JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 152.42.211.143

152.42.211.143 was found in our database!

This IP was reported 47 times. Confidence of Abuse is 76%: ?

76%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 152.42.211.143

Whois 152.42.211.143

IP Abuse Reports for 152.42.211.143:

This IP address has been reported a total of 47 times from 38 distinct sources. 152.42.211.143 was first reported on February 27th 2026, and the most recent report was 11 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 inlink.ltd	2026-07-09 17:18:46 (11 minutes ago)	Known malicious PHP file or CMS probe	Web App Attack
🇫🇷 masterguru	2026-07-09 16:58:17 (32 minutes ago)	WordPress: User enumeration. Pattern match "(author\\\\= (88030-197)	Hacking
🇺🇸 TPI-Abuse	2026-07-09 16:10:59 (1 hour ago)	(mod_security) mod_security (id:225170) triggered by 152.42.211.143 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 152.42.211.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 09 12:10:55.755722 2026] [security2:error] [pid 26105:tid 26105] [client 152.42.211.143:53218] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.emsahara.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.emsahara.org"] [uri "/wp-json/wp/v2/users"] [unique_id "ak_ID-boAXZbYv668XFIbQAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 el-brujo	2026-07-09 16:04:17 (1 hour ago)	[Thu Jul 09 18:04:12.669086 2026] [proxy_fcgi:error] [pid 2774719:tid 2774838] [remote 152.42.211.14 ... show more [Thu Jul 09 18:04:12.669086 2026] [proxy_fcgi:error] [pid 2774719:tid 2774838] [remote 152.42.211.143:0] AH01071: Got error 'Primary script unknown\n' [Thu Jul 09 18:04:17.645692 2026] [proxy_fcgi:error] [pid 2774719:tid 2774878] [remote 152.42.211.143:0] AH01071: Got error 'Primary script unknown\n', referer: https://t.co/ ... show less	Hacking Web App Attack
🇩🇪 stinpriza	2026-07-09 15:59:59 (1 hour ago)	Web App Attack	Web App Attack
🇷🇺 DZBOT	2026-07-09 15:19:20 (2 hours ago)	DZBOT: Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇫🇷 masterguru	2026-07-09 14:41:43 (2 hours ago)	(wordpress) Apache: Failed WordPress login from 152.42.211.143 (SG/Singapore/-): 10 in the last 3600 ... show more (wordpress) Apache: Failed WordPress login from 152.42.211.143 (SG/Singapore/-): 10 in the last 3600 secs (0-196) show less	Hacking
🇺🇸 brantknudson.org	2026-07-09 09:54:34 (7 hours ago)	Request path 'GET /license.txt HTTP/1.1'	Web App Attack Hacking
🇫🇮 bittiguru.fi	2026-07-09 03:01:58 (14 hours ago)	152.42.211.143 - [09/Jul/2026:06:01:27 +0300] "POST /wp-login.php HTTP/1.1" 403 755 "https://kymppim ... show more 152.42.211.143 - [09/Jul/2026:06:01:27 +0300] "POST /wp-login.php HTTP/1.1" 403 755 "https://kymppimetsa.fi/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.6167.85 Safari/537.36" "2.37" 152.42.211.143 - [09/Jul/2026:06:01:34 +0300] "POST /wp-login.php HTTP/1.1" 403 755 "https://kymppimetsa.fi/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Gecko/20100101 Firefox/118.0.2" "2.37" 152.42.211.143 - [09/Jul/2026:06:01:43 +0300] "POST /wp-login.php HTTP/1.1" 403 754 "https://kymppimetsa.fi/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15) Gecko/20100101 Firefox/122.0" "2.37" 152.42.211.143 - [09/Jul/2026:06:01:50 +0300] "POST /wp-login.php HTTP/1.1" 403 753 "https://kymppimetsa.fi/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) Gecko/20100101 Firefox/118.0.2" "2.37" 152.42.211.143 - [09/Jul/2026:06:01:58 +0300] "POST /wp-login.php HTTP/1.1" 403 754 "https://kymppimetsa.fi/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) Geck ... show less	Hacking Brute-Force Web App Attack
🇫🇮 bittiguru.fi	2026-07-09 02:46:24 (14 hours ago)	152.42.211.143 - [09/Jul/2026:05:45:41 +0300] "POST /wp-login.php HTTP/1.1" 403 755 "https://kymppim ... show more 152.42.211.143 - [09/Jul/2026:05:45:41 +0300] "POST /wp-login.php HTTP/1.1" 403 755 "https://kymppimetsa.fi/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15) Gecko/20100101 Firefox/122.0" "2.37" 152.42.211.143 - [09/Jul/2026:05:45:50 +0300] "POST /wp-login.php HTTP/1.1" 403 754 "https://kymppimetsa.fi/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.6167.85 Safari/537.36" "2.37" 152.42.211.143 - [09/Jul/2026:05:45:58 +0300] "POST /wp-login.php HTTP/1.1" 403 754 "https://kymppimetsa.fi/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15) Gecko/20100101 Firefox/119.0.1" "2.37" 152.42.211.143 - [09/Jul/2026:05:46:10 +0300] "POST /wp-login.php HTTP/1.1" 403 755 "https://kymppimetsa.fi/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.6167.85 Safari/537.36" "2.37" 152.42.211.143 - [09/Jul/2026:05:46:23 +0300] "POST /wp-login.php HTTP/1.1" 403 754 "https://kym ... show less	Hacking Brute-Force Web App Attack
🇸🇪 vaia.cloud	2026-07-09 02:39:02 (14 hours ago)	trying wp-login.php/xmlrpc.php 39 times in 1 minutes	Brute-Force Web App Attack
🇫🇮 bittiguru.fi	2026-07-09 02:30:39 (14 hours ago)	152.42.211.143 - [09/Jul/2026:05:30:06 +0300] "POST /wp-login.php HTTP/1.1" 403 754 "https://kymppim ... show more 152.42.211.143 - [09/Jul/2026:05:30:06 +0300] "POST /wp-login.php HTTP/1.1" 403 754 "https://kymppimetsa.fi/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15) Gecko/20100101 Firefox/121.0" "2.37" 152.42.211.143 - [09/Jul/2026:05:30:13 +0300] "POST /wp-login.php HTTP/1.1" 403 754 "https://kymppimetsa.fi/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Gecko/20100101 Firefox/120.0.1" "2.37" 152.42.211.143 - [09/Jul/2026:05:30:22 +0300] "POST /wp-login.php HTTP/1.1" 403 755 "https://kymppimetsa.fi/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.6045.159 Safari/537.36" "2.37" 152.42.211.143 - [09/Jul/2026:05:30:30 +0300] "POST /wp-login.php HTTP/1.1" 403 755 "https://kymppimetsa.fi/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) Gecko/20100101 Firefox/118.0.2" "2.37" 152.42.211.143 - [09/Jul/2026:05:30:38 +0300] "POST /wp-login.php HTTP/1.1" 403 755 "https://kymppimetsa.fi/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac O ... show less	Hacking Brute-Force Web App Attack
🇫🇮 bittiguru.fi	2026-07-09 02:15:02 (15 hours ago)	152.42.211.143 - [09/Jul/2026:05:14:24 +0300] "POST /wp-login.php HTTP/1.1" 403 2995 "https://kymppi ... show more 152.42.211.143 - [09/Jul/2026:05:14:24 +0300] "POST /wp-login.php HTTP/1.1" 403 2995 "https://kymppimetsa.fi/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.6045.159 Safari/537.36" "3.20" 152.42.211.143 - [09/Jul/2026:05:14:35 +0300] "POST /wp-login.php HTTP/1.1" 404 7246 "https://kymppimetsa.fi/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.130 Safari/537.36" "4.27" 152.42.211.143 - [09/Jul/2026:05:14:44 +0300] "POST /wp-login.php HTTP/1.1" 404 7246 "https://kymppimetsa.fi/wp-login.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.6167.85 Safari/537.36" "4.27" 152.42.211.143 - [09/Jul/2026:05:14:53 +0300] "POST /wp-login.php HTTP/1.1" 403 754 "https://kymppimetsa.fi/wp-login.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.6261.57 Safari/537.36" "2.37" 152.42.211. ... show less	Hacking Brute-Force Web App Attack
🇦🇺 paulshipley.com.au	2026-07-08 23:40:30 (17 hours ago)	dlcarterauthor.com:443 152.42.211.143 - - [09/Jul/2026:09:40:29 +1000] "GET /?author=1 HTTP/1.1" 404 ... show more dlcarterauthor.com:443 152.42.211.143 - - [09/Jul/2026:09:40:29 +1000] "GET /?author=1 HTTP/1.1" 404 808 "https://duckduckgo.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15" ... show less	Web App Attack
🇩🇪 nyt	2026-07-08 23:07:53 (18 hours ago)	WP Author Enumeration	Web App Attack

Showing 1 to 15 of 47 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 164.90.142.114

🇺🇸 162.216.149.247

🇳🇱 160.119.71.135

🇺🇸 135.237.127.54

🇧🇷 104.22.10.177

🇷🇴 80.94.92.175

🇺🇸 192.178.115.80

🇬🇧 185.247.137.243

🇩🇪 185.242.3.195

🇰🇷 168.107.36.135

🇩🇪 167.94.146.45

🇫🇮 147.185.133.139

🇹🇷 95.3.77.254

🇹🇷 94.154.43.185

🇧🇷 45.205.1.244

🇯🇵 43.165.177.143

🇦🇺 144.48.38.102

🇮🇳 128.185.201.26

🇨🇳 120.48.90.166

🇷🇴 92.118.39.49