JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 152.42.194.72

152.42.194.72 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 65%: ?

65%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 152.42.194.72

Whois 152.42.194.72

IP Abuse Reports for 152.42.194.72:

This IP address has been reported a total of 21 times from 15 distinct sources. 152.42.194.72 was first reported on July 28th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 Budyn	2026-10-15 20:02:56 (1 day ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: k8s.teddypot.space \| URI: /wp-login.php \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇧🇪 cmbplf	2026-10-15 18:09:36 (1 day ago)	16.468 requests in 1 hour (1w6d22h)	Brute-Force Bad Web Bot
🇩🇪 ger-stg-sifi1	2026-10-15 17:55:18 (1 day ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
🇳🇱 Alt255	2026-10-15 17:43:23 (1 day ago)	[ti-tinov] WordPress login brute-force: 5 suspicious requests detected by fail2ban jail <name>. Exam ... show more [ti-tinov] WordPress login brute-force: 5 suspicious requests detected by fail2ban jail <name>. Example: 152.42.194.72 - - \[15/Oct/2026:19:41:37 +0200\] "POST /wp-login.php HTTP/1.1" 200 9171 "https://www.forms.transportinnood.nl/wp-login.php" "Mozilla/5.0 \(X11\; Linux x86_64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/121.0.0.0 Safari/537.36" 152.42.194.72 - - \[15/Oct/2026:19:42:00 +0200\] "POST /wp-login.php HTTP/1.1" 200 9169 "https://www.forms.transportinnood.nl/wp-login.php" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/118.0.0.0 Safari/537.36" 152.42.194.72 - - \[15/Oct/2026:19:42:24 +0200\] "POST /wp-login.php HTTP/1.1" 200 9169 "https://www.forms.transportinnood.nl/wp-login.php" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\) AppleWebKit/537.36 ... show less	Brute-Force Web App Attack
🇵🇱 Budyn	2026-10-15 13:59:28 (1 day ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: k8s.goblinpot.tech \| URI: /wp-login.php \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇩🇪 conseilgouz	2026-10-15 11:55:39 (1 day ago)	ave-6 : Trying access system files=>/license.txt(license.txt)	Hacking
🇪🇸 robotstxt	2026-10-15 11:30:43 (1 day ago)	152.42.194.72 - - [15/Oct/2026:11:28:28 +0000] "GET /kellogg/license.txt HTTP/2.0" 403 21473 "-" "py ... show more 152.42.194.72 - - [15/Oct/2026:11:28:28 +0000] "GET /kellogg/license.txt HTTP/2.0" 403 21473 "-" "python-requests/2.27.1" "152.42.194.72" edge="172.69.166.67" 152.42.194.72 - - [15/Oct/2026:11:28:43 +0000] "GET /pam/license.txt HTTP/2.0" 403 18703 "-" "python-requests/2.27.1" "152.42.194.72" edge="172.70.208.119" 152.42.194.72 - - [15/Oct/2026:11:29:14 +0000] "GET /mossos/license.txt HTTP/2.0" 403 19774 "-" "python-requests/2.27.1" "152.42.194.72" edge="104.23.175.95" 152.42.194.72 - - [15/Oct/2026:11:29:29 +0000] "GET /inovyn/license.txt HTTP/2.0" 403 18810 "-" "python-requests/2.27.1" "152.42.194.72" edge="172.71.124.228" 152.42.194.72 - - [15/Oct/2026:11:29:44 +0000] "GET /grifols/license.txt HTTP/2.0" 403 18722 "-" "python-requests/2.27.1" "152.42.194.72" edge="172.70.222.249" ... show less	Web App Attack
🇩🇪 conseilgouz	2026-10-15 11:01:41 (1 day ago)	vee-6 : Trying access system files=>/license.txt(license.txt)	Hacking
🇪🇸 robotstxt	2026-10-15 10:58:22 (1 day ago)	152.42.194.72 - - [15/Oct/2026:10:52:19 +0000] "GET /license.txt HTTP/1.1" 403 12591 "-" "python-req ... show more 152.42.194.72 - - [15/Oct/2026:10:52:19 +0000] "GET /license.txt HTTP/1.1" 403 12591 "-" "python-requests/2.27.1" "-" edge="152.42.194.72" 152.42.194.72 - - [15/Oct/2026:10:56:18 +0000] "GET /license.txt HTTP/1.1" 403 30631 "-" "python-requests/2.27.1" "-" edge="152.42.194.72" 152.42.194.72 - - [15/Oct/2026:10:56:48 +0000] "GET /license.txt HTTP/1.1" 403 30649 "-" "python-requests/2.27.1" "-" edge="152.42.194.72" 152.42.194.72 - - [15/Oct/2026:10:57:09 +0000] "GET /license.txt HTTP/1.1" 403 30631 "-" "python-requests/2.27.1" "-" edge="152.42.194.72" 152.42.194.72 - - [15/Oct/2026:10:57:28 +0000] "GET /license.txt HTTP/1.1" 403 18127 "-" "python-requests/2.27.1" "-" edge="152.42.194.72" ... show less	Web App Attack
🇺🇸 mawan	2026-10-15 10:47:31 (1 day ago)	Suspected of having performed illicit activity on LAX server.	Web App Attack
🇪🇸 robotstxt	2026-10-15 10:32:05 (1 day ago)	152.42.194.72 - - [15/Oct/2026:10:29:19 +0000] "GET /license.txt HTTP/1.1" 403 15378 "-" "python-req ... show more 152.42.194.72 - - [15/Oct/2026:10:29:19 +0000] "GET /license.txt HTTP/1.1" 403 15378 "-" "python-requests/2.27.1" "-" edge="152.42.194.72" 152.42.194.72 - - [15/Oct/2026:10:29:38 +0000] "GET /license.txt HTTP/1.1" 403 15378 "-" "python-requests/2.27.1" "-" edge="152.42.194.72" 152.42.194.72 - - [15/Oct/2026:10:30:23 +0000] "GET /license.txt HTTP/1.1" 403 15378 "-" "python-requests/2.27.1" "-" edge="152.42.194.72" 152.42.194.72 - - [15/Oct/2026:10:30:44 +0000] "GET /license.txt HTTP/1.1" 403 15378 "-" "python-requests/2.27.1" "-" edge="152.42.194.72" 152.42.194.72 - - [15/Oct/2026:10:31:24 +0000] "GET /license.txt HTTP/1.1" 403 15378 "-" "python-requests/2.27.1" "-" edge="152.42.194.72" ... show less	Web App Attack
🇪🇸 robotstxt	2026-10-15 10:04:47 (1 day ago)	152.42.194.72 - - [15/Oct/2026:10:03:48 +0000] "GET /license.txt HTTP/1.1" 403 15771 "-" "python-req ... show more 152.42.194.72 - - [15/Oct/2026:10:03:48 +0000] "GET /license.txt HTTP/1.1" 403 15771 "-" "python-requests/2.27.1" "-" edge="152.42.194.72" 152.42.194.72 - - [15/Oct/2026:10:03:52 +0000] "GET /license.txt HTTP/1.1" 403 15791 "-" "python-requests/2.27.1" "-" edge="152.42.194.72" 152.42.194.72 - - [15/Oct/2026:10:04:22 +0000] "GET /license.txt HTTP/1.1" 403 15791 "-" "python-requests/2.27.1" "-" edge="152.42.194.72" 152.42.194.72 - - [15/Oct/2026:10:04:31 +0000] "GET /license.txt HTTP/1.1" 403 15771 "-" "python-requests/2.27.1" "-" edge="152.42.194.72" 152.42.194.72 - - [15/Oct/2026:10:04:33 +0000] "GET /license.txt HTTP/1.1" 403 15771 "-" "python-requests/2.27.1" "-" edge="152.42.194.72" ... show less	Web App Attack
🇳🇱 Alt255	2026-10-15 02:48:19 (1 day ago)	[ti-10al] WordPress login brute-force: 4 suspicious requests detected by fail2ban jail apache-wordpr ... show more [ti-10al] WordPress login brute-force: 4 suspicious requests detected by fail2ban jail apache-wordpress. Example: 152.42.194.72 - - [15/Oct/2026:04:47:32 +0200] "POST /wp-login.php HTTP/1.1" 200 3902 "https://paramedischnetwerkrijnmond.nl/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 152.42.194.72 - - [15/Oct/2026:04:47:42 +0200] "POST /wp-login.php HTTP/1.1" 200 9768 "https://paramedischnetwerkrijnmond.nl/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1; rv:118.0) Gecko/20100101 Firefox/118.0" 152.42.194.72 - - [15/Oct/2026:04:48:03 +0200] "POST /wp-login.php HTTP/1.1" 200 9769 "https://paramedischnetwerkrijnmond.nl/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1; rv:119.0) Gecko/20100101 Firefo ... show less	Brute-Force Web App Attack
🇳🇱 debestelapp	2026-10-15 01:55:02 (1 day ago)		Exploited Host
🇳🇱 Mangelot Hosting	2026-10-15 00:42:11 (1 day ago)	(wp_user_enum) srv101 WordPress user enumeration 152.42.194.72 (SG/Singapore/-): 8 in the last 3600 ... show more (wp_user_enum) srv101 WordPress user enumeration 152.42.194.72 (SG/Singapore/-): 8 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 205.210.31.35

🇬🇧 86.38.187.3

🇭🇰 182.16.33.82

🇬🇧 159.65.82.105

🇫🇮 147.185.133.251

🇺🇸 129.213.151.234

🇳🇱 104.23.168.98

🇫🇷 91.196.152.183

🇺🇦 79.143.45.75

🇯🇵 35.221.127.239

🇮🇷 5.232.0.206

🇦🇺 4.196.200.15

🇨🇳 222.186.135.8

🇬🇧 200.138.46.84

🇷🇺 195.239.40.213

🇧🇴 190.129.122.12

🇬🇧 159.65.60.217

🇫🇮 147.185.133.224

🇫🇮 147.185.133.130

🇨🇳 120.48.44.93