AbuseIPDB » 152.42.197.56

152.42.197.56 was found in our database!

This IP was reported 225 times. Confidence of Abuse is 100%: ?

100%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 152.42.197.56

Whois 152.42.197.56

IP Abuse Reports for 152.42.197.56:

This IP address has been reported a total of 225 times from 118 distinct sources. 152.42.197.56 was first reported on March 11th 2025, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
rtbh.com.tr	2025-04-17 20:06:09 (3 days ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
KZGM	2025-04-17 16:42:51 (3 days ago)	smtp - too many invalid logins. Banned by fail2ban.	Brute-Force
Swiptly	2025-04-17 15:18:51 (3 days ago)	Exim Login attempts ...	Email Spam Brute-Force
ghostwarriors	2025-04-17 13:37:05 (4 days ago)	Attempts against SMTP/SSMTP	Brute-Force Web App Attack
rd1742	2025-04-17 13:10:42 (4 days ago)	Apr 17 13:10:42 quad dovecot: auth-worker(2476362): sql(alica,152.42.197.56): unknown user	Brute-Force Exploited Host
Smee	2025-04-17 12:34:26 (4 days ago)	IMAP/SMTP Authentication Failure	Brute-Force
stom	2025-04-17 11:58:55 (4 days ago)	2025-04-17T11:58:43.475284ls2.tom2.co.uk auth[1836]: pam_unix(dovecot:auth): authentication failure; ... show more2025-04-17T11:58:43.475284ls2.tom2.co.uk auth[1836]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=directors rhost=152.42.197.56 2025-04-17T11:58:52.123269ls2.tom2.co.uk auth[1836]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=directors rhost=152.42.197.56 ... show less	Email Spam Brute-Force
basing	2025-04-17 10:41:04 (4 days ago)	2025-04-17 11:41:04 idz SASL PLAIN auth failed: rhost=152.42.197.56...	Brute-Force
Eurofluid	2025-04-17 10:02:24 (4 days ago)	You shall not pass ! Abusive behavior blocked by EF firewall.	Port Scan Hacking Brute-Force
Anonymous	2025-04-17 08:10:05 (4 days ago)	IMAP password guessing	Brute-Force
AvonleaConsulting	2025-04-17 06:23:10 (4 days ago)	Brute force attack to crack SMTP password (port 25 / 587)	Email Spam Brute-Force
cticom.ms	2025-04-17 05:21:43 (4 days ago)	Email Auth Brute force attack 3/3 in last day	Brute-Force
adlp.org	2025-04-17 04:23:19 (4 days ago)	Apr 17 04:23:12 nginx-mua ==smtp/[email protected]== : TRAKEUR-Out;0;127.0.0.1;152.42.197.56;[UNAVAI ... show moreApr 17 04:23:12 nginx-mua ==smtp/[email protected]== : TRAKEUR-Out;0;127.0.0.1;152.42.197.56;[UNAVAILABLE];[email protected];smtp;plain;1;@adlp.org$;KILL;2;Licence to kill Apr 17 04:23:15 nginx-mua ==smtp/[email protected]== : TRAKEUR-Out;0;127.0.0.1;152.42.197.56;[UNAVAILABLE];[email protected];smtp;plain;1;@adlp.org$;KILL;2;Licence to kill Apr 17 04:23:18 nginx-mua ==smtp/[email protected]== : TRAKEUR-Out;0;127.0.0.1;152.42.197.56;[UNAVAILABLE];[email protected];smtp;plain;1;@adlp.org$;KILL;2;Licence to kill ... show less	Brute-Force
solution.it	2025-04-16 20:07:11 (4 days ago)	Apr 16 22:06:59 vps789997 smtpd[3022588]: ea37b8e18d97f72f smtp connected address=152.42.197.56 host ... show moreApr 16 22:06:59 vps789997 smtpd[3022588]: ea37b8e18d97f72f smtp connected address=152.42.197.56 host=<unknown> Apr 16 22:07:11 vps789997 smtpd[3022588]: ea37b8e18d97f72f smtp failed-command command="AUTH LOGIN (password)" result="535 Authentication failed" show less	Brute-Force
rtbh.com.tr	2025-04-16 20:06:09 (4 days ago)	list.rtbh.com.tr report: tcp/0	Brute-Force

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩