JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 152.42.142.104

152.42.142.104 was found in our database!

This IP was reported 26 times. Confidence of Abuse is 0%: ?

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 152.42.142.104

Whois 152.42.142.104

IP Abuse Reports for 152.42.142.104:

This IP address has been reported a total of 26 times from 24 distinct sources. 152.42.142.104 was first reported on December 6th 2025, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇷🇺 DZBOT	2026-02-26 15:34:05 (3 months ago)	SMTP. NO LOGIN / auth failed	Port Scan Brute-Force
🇳🇱 nikki101	2026-02-26 15:22:17 (3 months ago)	smtp unauthorized access attempt, inappropriate conduct	Email Spam Brute-Force
🇳🇱 VMHeaven.io	2026-02-26 14:16:51 (3 months ago)	Blocked by UFW [3389/tcp] Source port: 61007 TTL: 248 Packet length: 44	Port Scan Hacking Brute-Force
🇺🇸 MPL	2026-02-26 14:11:13 (3 months ago)	tcp/443 (2 or more attempts)	Port Scan
🇫🇮 notalunar	2026-02-26 03:10:42 (3 months ago)	Massivepot \| Log: 2026-02-26 03:10:40 \| IP:152.42.142.104 \| PORT:8443 \| CAT:web_admin \| DATA:1603010 ... show more Massivepot \| Log: 2026-02-26 03:10:40 \| IP:152.42.142.104 \| PORT:8443 \| CAT:web_admin \| DATA:1603010200010001fc03030d728b274bf796cf6ba000c488b573ab634893be84c0c30e2ca30a6c324a7ec520aa153d5dd9fe35122256d86b296b19517c1ff881 show less	Port Scan
🇺🇸 MPL	2026-02-26 02:59:15 (3 months ago)	tcp/4000	Port Scan
🇺🇸 ne1for23	2026-02-26 02:48:47 (3 months ago)	Attempt to access invalid virtual host name (###.###.###.###). Typically used to access "internal" ... show more Attempt to access invalid virtual host name (###.###.###.###). Typically used to access "internal" resources improperly exposed externally and "protected" only by a lack of external DNS resolution. 152.42.142.104 - - [26/Feb/2026:02:48:47 +0000] "GET / HTTP/1.1" 403 555 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" "-" show less	Hacking
🇺🇸 sumnone	2026-02-26 02:11:10 (3 months ago)	Port probing on unauthorized port 8888	Port Scan Hacking Exploited Host
🇺🇸 MPL	2026-02-24 13:15:03 (3 months ago)	tcp/1883 (2 or more attempts)	Port Scan
🇦🇹 urnilxfgbez	2025-12-06 23:45:00 (6 months ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇬🇧 oolivero45	2025-12-06 22:04:44 (6 months ago)	Dec 6 22:02:45 nervous-edison8 sshd[3922164]: Failed password for root from 152.42.142.104 port 343 ... show more Dec 6 22:02:45 nervous-edison8 sshd[3922164]: Failed password for root from 152.42.142.104 port 34326 ssh2 Dec 6 22:03:43 nervous-edison8 sshd[3922612]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.42.142.104 user=root Dec 6 22:03:46 nervous-edison8 sshd[3922612]: Failed password for root from 152.42.142.104 port 34174 ssh2 Dec 6 22:04:41 nervous-edison8 sshd[3923015]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.42.142.104 user=root Dec 6 22:04:43 nervous-edison8 sshd[3923015]: Failed password for root from 152.42.142.104 port 33460 ssh2 ... show less	Brute-Force SSH
🇩🇪 pnpde.social	2025-12-06 22:04:19 (6 months ago)	2025-12-06T23:02:18.807552+01:00 weberin sshd[3950487]: Failed password for root from 152.42.142.104 ... show more 2025-12-06T23:02:18.807552+01:00 weberin sshd[3950487]: Failed password for root from 152.42.142.104 port 44070 ssh2 2025-12-06T23:03:19.639516+01:00 weberin sshd[3950537]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.42.142.104 user=root 2025-12-06T23:03:22.167586+01:00 weberin sshd[3950537]: Failed password for root from 152.42.142.104 port 33176 ssh2 2025-12-06T23:04:16.647262+01:00 weberin sshd[3950558]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.42.142.104 user=root 2025-12-06T23:04:19.004098+01:00 weberin sshd[3950558]: Failed password for root from 152.42.142.104 port 47076 ssh2 ... show less	Brute-Force SSH
🇦🇺 specializedtom	2025-12-06 22:02:57 (6 months ago)	Fail2Ban triggered a ban on 152.42.142.104 for postfix-sasl	Phishing Email Spam Spoofing
🇩🇪 Mario Silber	2025-12-06 22:02:36 (6 months ago)	(sshd) Failed SSH login from 152.42.142.104 (NL/The Netherlands/-)	Brute-Force SSH
🇩🇪 Portuseco Biling	2025-12-06 22:02:32 (6 months ago)	Hetzner-F2B blocked SSH BF-	Brute-Force SSH

Showing 1 to 15 of 26 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 2a01:4f8:150:13a5::100:21

🇷🇺 217.114.1.240

🇺🇸 216.73.216.238

🇵🇱 195.43.66.158

🇫🇮 147.185.133.136

🇨🇳 124.174.17.2

🇻🇳 116.110.218.160

🇺🇸 107.150.99.126

🇺🇸 64.62.156.67

🇳🇱 45.148.10.121

🇧🇷 20.226.88.145

🇰🇷 220.127.148.6

🇩🇪 185.242.3.195

🇵🇰 139.135.40.247

🇭🇰 103.226.124.223

🇫🇷 85.69.240.210

🇳🇱 45.148.10.151

🇺🇸 34.10.230.51

🇳🇱 5.61.209.224

🇮🇶 185.166.25.150