JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

152.42.162.14

Neutral Activity

Abuse confidence score ?

0% Low Risk

26 reports

18 reporters · latest 2 years ago

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇸🇬 Singapore
City	Singapore

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

152.42.162.14 has been reported 26 times. The most recent report is from 2 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 152.42.162.14

This IP address has been reported a total of 26 times from 18 distinct sources. 152.42.162.14 was first reported on March 26th 2024, and the most recent report was 2 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2024-04-17 20:22:05 (2 years ago)	Fail2Ban apache-noscript	Bad Web Bot
🇺🇸 etu brutus	2024-04-16 21:38:48 (2 years ago)	152.42.162.14 has been banned for [WebApp Attack] ...	Hacking Bad Web Bot Web App Attack
Anonymous	2024-04-16 08:48:33 (2 years ago)	Bot / scanning and/or hacking attempts: GET /wp-content/themes/mero-magazine/ HTTP/1.1, GET /.well-k ... show more Bot / scanning and/or hacking attempts: GET /wp-content/themes/mero-magazine/ HTTP/1.1, GET /.well-known/pki-validation/fm.php?xsec=blocker HTTP/1.1, GET /cgi-bin/upfile.php HTTP/1.1, GET /blogs/ HTTP/1.1, GET /images/images/ HTTP/1.1, GET /line/ HTTP/1.1, GET /cgi-bin/xmrlpc.php HTTP/1.1, GET /wp-content/themes/mikado_tcd071/ HTTP/1.1, GET /cgi-bin/temp.php HTTP/1.1, GET /.well-known/pki-validation/flame.php HTTP/1.1, GET /cgi-bin/install.php HTTP/1.1, GET /cgi-bin/wp-blog.php HTTP/1.1, GET /happy01/ HTTP/1.1, GET /welcome/ HTTP/1.1, GET /cgi-bin/xmlrpc.php HTTP/1.1, GET /pt/ HTTP/1.1, GET /cgi-bin/cloud.php HTTP/1.1, GET /wp-content/themes/solaris_tcd088/ HTTP/1.1, GET /assets/jquery/ HTTP/1.1, GET /modules/modules/ HTTP/1.1, done, streams: 0/1/1/0/0 (open/recv/resp/push/rst), GET /.well-known/doc.php HTTP/1.1, idle, streams: 0/3/3/0/0 (open/recv/resp/push/rst), done, streams: 0/3/3/0/0 (open/recv/resp/push/rst) show less	Hacking Web App Attack
Anonymous	2024-04-16 01:30:15 (2 years ago)	Excessive HTTP/HTTPS connections.	Bad Web Bot
🇺🇸 TPI-Abuse	2024-04-16 00:44:22 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 152.42.162.14 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 152.42.162.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 15 20:44:17.291716 2024] [security2:error] [pid 3095] [client 152.42.162.14:59508] [client 152.42.162.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "evokesolutions.net"] [uri "/wp-config.php"] [unique_id "Zh3J4emU0j_r_cEYKEJK0wAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 uhlhosting	2024-04-12 18:24:01 (2 years ago)	mightylions.cz 152.42.162.14 - - [12/Apr/2024:20:23:23.303127 +0200] "GET /.well-known/acme-challeng ... show more mightylions.cz 152.42.162.14 - - [12/Apr/2024:20:23:23.303127 +0200] "GET /.well-known/acme-challenge/ HTTP/1.1" 403 199 "-" "-" Zhl8G1lUHq3adnkwvuHSVgAAAMA "-" /apache/20240412/20240412-2023/20240412-202323-Zhl8G1lUHq3adnkwvuHSVgAAAMA 0 1161 md5:fcf8fefb31f92ee0cd887faa346439a3 mightylions.cz 152.42.162.14 - - [12/Apr/2024:20:23:25.573243 +0200] "GET /.well-knownold/ HTTP/1.1" 403 199 "-" "-" Zhl8HVlUHq3adnkwvuHSYQAAAMI "-" /apache/20240412/20240412-2023/20240412-202325-Zhl8HVlUHq3adnkwvuHSYQAAAMI 0 1040 md5:29da23ea4080a5210de4f9ed7d6a84ca mightylions.cz 152.42.162.14 - - [12/Apr/2024:20:23:42.954199 +0200] "GET /.X1-unix/ HTTP/1.1" 403 199 "-" "-" Zhl8LuX_a8D2XdBgMjVuVgAAAQY "-" /apache/20240412/20240412-2023/20240412-202342-Zhl8LuX_a8D2XdBgMjVuVgAAAQY 0 994 md5:29a23a8d17673c98777583a429b8ec3d mightylions.cz 152.42.162.14 - - [12/Apr/2024:20:23:44.118636 +0200] "GET /.qidb/ HTTP/1.1" 403 199 "-" "-" Zhl8MOX_a8D2XdBgMjVuWAAAARI "-" /apache/20240412/20240412-2023/20240412-202344-Z ... show less	DDoS Attack Brute-Force
🇺🇸 TPI-Abuse	2024-04-11 23:10:54 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 152.42.162.14 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 152.42.162.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 11 19:10:48.734072 2024] [security2:error] [pid 31320] [client 152.42.162.14:55440] [client 152.42.162.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "personinenvironment.com"] [uri "/wp-config.php"] [unique_id "Zhht-CrCIIhrQEAtHS8ChgAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇨 icp77	2024-04-08 20:30:00 (2 years ago)	Abuse	DDoS Attack Ping of Death Port Scan Hacking SQL Injection Brute-Force Exploited Host Web App Attack
🇧🇷 hostseries	2024-04-08 05:52:14 (2 years ago)	Trigger: LF_MODSEC	Brute-Force
🇳🇱 Savvii	2024-04-07 23:27:39 (2 years ago)	20 attempts against mh-misbehave-ban on redirect	Brute-Force Bad Web Bot Web App Attack
🇵🇱 mkrufczyk	2024-04-07 18:02:00 (2 years ago)	/cgi-bin/network.php	Bad Web Bot
🇺🇸 TPI-Abuse	2024-04-06 08:43:46 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 152.42.162.14 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 152.42.162.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 06 04:43:42.114580 2024] [security2:error] [pid 31024] [client 152.42.162.14:61974] [client 152.42.162.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pghsea.com"] [uri "/wp-config.php"] [unique_id "ZhELPhM0psidybMe66VOLwAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇴 Abuse Buster	2024-04-03 20:14:28 (2 years ago)	Fee-fi-fo-fum, nettroll, searching for web exploits – you scum	Web App Attack
🇺🇸 TPI-Abuse	2024-04-03 20:13:59 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 152.42.162.14 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 152.42.162.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 03 16:13:54.116379 2024] [security2:error] [pid 18095] [client 152.42.162.14:63126] [client 152.42.162.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "americashealthtalk.com"] [uri "/wp-config.php"] [unique_id "Zg24gmn4qftohU0D_PuUjwAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 rh24	2024-04-03 09:17:25 (2 years ago)	(mod_security) mod_security triggered on hostname [redacted] 152.42.162.14 (SG/Singapore/-): (CF_EN ... show more (mod_security) mod_security triggered on hostname [redacted] 152.42.162.14 (SG/Singapore/-): (CF_ENABLE) show less	SQL Injection

Showing 1 to 15 of 26 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 185.220.101.22

🇺🇸 107.180.88.176

🇨🇳 101.26.28.63

🇫🇷 88.179.38.181

🇨🇦 85.217.149.52

🇺🇸 64.62.156.213

🇧🇷 45.205.1.133

🇺🇸 43.162.124.26

🇨🇳 223.166.244.216

🇧🇷 200.9.25.52

🇪🇹 196.189.124.218

🇳🇱 192.42.116.17

🇺🇸 162.216.150.159

🇵🇰 119.152.247.196

🇩🇪 84.200.91.155

🇺🇸 70.188.106.162

🇨🇳 47.92.114.84

🇩🇪 43.228.157.9

🇨🇭 34.65.127.151

🇧🇷 16.5.0.207