JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 152.42.139.96

152.42.139.96 was found in our database!

This IP was reported 347 times. Confidence of Abuse is 0%: ?

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 152.42.139.96

Whois 152.42.139.96

IP Abuse Reports for 152.42.139.96:

This IP address has been reported a total of 347 times from 207 distinct sources. 152.42.139.96 was first reported on January 17th 2026, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-03-11 22:59:59 (3 months ago)	Auto-ban: >3000 req/min op 2026-03-11	Web App Attack SSH Hacking
🇧🇪 cmbplf	2026-03-11 08:26:43 (3 months ago)	2.200 POST requests with url.path */wp-login.php	Brute-Force Bad Web Bot
🇩🇪 stinpriza	2026-03-11 06:43:00 (3 months ago)	Web App Attack	Web App Attack
🇬🇧 AdrianT	2026-02-12 14:42:05 (4 months ago)	SSH brute force	Brute-Force SSH
🇹🇭 Sawasdee	2026-02-10 06:48:07 (4 months ago)	Unwanted checking 80 or 443 port ...	Bad Web Bot
🇳🇱 VMHeaven.io	2026-02-10 06:41:10 (4 months ago)	Blocked by UFW [2000/tcp] Source port: 61014 TTL: 248 Packet length: 44	Port Scan
🇹🇷 rtbh.com.tr	2026-01-28 08:11:16 (4 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇮🇳 sh97	2026-01-23 08:05:10 (4 months ago)	IN01-DRDP-HYD: Blocked by Fail2Ban for SSH Brute Force from 152.42.139.96 at 2026-01-23 08:05:10 UTC	Brute-Force SSH
🇬🇧 sc user	2026-01-21 18:42:09 (4 months ago)	Fail2Ban sshd: repeated SSH login failures (possible brute-force) detected by automated security too ... show more Fail2Ban sshd: repeated SSH login failures (possible brute-force) detected by automated security tooling. Technical log details and local server identifiers intentionally omitted for privacy. show less	Brute-Force SSH
🇹🇷 rtbh.com.tr	2026-01-20 20:11:08 (4 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇬🇧 oolivero45	2026-01-20 14:06:16 (4 months ago)	Jan 20 14:03:43 nervous-edison8 sshd[2036926]: Failed password for root from 152.42.139.96 port 4079 ... show more Jan 20 14:03:43 nervous-edison8 sshd[2036926]: Failed password for root from 152.42.139.96 port 40790 ssh2 Jan 20 14:05:03 nervous-edison8 sshd[2037526]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.42.139.96 user=root Jan 20 14:05:05 nervous-edison8 sshd[2037526]: Failed password for root from 152.42.139.96 port 35598 ssh2 Jan 20 14:06:13 nervous-edison8 sshd[2038039]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.42.139.96 user=root Jan 20 14:06:15 nervous-edison8 sshd[2038039]: Failed password for root from 152.42.139.96 port 44240 ssh2 ... show less	Brute-Force SSH
🇩🇪 FunyMails	2026-01-20 14:02:48 (4 months ago)	Jan 20 14:01:35 localhost sshd[3917907]: Connection closed by authenticating user root 152.42.139.96 ... show more Jan 20 14:01:35 localhost sshd[3917907]: Connection closed by authenticating user root 152.42.139.96 port 60208 [preauth] Jan 20 14:02:44 localhost sshd[3917910]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.42.139.96 user=root Jan 20 14:02:47 localhost sshd[3917910]: Failed password for root from 152.42.139.96 port 56374 ssh2 ... show less	Brute-Force SSH
🇦🇺 specializedtom	2026-01-20 14:02:28 (4 months ago)	Fail2Ban triggered a ban on 152.42.139.96 for postfix-sasl	Phishing Email Spam Spoofing
🇨🇭 Elysium Security	2026-01-20 13:58:10 (4 months ago)	Mass port scanning on a whole network	Port Scan
🇺🇸 RAP	2026-01-20 12:14:08 (4 months ago)	2026-01-20 12:14:08 UTC Unauthorized activity to TCP port 8089. Web App	Port Scan Web App Attack

Showing 1 to 15 of 347 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 194.163.185.4

🇩🇪 185.242.3.173

🇧🇷 177.86.111.184

🇸🇪 171.25.158.88

🇵🇰 119.73.23.98

🇮🇩 103.166.10.244

🇺🇸 66.132.172.251

🇺🇸 44.221.227.90

🇬🇧 35.203.210.235

🇺🇸 2607:f8b0:4023:1004::12d

🇺🇸 216.25.89.81

🇹🇼 198.235.24.84

🇺🇸 162.216.149.58

🇨🇳 118.196.48.68

🇰🇿 89.107.99.224

🇵🇱 87.251.64.176

🇮🇹 79.3.96.178

🇨🇳 58.144.196.164

🇺🇸 57.141.0.69

🇺🇸 18.221.179.104