152.42.200.153

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
171 reports
125 reporters · latest 27 minutes ago
ISP
DigitalOcean, LLC
Usage Type
Data Center/Web Hosting/Transit
ASN
AS14061
Domain Name
digitalocean.com
Country
🇸🇬 Singapore
City
Singapore
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
171 from 125 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 51 🇩🇪 Germany 24 🇫🇷 France 19
Most common categories Port Scan 116 Brute-Force 68 Hacking 46 IoT Targeted 31 SSH 28
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇫🇷 SpaceHost-Server
Brute-Force Web App Attack
🇩🇪 Da_tschek
Port scanning
Port Scan Hacking
🇧🇷 radardatelecom
Blocked by Radar da Telecom firewall — abuseipdb
Bad Web Bot Web App Attack
🇺🇸 Vexedly
SSH brute-force against an SSH honeypot: 1 credential attempt(s) across 1 logged events. Automated report from a Cowrie sensor.
Brute-Force SSH
🇦🇺 LiftUp Hosting
Honeypot hit: Brute-force attack detected on 23/TELNET • Credentials: root:root, root:, root:icatch99, admin:admin • Number of login attempts: 4 • 1 command(s) were executed during the session
Brute-Force Hacking
🇧🇪 LucasCHX
Cowrie honeypot (SSH/Telnet). 3 session(s), 2 login attempts. Main behaviour: Balayage sans connexion. Commands: echo PAYLOAD_WORKING
Brute-Force SSH
🇫🇷 rayn.lol
Honeypot: cowrie SSH brute-force login as 'root'/'86981198' from 152.42.200.153 at 2026-11-06T14:15:06.372236Z
Brute-Force SSH
🇩🇪 EnthecSolutions
Detected by Enthec Solutions. | Attempts: 90 in 24h | Target port: 23
Brute-Force SSH
🇺🇸 leasj
Observed Threat-intel match: ThreatIntel match (100% confidence): ["Botnet"] - MSTIC HoneyPot: An attacker used a brute force attack to gain access to a service or device [Microsoft Defender Threat Intelligence]
Hacking
🇺🇸 NetGuard
Brute-Force SSH
🇫🇷 uthul
T-Pot honeypot: 140 hits on ports [23] (automated)
Port Scan Brute-Force SSH
🇺🇸 NetGuard
Brute-Force SSH
🇵🇱 vrozaksen
SSH/Telnet honeypot caught this host: 2 login attempts, 2 commands executed, 4 payload fetches (e.g. http://201.79.108.167:8081/main_arm7). Last seen 2026-11-06T13:01:24Z.
Hacking Brute-Force Exploited Host SSH IoT Targeted
🇺🇸 NetGuard
Brute-Force SSH
🇩🇪 guldkage
Unauthorized connection attempt detected from IP address 152.42.200.153 to port 23 (ger-01) [TELNET]
Exploited Host

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇰🇷 222.104.76.94
🇧🇷 187.51.84.86
🇺🇸 185.226.196.30
🇺🇸 184.186.73.118
🇨🇳 116.172.93.48
🇺🇸 98.172.188.232
🇵🇱 95.214.54.159
🇳🇱 77.239.124.61
🇺🇸 50.231.243.28
🇳🇱 193.47.62.110
🇮🇳 182.95.63.126
🇺🇸 174.30.216.181
🇳🇱 109.160.32.145
🇷🇺 85.112.43.195
🇺🇸 20.80.86.32
🇺🇸 18.212.217.255
🇻🇪 181.208.148.102
🇳🇱 142.93.135.91
🇱🇹 77.90.185.122
🇺🇸 192.253.209.131
feedback