JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 157.245.61.54

157.245.61.54 was found in our database!

This IP was reported 29 times. Confidence of Abuse is 100%: ?

100%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 157.245.61.54

Whois 157.245.61.54

IP Abuse Reports for 157.245.61.54:

This IP address has been reported a total of 29 times from 27 distinct sources. 157.245.61.54 was first reported on July 5th 2023, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 WellSpring	2026-08-31 17:01:42 (1 hour ago)	wordpress scan on 984.today/wp-admin/ — WellSpr.ing/NetSentinel civic-AI security layer	Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-08-31 16:19:53 (1 hour ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇩🇪 LRob	2026-08-31 15:25:30 (2 hours ago)	Malicious web request: probing for secrets, traversal or a known exploit path \| method: GET \| path: ... show more Malicious web request: probing for secrets, traversal or a known exploit path \| method: GET \| path: / \| query: author=1 (+3 more) \| 2026-08-31 15:25 UTC show less	Hacking Web App Attack
Anonymous	2026-08-31 14:43:24 (3 hours ago)	Web application attack detected.	Web App Attack
🇨🇦 zXero	2026-08-31 14:27:11 (3 hours ago)	Fail2Ban automatic report - jail: no-wordpress	Brute-Force SSH DDoS Attack
🇩🇪 ger-stg-sifi1	2026-08-31 13:04:31 (5 hours ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
🇳🇱 Mangelot Hosting	2026-08-31 12:48:33 (5 hours ago)	(wp_login_try) srv104 WordPress Login Brute Force 157.245.61.54 (SG/Singapore/-): 20 in the last 360 ... show more (wp_login_try) srv104 WordPress Login Brute Force 157.245.61.54 (SG/Singapore/-): 20 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇦🇺 paulshipley.com.au	2026-08-31 12:40:00 (5 hours ago)	levellagiftware.com.au:443 157.245.61.54 - - [31/Aug/2026:22:39:58 +1000] "GET /?author=1 HTTP/1.1" ... show more levellagiftware.com.au:443 157.245.61.54 - - [31/Aug/2026:22:39:58 +1000] "GET /?author=1 HTTP/1.1" 404 189121 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" ... show less	Web App Attack
🇩🇪 IVski.com	2026-08-31 10:53:38 (7 hours ago)	IVski WAF \| WordPress login probe - accessing wp-login.php	Hacking Brute-Force Web App Attack
🇫🇷 masterguru	2026-08-31 10:49:56 (7 hours ago)	(wordpress) Apache: Failed WordPress login from 157.245.61.54 (SG/Singapore/-): 10 in the last 3600 ... show more (wordpress) Apache: Failed WordPress login from 157.245.61.54 (SG/Singapore/-): 10 in the last 3600 secs (0-195) show less	Hacking
🇺🇸 TPI-Abuse	2026-08-31 10:36:52 (7 hours ago)	(mod_security) mod_security (id:225170) triggered by 157.245.61.54 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 157.245.61.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 06:36:45.742466 2026] [security2:error] [pid 24717:tid 24737] [client 157.245.61.54:62790] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|captechinc.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "captechinc.com"] [uri "/wp-json/wp/v2/users"] [unique_id "apVZPfRJWqkQMsEnukHCGwAAAFE"], referer: https://www.google.com/search?q=wordpress show less	Brute-Force Bad Web Bot Web App Attack
🇵🇱 Budyn	2026-08-31 10:33:10 (7 hours ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: dont-eat-the-pudding.online \| URI: /wp-login.php \| UA: Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇺🇸 Victor López	2026-08-31 10:24:59 (7 hours ago)	157.245.61.54 - - [31/Aug/2026:05:24:55 -0500] "GET /wp-login.php HTTP/2.0" 404 7006 "-" "Mozilla/5. ... show more 157.245.61.54 - - [31/Aug/2026:05:24:55 -0500] "GET /wp-login.php HTTP/2.0" 404 7006 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:120.0) Gecko/20100101 Firefox/120.0" 157.245.61.54 - - [31/Aug/2026:05:24:58 -0500] "GET /wp-login.php HTTP/2.0" 404 6996 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇪🇸 alferez	2026-08-31 10:12:57 (7 hours ago)	Multiple WP Login Attack	Hacking Exploited Host Web App Attack
🇫🇮 stinpriza	2026-08-31 10:06:07 (8 hours ago)	Web App Attack	Web App Attack

Showing 1 to 15 of 29 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 223.233.86.237

🇲🇦 197.146.135.222

🇩🇪 194.187.176.222

🇧🇪 158.173.67.102

🇺🇸 147.185.132.248

🇺🇸 64.94.159.244

🇬🇧 35.203.210.107

🇮🇳 202.53.94.242

🇷🇺 84.201.243.44

🇺🇸 66.42.78.244

🇬🇧 193.163.125.157

🇻🇪 190.205.58.18

🇭🇰 172.253.4.19

🇺🇸 172.233.162.245

🇺🇸 147.185.132.82

🇮🇳 103.157.149.14

🇵🇹 85.139.119.249

🇺🇸 54.91.29.15

🇧🇷 201.63.52.54

🇨🇳 182.119.224.93