force
Anonymous	2026-07-21 21:26:50 (5 days ago)	automatically banned	Brute-Force Web App Attack
🇩🇪 MusicLibrary	2026-07-21 19:54:15 (5 days ago)	Attempted access to sensitive configuration files (.env, .git, etc.)	Bad Web Bot Web App Attack
🇺🇸 its101	2026-07-21 17:15:04 (5 days ago)	Automated detection by LockdownAccess security system. Attack type(s): env_grab. Reason: Nginx: env_ ... show more Automated detection by LockdownAccess security system. Attack type(s): env_grab. Reason: Nginx: env_grab attack. Path targeted: unknown. Blocked in Cloudflare. show less	Web App Attack
🇩🇪 heyzg	2026-03-13 15:23:01 (4 months ago)	SSH honeypot \| Persistence Install + Password Guessing (Heavy) \| 208 auths (21 users), 391 cmds, 153 ... show more SSH honeypot \| Persistence Install + Password Guessing (Heavy) \| 208 auths (21 users), 391 cmds, 153.5m \| go_scanner (likely bot) \| tactics: .bashrc persistence show less	Hacking Exploited Host SSH
🇩🇪 int8	2026-03-13 14:50:40 (4 months ago)	2026-03-13T14:49:14.167548+00:00 squid sshd-session[3474064]: Failed password for invalid user minec ... show more 2026-03-13T14:49:14.167548+00:00 squid sshd-session[3474064]: Failed password for invalid user minecraft from 157.245.60.203 port 34124 ssh2 2026-03-13T14:49:54.350613+00:00 squid sshd-session[3474404]: Invalid user minecraft from 157.245.60.203 port 51848 2026-03-13T14:49:54.506709+00:00 squid sshd-session[3474404]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.60.203 2026-03-13T14:49:56.591181+00:00 squid sshd-session[3474404]: Failed password for invalid user minecraft from 157.245.60.203 port 51848 ssh2 2026-03-13T14:50:39.919778+00:00 squid sshd-session[3474816]: Invalid user minecraft from 157.245.60.203 port 37544 ... show less	Brute-Force SSH
🇦🇺 robotstxt	2026-03-13 14:49:47 (4 months ago)	2026-03-13T14:49:04.455185+00:00 vps-ed343ff6 sshd[3888756]: Invalid user minecraft from 157.245.60. ... show more 2026-03-13T14:49:04.455185+00:00 vps-ed343ff6 sshd[3888756]: Invalid user minecraft from 157.245.60.203 port 58810 2026-03-13T14:49:47.084976+00:00 vps-ed343ff6 sshd[3889362]: Invalid user minecraft from 157.245.60.203 port 53500 ... show less	Brute-Force
🇨🇦 hpg	2026-03-13 13:03:51 (4 months ago)	22 invalid SSH login attempts from 157.245.60.203 in the last 0.3 hours	Brute-Force SSH
Anonymous	2026-03-13 12:56:46 (4 months ago)	2026-03-13 14:46:09,177 fail2ban.actions [3109230]: NOTICE [sshd] Ban 157.245.60.203 2026-03 ... show more 2026-03-13 14:46:09,177 fail2ban.actions [3109230]: NOTICE [sshd] Ban 157.245.60.203 2026-03-13 14:56:46,412 fail2ban.actions [3109230]: NOTICE [sshd] Ban 157.245.60.203 ... show less	Brute-Force Exploited Host
🇬🇧 compilergeek	2026-03-13 12:50:52 (4 months ago)	2026-03-13T12:46:47.346064+00:00 worker-lon1 sshd[961269]: Invalid user admin from 157.245.60.203 po ... show more 2026-03-13T12:46:47.346064+00:00 worker-lon1 sshd[961269]: Invalid user admin from 157.245.60.203 port 41896 2026-03-13T12:47:50.082239+00:00 worker-lon1 sshd[961291]: Invalid user admin from 157.245.60.203 port 53926 2026-03-13T12:48:51.847207+00:00 worker-lon1 sshd[961314]: Invalid user admin from 157.245.60.203 port 53726 2026-03-13T12:49:50.879131+00:00 worker-lon1 sshd[961340]: Invalid user admin from 157.245.60.203 port 49496 2026-03-13T12:50:51.609086+00:00 worker-lon1 sshd[961366]: Invalid user admin from 157.245.60.203 port 53264 ... show less	Brute-Force SSH

Showing 1 to 15 of 77 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 198.211.116.227

🇲🇽 187.134.100.88

🇸🇪 185.217.1.243

🇮🇷 185.173.106.25

🇺🇿 185.74.7.77

🇲🇴 182.93.7.194

🇹🇭 182.53.207.106

🇹🇭 182.53.28.40

🇺🇸 172.202.113.68

🇺🇸 130.131.162.246

🇲🇦 105.155.13.145

🇩🇪 93.152.221.13

🇺🇸 91.230.168.208

🇳🇱 91.92.47.120

🇨🇦 85.217.149.56

🇨🇳 60.174.35.18

🇺🇦 46.200.204.209

🇳🇱 45.153.34.186

🇪🇨 38.224.90.36

🇺🇸 34.73.234.71