JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 152.42.189.253

152.42.189.253 was found in our database!

This IP was reported 38 times. Confidence of Abuse is 100%: ?

100%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 152.42.189.253

Whois 152.42.189.253

IP Abuse Reports for 152.42.189.253:

This IP address has been reported a total of 38 times from 23 distinct sources. 152.42.189.253 was first reported on August 29th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 wbsouza	2026-08-31 03:47:32 (1 day ago)	CrowdSec: infra/bad-path-probe — automated firewall drops on self-hosted IDS sensor	Hacking
🇩🇪 on-com	2026-08-30 21:37:10 (1 day ago)	URL scan	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-08-30 21:16:56 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 152.42.189.253 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 152.42.189.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 30 17:16:50.599718 2026] [security2:error] [pid 4109:tid 4109] [client 152.42.189.253:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "api.nsfwmanager.com"] [uri "/.git/config"] [unique_id "apSdwpzPlogjHtICMZebBAAAAAw"], referer: http://api.nsfwmanager.com/.git/config show less	Brute-Force Bad Web Bot Web App Attack
🇵🇱 Niko's Stuff	2026-08-30 21:01:35 (1 day ago)	Triggered crowdsecurity/CVE-2017-9841. More information at: https://app.crowdsec.net/cti/152.42.189. ... show more Triggered crowdsecurity/CVE-2017-9841. More information at: https://app.crowdsec.net/cti/152.42.189.253 show less	Web App Attack
Anonymous	2026-08-30 20:26:04 (1 day ago)	"GET /.git/config HTTP/1.1"	Hacking Web App Attack
🇩🇪 LRob	2026-08-30 19:59:58 (1 day ago)	Probing for secret files (.git, .env, credentials, database dumps, wp-config) \| method: GET \| path: ... show more Probing for secret files (.git, .env, credentials, database dumps, wp-config) \| method: GET \| path: /.git/config \| 2026-08-30 19:59 UTC show less	Hacking Web App Attack
🇦🇺 aranguren.org	2026-08-30 18:34:08 (1 day ago)	152.42.189.253 - - [31/Aug/2026:04:34:06 +1000] "GET /.git/config HTTP/1.1" 301 281 "-" "Mozilla/5.0 ... show more 152.42.189.253 - - [31/Aug/2026:04:34:06 +1000] "GET /.git/config HTTP/1.1" 301 281 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 152.42.189.253 - - [31/Aug/2026:04:34:06 +1000] "GET /.git/config HTTP/1.1" 404 1152 "https://api.luisaranguren.com/.git/config" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 152.42.189.253 - - [31/Aug/2026:04:34:08 +1000] "GET /.git/config HTTP/1.1" 404 993 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" ... show less	Web App Attack
🇮🇹 mgarofano80	2026-08-30 16:57:57 (1 day ago)		Brute-Force Web App Attack
🇩🇪 JLKnoch Software GmbH	2026-08-30 16:33:17 (1 day ago)	CrowdSec crowdsecurity/CVE-2017-9841	Brute-Force Web App Attack
🇳🇱 Site.eu	2026-08-30 16:21:48 (1 day ago)	Excessive multi-domain requests	Brute-Force
🇬🇧 consul.to	2026-08-30 00:28:51 (2 days ago)	Web attack/malicious scanning detected	Web App Attack
🇬🇧 [email protected]	2026-08-30 00:27:37 (2 days ago)	152.42.189.253 - - [30/Aug/2026:00:27:36 +0000] "GET /.git/config HTTP/1.1" 301 387 "-" "Mozilla/5.0 ... show more 152.42.189.253 - - [30/Aug/2026:00:27:36 +0000] "GET /.git/config HTTP/1.1" 301 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 152.42.189.253 - - [30/Aug/2026:00:27:36 +0000] "GET /.git/config HTTP/1.1" 301 387 "http://aenetworks.infoaware.com/.git/config" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 152.42.189.253 - - [30/Aug/2026:00:27:37 +0000] "GET /.git/config HTTP/1.1" 403 334 "https://aenetworks.infoaware.com/.git/config" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-08-30 00:22:53 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 152.42.189.253 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 152.42.189.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 29 20:22:45.818488 2026] [security2:error] [pid 26817:tid 26817] [client 152.42.189.253:53424] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aemcmullin.com"] [uri "/.git/config"] [unique_id "apN31XLBF9OhGOE89e4_uwAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-08-30 00:09:52 (2 days ago)	[server.tmg.gr] httpd-config-scan: logs=/var/log/httpd/domains/aegeanpvdforum.com.log; samples=/.git ... show more [server.tmg.gr] httpd-config-scan: logs=/var/log/httpd/domains/aegeanpvdforum.com.log; samples=/.git/config show less	Hacking Web App Attack
🇦🇺 2000cn.com.au	2026-08-29 23:52:13 (2 days ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking

Showing 1 to 15 of 38 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 2409:40d2:1f:e3b6:44:1188:c48f:7440

🇳🇱 193.47.62.69

🇧🇷 189.100.68.184

🇬🇧 185.216.145.179

🇺🇸 154.17.140.116

🇮🇳 124.253.97.98

🇻🇳 103.163.214.149

🇺🇸 85.208.96.204

🇩🇪 69.5.169.236

🇺🇸 66.94.113.255

🇺🇸 40.124.179.91

🇮🇳 203.192.232.180

🇺🇸 198.74.58.192

🇦🇷 181.117.166.172

🇩🇪 164.92.251.114

🇺🇸 161.123.123.8

🇦🇫 149.54.62.86

🇺🇸 147.185.132.23

🇵🇰 103.203.46.246

🇺🇸 91.230.168.92