JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

152.42.164.57

Neutral Activity

Abuse Confidence Score

0% Low Risk

20 reports

7 reporters · latest 2 years ago

ISP: DigitalOcean, LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS14061
Domain Name: digitalocean.com
Country: 🇸🇬 Singapore
City: Singapore

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

152.42.164.57 has been reported 20 times. The most recent report is from 2 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

20 from 7 distinct reporters

First reported

July 5th 2024

Most recent report

2 years ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 Burayot	2024-07-16 16:25:50 UTC · (2 years ago)	LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 152.42.164.57 (SG/Singapore/-): 2 in the last 3600 secs	Web App Attack
🇮🇩 hermawan	2024-07-16 14:05:08 UTC · (2 years ago)	[Tue Jul 16 20:57:30.173949 2024] [security2:error] [pid 688692:tid 139276035556928] [client 152.42.164.57:50667] [client 152.42.164.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "python-requests" at REQUEST_HEADERS:User-Agen ... show more [Tue Jul 16 20:57:30.173949 2024] [security2:error] [pid 688692:tid 139276035556928] [client 152.42.164.57:50667] [client 152.42.164.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "python-requests" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.3.0/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "157"] [id "913101"] [msg "Found User-Agent associated with scripting/generic HTTP client"] [data "Matched Data: python-requests found within REQUEST_HEADERS:User-Agent: python-requests/2.27.1 request_line = GET /.env HTTP/1.1"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scripting"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [tag "paranoia-level/2"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/.env"] [unique_id "ZpZ8SvzxLoSayXT4e8IyLgAAAtU"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[688755] [kfAAuq2Ew5c] [ ... show less	Hacking Web App Attack
🇮🇩 Incidents Response Neptus Team	2024-07-16 03:53:00 UTC · (2 years ago)	Report Abuse IP	Hacking Exploited Host Web App Attack
🇺🇸 mawan	2024-07-15 18:04:08 UTC · (2 years ago)	Suspected of having performed illicit activity on LAX server.	Web App Attack
🇮🇩 Incidents Response Neptus Team	2024-07-15 02:27:00 UTC · (2 years ago)	Report Abuse IP	Hacking Exploited Host Web App Attack
🇮🇩 hermawan	2024-07-14 08:23:39 UTC · (2 years ago)	[Sun Jul 14 15:23:35.523647 2024] [security2:error] [pid 889723:tid 134477953107520] [client 152.42.164.57:63922] [client 152.42.164.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "300" at REQUEST_HEADERS:Keep-Alive. [file "/e ... show more [Sun Jul 14 15:23:35.523647 2024] [security2:error] [pid 889723:tid 134477953107520] [client 152.42.164.57:63922] [client 152.42.164.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "300" at REQUEST_HEADERS:Keep-Alive. [file "/etc/modsecurity/coreruleset-4.3.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "119"] [id "440004"] [msg "Keep Alive Header"] [data "Matched Data: 300 found within REQUEST_HEADERS:Keep-Alive: 300 request_line = GET / HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/"] [unique_id "ZpOLB0li7XKwPSdrJ5IfGgAAAUY"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[889771] [Mogr1AC8Gv0] [ZpOLB0li7XKwPSdrJ5IfGgAAAUY] keep_alive=[0] [2024-07-14 15:23:35.523650] [R:ZpOLB0li7XKwPSdrJ5IfGgAAAUY] UA:'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36' Host:'staklim-jatim.bmkg.go.id' ACCEPT:'text/html,application/xhtml+xml,application/xml;q=0.9,/; ... show less	Hacking Web App Attack
🇺🇸 mawan	2024-07-13 14:24:04 UTC · (2 years ago)	Suspected of having performed illicit activity on LAX server.	Web App Attack
🇺🇸 mawan	2024-07-12 14:21:23 UTC · (2 years ago)	Suspected of having performed illicit activity on LAX server.	Web App Attack
🇮🇩 hermawan	2024-07-12 07:54:29 UTC · (2 years ago)	[Fri Jul 12 14:54:27.237381 2024] [security2:error] [pid 641053:tid 128261736629824] [client 152.42.164.57:62365] [client 152.42.164.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "python-requests" at REQUEST_HEADERS:User-Agen ... show more [Fri Jul 12 14:54:27.237381 2024] [security2:error] [pid 641053:tid 128261736629824] [client 152.42.164.57:62365] [client 152.42.164.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "python-requests" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.3.0/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "157"] [id "913101"] [msg "Found User-Agent associated with scripting/generic HTTP client"] [data "Matched Data: python-requests found within REQUEST_HEADERS:User-Agent: python-requests/2.27.1 request_line = GET /.env HTTP/1.1"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scripting"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [tag "paranoia-level/2"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/.env"] [unique_id "ZpDhMws35qGF5dwcmaZSYAAAAlk"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[641121] [6y9FMPju5S8] [ ... show less	Hacking Web App Attack
🇮🇩 hermawan	2024-07-11 15:58:45 UTC · (2 years ago)	[Thu Jul 11 22:56:38.554661 2024] [security2:error] [pid 1057320:tid 136681627846208] [client 152.42.164.57:57317] [client 152.42.164.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "300" at REQUEST_HEADERS:Keep-Alive. [file "/ ... show more [Thu Jul 11 22:56:38.554661 2024] [security2:error] [pid 1057320:tid 136681627846208] [client 152.42.164.57:57317] [client 152.42.164.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "300" at REQUEST_HEADERS:Keep-Alive. [file "/etc/modsecurity/coreruleset-4.3.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "119"] [id "440004"] [msg "Keep Alive Header"] [data "Matched Data: 300 found within REQUEST_HEADERS:Keep-Alive: 300 request_line = GET / HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/"] [unique_id "ZpAAthg1jPQzx7Xpt88UjgAAAOY"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[1057400] [ZobhzpIGVTE] [ZpAAthg1jPQzx7Xpt88UjgAAAOY] keep_alive=[0] [2024-07-11 22:56:38.554667] [R:ZpAAthg1jPQzx7Xpt88UjgAAAOY] UA:'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36' Host:'staklim-jatim.bmkg.go.id' ACCEPT:'text/html,application/xhtml+xml,application/xml;q=0.9,*/ ... show less	Hacking Web App Attack
🇲🇽 kuro1730	2024-07-11 14:21:00 UTC · (2 years ago)	/cms/wp-includes/wlwmanifest.xml	Web App Attack
🇺🇸 mawan	2024-07-11 05:25:55 UTC · (2 years ago)	Suspected of having performed illicit activity on LAX server.	Web App Attack
🇮🇩 hermawan	2024-07-11 04:30:48 UTC · (2 years ago)	[Thu Jul 11 11:26:25.834306 2024] [security2:error] [pid 541285:tid 123451585070656] [client 152.42.164.57:52335] [client 152.42.164.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "300" at REQUEST_HEADERS:Keep-Alive. [file "/e ... show more [Thu Jul 11 11:26:25.834306 2024] [security2:error] [pid 541285:tid 123451585070656] [client 152.42.164.57:52335] [client 152.42.164.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "300" at REQUEST_HEADERS:Keep-Alive. [file "/etc/modsecurity/coreruleset-4.3.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "119"] [id "440004"] [msg "Keep Alive Header"] [data "Matched Data: 300 found within REQUEST_HEADERS:Keep-Alive: 300 request_line = GET / HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/"] [unique_id "Zo9e8WxaX4c4dWnpLzUk9AAAAMM"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[541330] [EpR9KoHgHxY] [Zo9e8WxaX4c4dWnpLzUk9AAAAMM] keep_alive=[0] [2024-07-11 11:26:25.834311] [R:Zo9e8WxaX4c4dWnpLzUk9AAAAMM] UA:'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36' Host:'staklim-jatim.bmkg.go.id' ACCEPT:'text/html,application/xhtml+xml,application/xml;q=0.9,/; ... show less	Hacking Web App Attack
Anonymous	2024-07-11 02:58:15 UTC · (2 years ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇮🇩 Incidents Response Neptus Team	2024-07-10 06:13:00 UTC · (2 years ago)	Report Abuse IP	Hacking Exploited Host Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇵🇾 143.202.208.242

🇫🇷 82.127.61.116

🇨🇳 60.188.112.158

🇯🇵 20.78.136.78

🇳🇱 195.178.110.26

🇨🇳 113.24.225.213

🇨🇳 113.24.225.183

🇳🇱 109.160.32.116

🇺🇦 95.215.218.163

🇷🇴 80.94.95.115

🇺🇸 38.141.252.55

🇮🇳 34.180.62.163

🇺🇸 20.84.74.250

🇹🇼 219.70.241.11

🇳🇱 213.209.159.108

🇨🇱 200.114.64.254

🇺🇦 195.162.88.161

🇰🇿 93.170.213.48

🇺🇸 91.230.168.38

🇳🇱 45.148.10.152