AbuseIPDB » 152.42.137.158

152.42.137.158 was found in our database!

This IP was reported 264 times. Confidence of Abuse is 100%: ?

100%

ISP	DigitalOcean LLC
Usage Type	Data Center/Web Hosting/Transit
Domain Name	digitalocean.com
Country	Netherlands (Kingdom of the)
City	Amsterdam, Noord-Holland

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 152.42.137.158

Whois 152.42.137.158

IP Abuse Reports for 152.42.137.158:

This IP address has been reported a total of 264 times from 82 distinct sources. 152.42.137.158 was first reported on September 3rd 2024, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
gu-alvareza	2024-09-24 07:05:25 (1 week ago)	SystemBC.Botnet	DDoS Attack Hacking
Anonymous	2024-09-24 04:10:06 (1 week ago)	Unsollicted Connect (4 Times), to port(s): 443	Port Scan Bad Web Bot Web App Attack
vestibtech	2024-09-23 12:26:11 (1 week ago)	[Mon Sep 23 06:26:08.544747 2024] [proxy_fcgi:error] [pid 223593:tid 223744] [client 152.42.137.158: ... show more[Mon Sep 23 06:26:08.544747 2024] [proxy_fcgi:error] [pid 223593:tid 223744] [client 152.42.137.158:43874] AH01071: Got error 'Primary script unknown' [Mon Sep 23 06:26:09.947856 2024] [proxy_fcgi:error] [pid 223594:tid 223806] [client 152.42.137.158:43908] AH01071: Got error 'Primary script unknown' [Mon Sep 23 06:26:10.558007 2024] [proxy_fcgi:error] [pid 223594:tid 223822] [client 152.42.137.158:43930] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
gu-alvareza	2024-09-23 07:05:18 (1 week ago)	SystemBC.Botnet	DDoS Attack Hacking
webbfabriken	2024-09-23 02:51:16 (1 week ago)	spam or other hacking activities reported by webbfabriken security servers Attack reported by ... show morespam or other hacking activities reported by webbfabriken security servers Attack reported by Webbfabiken Security API - WFSecAPI show less	Web Spam
HeliJP	2024-09-23 00:15:32 (1 week ago)	2024-09-22T23:54:25Z - Recognized attacks\bad behavior from IP address 152.42.137.158 on port 443\80 ... show more2024-09-22T23:54:25Z - Recognized attacks\bad behavior from IP address 152.42.137.158 on port 443\80 (9 daily hits): client denied by server configuration show less	Port Scan Hacking SQL Injection Brute-Force Web App Attack
breubit	2024-09-22 22:48:05 (1 week ago)	152.42.137.158 - - [23/Sep/2024:00:48:04 +0200] "GET /geoip/ HTTP/1.1" 404 436 "-" "Mozilla/5.0 (Win ... show more152.42.137.158 - - [23/Sep/2024:00:48:04 +0200] "GET /geoip/ HTTP/1.1" 404 436 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" ... show less	Web App Attack
Mario Bretscher	2024-09-22 22:08:55 (1 week ago)	[Mon Sep 23 00:08:52.989338 2024] [php:error] [pid 1258527] [client 152.42.137.158:48098] script &#0 ... show more[Mon Sep 23 00:08:52.989338 2024] [php:error] [pid 1258527] [client 152.42.137.158:48098] script '/var/www/html/upl.php' not found or unable to stat [Mon Sep 23 00:08:53.328841 2024] [php:error] [pid 1258421] [client 152.42.137.158:48124] script '/var/www/html/1.php' not found or unable to stat [Mon Sep 23 00:08:53.592264 2024] [php:error] [pid 1258611] [client 152.42.137.158:48132] script '/var/www/html/password.php' not found or unable to stat ... show less	Web App Attack
PulseServers	2024-09-22 21:10:40 (1 week ago)	Probing a honeypot for vulnerabilities. Ignored robots.txt - US10 Honeypot ...	Hacking Web App Attack
vtibi	2024-09-22 19:21:33 (1 week ago)	152.42.137.158 - - [22/Sep/2024:21:21:32 +0200] "GET /form.html HTTP/1.1" 404 341 "-" "curl/8.1.2"<b ... show more152.42.137.158 - - [22/Sep/2024:21:21:32 +0200] "GET /form.html HTTP/1.1" 404 341 "-" "curl/8.1.2" 152.42.137.158 - - [22/Sep/2024:21:21:32 +0200] "GET /upl.php HTTP/1.1" 404 341 "-" "Mozilla/5.0" 152.42.137.158 - - [22/Sep/2024:21:21:32 +0200] "GET /t4 HTTP/1.1" 404 341 "-" "Mozilla/5.0" 152.42.137.158 - - [22/Sep/2024:21:21:32 +0200] "GET /geoip/ HTTP/1.1" 404 341 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" ... show less	Web App Attack
security.yc3a.com	2024-09-22 18:49:44 (1 week ago)	152.42.137.158 - - [22/Sep/2024:18:49:44 +0000] "\x16\x03\x01\x00{\x01\x00\x00w\x03\x03\xCA\x95w\xA2 ... show more152.42.137.158 - - [22/Sep/2024:18:49:44 +0000] "\x16\x03\x01\x00{\x01\x00\x00w\x03\x03\xCA\x95w\xA2\x89\xEB\x00\xE6\x14\xEE\xFA\xAC\x89\xD2R7w\xD43D\xE3E7U\xE4<)\xE5V\xA9\x05\xCA\x00\x00\x1A\xC0/\xC0+\xC0\x11\xC0\x07\xC0\x13\xC0\x09\xC0\x14\xC0" 400 150 "-" "-" show less	Brute-Force Web App Attack
Anonymous	2024-09-22 17:24:57 (1 week ago)	B: f2b 404 5x	Web App Attack
initsol	2024-09-22 16:03:17 (1 week ago)	$f2bV_matches	Brute-Force
Anonymous	2024-09-22 11:45:22 (1 week ago)	Http Port:80 (http_status:403) - / - Agent:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537 ... show moreHttp Port:80 (http_status:403) - / - Agent:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36 show less	Web App Attack
guillaume illien	2024-09-22 11:24:59 (1 week ago)	152.42.137.158 - - [22/Sep/2024:11:24:58 +0000] "GET / HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows N ... show more152.42.137.158 - - [22/Sep/2024:11:24:58 +0000] "GET / HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 152.42.137.158 - - [22/Sep/2024:11:24:58 +0000] "GET /form.html HTTP/1.1" 301 178 "-" "curl/8.1.2" 152.42.137.158 - - [22/Sep/2024:11:24:59 +0000] "GET /upl.php HTTP/1.1" 301 178 "-" "Mozilla/5.0" 152.42.137.158 - - [22/Sep/2024:11:24:59 +0000] "GET /t4 HTTP/1.1" 301 178 "-" "Mozilla/5.0" 152.42.137.158 - - [22/Sep/2024:11:24:59 +0000] "GET /geoip/ HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 152.42.137.158 - - [22/Sep/2024:11:24:59 +0000] "GET /1.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 152.42.137.158 - - [22/Sep/2024:11:24:59 +0000] "GET /systembc/password.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10. ... show less	Hacking Brute-Force Web App Attack SSH