152.42.199.84
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- DigitalOcean, LLC
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS14061
- Domain Name
- digitalocean.com
- Country
- 🇸🇬 Singapore
- City
- Singapore
Abuse Reports
Total reports
49 from
37 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| Anonymous |
2026-11-12T16:41:19.788817-05:00 instance-20260804-1025 wordpress(clubsanjacinto.com.co)[598775]: XML-RPC authentication attempt for unknown user admin from 152.42.199.84
...
|
Web App Attack | |
| 🇩🇪 rh24 |
(wordpress-user-enum) Failed wordpress-user-enum trigger from 152.42.199.84 (SG/Singapore/-): (CF_ENABLE)
|
Brute-Force | |
| 🇩🇪 ger-stg-sifi1 |
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
|
Web App Attack | |
| 🇩🇪 neckaralb-admin.de |
(wordpress) Failed login wp-login.php or xmlrpc.php
|
Web App Attack | |
| 🇧🇷 radardatelecom |
Blocked by Radar da Telecom firewall — abuseipdb
|
Bad Web Bot Web App Attack | |
| Anonymous |
Bot / scanning and/or hacking attempts: GET /wp-includes/js/json2.js HTTP/1.1, POST /xmlrpc.php HTTP/1.1
|
Hacking Web App Attack | |
| 🇦🇺 electronico |
152.42.199.84 - - [13/Nov/2026:02:34:18 +1100] "POST /xmlrpc.php HTTP/1.1" 503 25195 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.6045.159 Safari/537.36"
...
|
Brute-Force Web App Attack | |
| 🇳🇱 Alt255 |
|
Brute-Force Web App Attack | |
| Anonymous |
POST /xmlrpc.php HTTP/1.1
...
|
Brute-Force | |
| 🇩🇪 dbmwebdesign |
WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail
|
Brute-Force Web App Attack | |
| 🇳🇱 Site.eu |
WordPress login brute force (wp-login/xmlrpc login attempts)
|
Brute-Force Web App Attack | |
| 🇫🇷 ELYAZ |
(wordpress) Failed wordpress login from 152.42.199.84 (SG/Singapore/-): (CF_ENABLE)
|
Brute-Force | |
| 🇵🇱 lns.bz |
Web app attack [PL.Lu]
|
Exploited Host Web App Attack | |
| 🇦🇺 paulshipley.com.au |
stkildashule.org.au:443 152.42.199.84 - - [13/Nov/2026:00:49:34 +1100] "GET /?author=1 HTTP/1.1" 404 58164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Gecko/20100101 Firefox/120.0.1"
...
|
Web App Attack | |
| Anonymous |
[ns41.kdns.gr] httpd-suspicious-path: sites=www.sostis.gr; logs=/var/log/httpd/access_log,/var/log/httpd/domains/sostis.gr.log; samples=/license.txt
|
Hacking Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown