JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 157.245.75.196

157.245.75.196 was found in our database!

This IP was reported 253 times. Confidence of Abuse is 37%: ?

37%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 157.245.75.196

Whois 157.245.75.196

IP Abuse Reports for 157.245.75.196:

This IP address has been reported a total of 253 times from 155 distinct sources. 157.245.75.196 was first reported on November 26th 2025, and the most recent report was 19 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 mw	2026-09-03 00:00:44 (19 hours ago)	GET /_next/.env HTTP/1.1	Web App Attack
🇫🇷 Octopuce	2026-09-02 15:08:41 (1 day ago)	Aggressive web search of vulnerable pages: /estimer/.env /modules/.env /modules/_profiler/ /modules/ ... show more Aggressive web search of vulnerable pages: /estimer/.env /modules/.env /modules/_profiler/ /modules/ps_emailsubscription/.env /modules/ps_email ... show less	Web App Attack
🇮🇹 VHosting	2026-08-16 17:15:04 (2 weeks ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇺🇸 MPL	2026-08-16 14:29:50 (2 weeks ago)	tcp/8883 (2 or more attempts)	Port Scan
🇩🇪 Admins@FBN	2026-08-16 13:36:06 (2 weeks ago)	FW-PortScan: Traffic Blocked srcport=61006 dstport=18789	Port Scan
🇫🇷 EvoX	2026-08-16 12:23:54 (2 weeks ago)	🛡️ Honeypot [bsts-tpot-sensor]: Unsolicited SMB connection (dst port 445/tcp, src port 39210) to a p ... show more 🛡️ Honeypot [bsts-tpot-sensor]: Unsolicited SMB connection (dst port 445/tcp, src port 39210) to a passive honeypot sensor. No legitimate SMB service is exposed here; this traffic is consistent with automated internet-wide scanning or exploitation attempts targeting SMB (e.g. EternalBlue-class vulnerabilities). show less	Hacking
🇩🇪 iamimmanuelraj	2026-02-22 01:23:05 (6 months ago)	Fail2ban SSH Bruteforce - Port = 22 - Failures = 5 - Time = 1769067633	Brute-Force SSH
🇹🇷 rtbh.com.tr	2026-02-08 20:11:27 (6 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇫🇷 SpaceHost-Server	2026-02-06 23:31:12 (6 months ago)		Brute-Force Web App Attack
🇹🇷 rtbh.com.tr	2026-02-06 20:11:25 (6 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇯🇵 zwh	2026-02-06 18:05:43 (6 months ago)	SSH Brute-Force	Brute-Force SSH
🇩🇪 ghostwarriors	2026-02-05 15:20:20 (6 months ago)	Unauthorized connection attempt detected, SSH Brute-Force	Port Scan Brute-Force SSH
🇫🇷 pr0vieh	2026-02-05 15:02:11 (6 months ago)	2026-02-05T15:59:03.012336+01:00 Linux01 sshd[55156]: pam_unix(sshd:auth): authentication failure; l ... show more 2026-02-05T15:59:03.012336+01:00 Linux01 sshd[55156]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.75.196 user=root 2026-02-05T15:59:05.533604+01:00 Linux01 sshd[55156]: Failed password for root from 157.245.75.196 port 35584 ssh2 2026-02-05T15:59:48.394089+01:00 Linux01 sshd[56235]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.75.196 user=root 2026-02-05T15:59:50.581606+01:00 Linux01 sshd[56235]: Failed password for root from 157.245.75.196 port 38230 ssh2 2026-02-05T16:00:34.915414+01:00 Linux01 sshd[57395]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.75.196 user=root 2026-02-05T16:00:37.147961+01:00 Linux01 sshd[57395]: Failed password for root from 157.245.75.196 port 41306 ssh2 2026-02-05T16:01:21.610655+01:00 Linux01 sshd[58226]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.7 ... show less	Brute-Force SSH
🇷🇺 Selckie	2026-02-05 15:02:09 (6 months ago)	SSH Brute-Force	Brute-Force SSH
🇩🇪 vmd56152.contaboserver.net	2026-02-05 15:01:58 (6 months ago)	2026-02-05T15:58:51.569529 vmd56152.contaboserver.net sshd[1186102]: pam_unix(sshd:auth): authentica ... show more 2026-02-05T15:58:51.569529 vmd56152.contaboserver.net sshd[1186102]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.75.196 user=root 2026-02-05T15:58:53.249275 vmd56152.contaboserver.net sshd[1186102]: Failed password for root from 157.245.75.196 port 55152 ssh2 2026-02-05T15:59:36.897336 vmd56152.contaboserver.net sshd[1186185]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.75.196 user=root 2026-02-05T15:59:38.751596 vmd56152.contaboserver.net sshd[1186185]: Failed password for root from 157.245.75.196 port 55394 ssh2 2026-02-05T16:00:23.347507 vmd56152.contaboserver.net sshd[1186309]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.75.196 user=root 2026-02-05T16:00:25.321664 vmd56152.contaboserver.net sshd[1186309]: Failed password for root from 157.245.75.196 port 48262 ssh2 2026-02-05T16:01:09.723908 vmd56152.contaboserver.net sshd[11 ... show less	Brute-Force SSH

Showing 1 to 15 of 253 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 185.160.137.198

🇸🇬 101.32.240.31

🇧🇬 79.124.40.162

🇺🇸 66.132.186.128

🇮🇩 36.92.41.115

🇺🇸 143.198.99.209

🇮🇳 66.116.224.129

🇳🇱 45.148.10.157

🇹🇷 176.98.41.251

🇺🇸 107.150.97.10

🇨🇦 85.217.149.65

🇩🇪 213.209.159.133

🇹🇼 198.235.24.77

🇧🇷 172.217.35.144

🇩🇪 161.35.201.109

🇫🇮 147.185.133.7

🇪🇸 84.126.78.89

🇬🇧 35.203.210.171

🇳🇱 34.178.168.37

🇺🇸 34.74.231.78