JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 152.42.199.254

152.42.199.254 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 4%: ?

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 152.42.199.254

Whois 152.42.199.254

IP Abuse Reports for 152.42.199.254:

This IP address has been reported a total of 10 times from 4 distinct sources. 152.42.199.254 was first reported on April 16th 2024, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇭🇰 pengpeng	2026-09-01 16:42:07 (1 day ago)	monitor: on ser162528253480 \| port: 16362 \| ttl: 127 script: github.com/sefinek/UFW-AbuseIPDB-Repor ... show more monitor: on ser162528253480 \| port: 16362 \| ttl: 127 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇭🇰 pengpeng	2026-09-01 07:46:41 (1 day ago)	monitor: on ser162528253480 \| port: 17546 \| ttl: 127 script: github.com/sefinek/UFW-AbuseIPDB-Repor ... show more monitor: on ser162528253480 \| port: 17546 \| ttl: 127 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇭🇰 pengpeng	2026-09-01 05:56:14 (1 day ago)	monitor: on ser162528253480 \| port: 13021 \| ttl: 245 script: github.com/sefinek/UFW-AbuseIPDB-Repor ... show more monitor: on ser162528253480 \| port: 13021 \| ttl: 245 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇭🇰 pengpeng	2026-09-01 03:26:36 (2 days ago)	monitor: on ser162528253480 \| port: 13209 \| ttl: 245 script: github.com/sefinek/UFW-AbuseIPDB-Repor ... show more monitor: on ser162528253480 \| port: 13209 \| ttl: 245 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇭🇰 pengpeng	2026-09-01 01:50:21 (2 days ago)	monitor: on ser162528253480 \| port: 15394 \| ttl: 245 script: github.com/sefinek/UFW-AbuseIPDB-Repor ... show more monitor: on ser162528253480 \| port: 15394 \| ttl: 245 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 Rayulcifer	2025-04-03 22:56:46 (1 year ago)	152.42.199.254 - - [03/Apr/2025:17:55:26 -0500] "CONNECT low-cloudflare.dstatbot.org:443:443 HTTP/1. ... show more 152.42.199.254 - - [03/Apr/2025:17:55:26 -0500] "CONNECT low-cloudflare.dstatbot.org:443:443 HTTP/1.1" 400 492 "-" "-" 152.42.199.254 - - [03/Apr/2025:17:56:45 -0500] "CONNECT low-cloudflare.dstatbot.org:443:443 HTTP/1.1" 400 492 "-" "-" ... show less	Open Proxy Port Scan Hacking Web App Attack SSH
🇺🇸 Rayulcifer	2025-03-30 08:04:54 (1 year ago)	152.42.199.254 - - [30/Mar/2025:03:03:33 -0500] "CONNECT ug234join.com:443:443 HTTP/1.1" 400 492 "-" ... show more 152.42.199.254 - - [30/Mar/2025:03:03:33 -0500] "CONNECT ug234join.com:443:443 HTTP/1.1" 400 492 "-" "-" 152.42.199.254 - - [30/Mar/2025:03:03:40 -0500] "CONNECT ug234join.com:443:443 HTTP/1.1" 400 492 "-" "-" 152.42.199.254 - - [30/Mar/2025:03:04:54 -0500] "CONNECT ug234join.com:443:443 HTTP/1.1" 400 492 "-" "-" ... show less	Open Proxy Port Scan Hacking
🇺🇸 Rayulcifer	2025-03-28 20:24:44 (1 year ago)	152.42.199.254 - - [28/Mar/2025:15:24:13 -0500] "CONNECT low-cloudflare.dstatbot.org:443:443 HTTP/1. ... show more 152.42.199.254 - - [28/Mar/2025:15:24:13 -0500] "CONNECT low-cloudflare.dstatbot.org:443:443 HTTP/1.1" 400 492 "-" "-" 152.42.199.254 - - [28/Mar/2025:15:24:28 -0500] "CONNECT low-cloudflare.dstatbot.org:443:443 HTTP/1.1" 400 492 "-" "-" 152.42.199.254 - - [28/Mar/2025:15:24:43 -0500] "CONNECT low-cloudflare.dstatbot.org:443:443 HTTP/1.1" 400 492 "-" "-" ... show less	Open Proxy Port Scan Hacking
🇺🇸 TPI-Abuse	2024-05-02 16:59:03 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 152.42.199.254 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 152.42.199.254 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 02 12:57:40.888473 2024] [security2:error] [pid 22399] [client 152.42.199.254:42316] [client 152.42.199.254] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "procigar.org"] [uri "/wp-config.php.log"] [unique_id "ZjPGBMjnYZqDXFRDXbnPwgAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TTWebhosting	2024-04-16 03:00:56 (2 years ago)	(imapd) Failed IMAP login from 152.42.199.254 (SG/Singapore/-/Singapore/-): 1 in the last 3600 secs	Port Scan Hacking Brute-Force

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 217.146.80.102

🇪🇸 194.164.161.16

🇯🇵 177.2.184.137

🇯🇵 172.105.208.132

🇺🇸 147.185.132.122

🇮🇳 122.187.226.237

🇺🇸 67.205.163.86

🇺🇸 64.62.156.115

🇦🇿 37.114.145.255

🇺🇸 205.210.31.70

🇳🇱 185.218.86.10

🇸🇬 165.154.200.214

🇺🇸 162.216.150.104

🇺🇸 147.185.132.115

🇺🇸 146.70.10.44

🇨🇳 111.26.67.36

🇭🇰 103.241.17.240

🇧🇬 91.191.209.198

🇩🇪 87.149.132.243

🇮🇳 49.205.214.47