JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

152.42.223.78

Recent Activity

Abuse Confidence Score

100% Critical

29 reports

24 reporters · latest 38 minutes ago

ISP: DigitalOcean, LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS14061
Domain Name: digitalocean.com
Country: 🇸🇬 Singapore
City: Singapore

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

29 from 24 distinct reporters

First reported

June 30th 2026

Most recent report

38 minutes ago

Last 60 days

Top reporter locations 🇫🇷 France 5 🇳🇱 Netherlands 4 🇩🇪 Germany 3

Most common categories Web App Attack 16 Bad Web Bot 8 Hacking 6 Brute-Force 3

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇲🇾 Rizzy	2026-11-12 18:13:35 UTC · (38 minutes ago)	Multiple WAF Violations	Brute-Force Web App Attack
Anonymous	2026-11-12 17:48:46 UTC · (1 hour ago)	2026/11/12 17:48:20 [error] 3197030#3197030: 166393 [client 152.42.223.78] ModSecurity: Access denied with code 403 (phase 2). Matched "Operator `Ge' with parameter `5' against variable `TX:BLOCKING_INBOUND_ANOMALY_SCORE' (Value: `5' ) [file "/usr/l ... show more 2026/11/12 17:48:20 [error] 3197030#3197030: 166393 [client 152.42.223.78] ModSecurity: Access denied with code 403 (phase 2). Matched "Operator `Ge' with parameter `5' against variable `TX:BLOCKING_INBOUND_ANOMALY_SCORE' (Value: `5' ) [file "/usr/local/owasp-modsecurity-crs-4.11.0/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "222"] [id "949110"] [rev ""] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [data ""] [severity "0"] [ver "OWASP_CRS/4.30.0"] [maturity "0"] [accuracy "0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "www.royalealmond.com"] [uri "//images/images/cache.php"] [unique_id "179450570025.793960"] [ref ""], client: 152.42.223.78, server: www.royalealmond.com, request: "GET //images/images/cache.php HTTP/1.1", host: "www.royalealmond.com", referrer: "www.google.com" 2026/11/12 17:48:33 [error] 3197030#3197030: *166395 [client 152.42.223.78] ModSecurity: Access denied with code 403 (phase 2). Matched "Operator `Ge' with parameter `5' against variable ... show less	Brute-Force
Anonymous	2026-11-12 17:30:02 UTC · (1 hour ago)	Bot / scanning and/or hacking attempts: GET /cgi-bin/cgi-bin/cgi-bin/cgi-bin/cache.php HTTP/1.1, GET //images/images/images/images/images/images/images/images/c, GET //images/images/cache.php HTTP/1.1, GET /images/images/cache.php HTTP/1.1	Hacking Web App Attack
🇫🇷 security.rdmc.fr	2026-11-12 17:05:53 UTC · (1 hour ago)	Activity from blacklisted IP	Hacking
🇫🇷 masterguru	2026-11-12 16:10:23 UTC · (2 hours ago)	BAD BOT - Detected and Blocked.. Matched phrase "mozlila" at REQUEST_HEADERS:User-Agent. (1100000-193)	Bad Web Bot
🇳🇱 Joop	2026-11-12 15:44:46 UTC · (3 hours ago)	2026-11-12 16:44:43 +0200 s17 /images/images/cache.php	Web App Attack
🇬🇧 consul.to	2026-11-12 14:52:42 UTC · (3 hours ago)	Web attack/malicious scanning detected	Web App Attack
🇫🇮 stinpriza	2026-11-12 14:31:01 UTC · (4 hours ago)	Web App Attack	Web App Attack
🇳🇱 BlueWire Hosting	2026-11-12 13:39:24 UTC · (5 hours ago)	Bad bot ignoring robot.txt	Bad Web Bot
🇪🇸 masterguru	2026-11-12 13:11:11 UTC · (5 hours ago)	BAD BOT - Detected and Blocked.. Matched phrase "mozlila" at REQUEST_HEADERS:User-Agent. (1100000-122)	Bad Web Bot
🇩🇪 altenglaner	2026-11-12 12:57:04 UTC · (5 hours ago)	Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.	Hacking Web App Attack
Anonymous	2026-11-12 11:43:07 UTC · (7 hours ago)	[Thu Nov 12 06:18:13.288767 2026] [:error] [pid 3297207:tid 140068429698816] [client 152.42.223.78:56958] [client 152.42.223.78] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/o ... show more [Thu Nov 12 06:18:13.288767 2026] [:error] [pid 3297207:tid 140068429698816] [client 152.42.223.78:56958] [client 152.42.223.78] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/opt/owasp-crs-4.26.0/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.26.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "ricontrans-project.eu"] [uri "/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cache.php"] [unique_id "avU@BbFL3ZOPU0Rf2LlAFgAAAVY"], referer: www.google.com [Thu Nov 12 06:18:30.148900 2026] [:error] [pid 3297516:tid 140068463269632] [client 152.42.223.78:65491] [client 152.42.223.78] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/opt/owasp-crs-4.26.0/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded ... show less	Hacking Web App Attack
🇩🇪 LRob	2026-11-12 11:33:20 UTC · (7 hours ago)	Web shell probe \| method: GET \| path: //images/images/cache.php \| ua: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.	Hacking Web App Attack
Anonymous	2026-11-12 11:32:07 UTC · (7 hours ago)	[server.dsamoodle.de] httpd-ioc-ua: sites=www.dsamun.gr; logs=/var/log/httpd/domains/dsamun.gr.log; samples=mozlila-bulid ua=Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60 //im ... show more [server.dsamoodle.de] httpd-ioc-ua: sites=www.dsamun.gr; logs=/var/log/httpd/domains/dsamun.gr.log; samples=mozlila-bulid ua=Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60 //images/images/cache.php \| mozlila-bulid ua=Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60 //cgi-bin/cgi-bin/cgi-bin/cgi-bin/cache.php \| mozlila-bulid ua=Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60 /cgi-bin/cgi-bin/cgi-bin/cgi-bin/cache.php show less	Hacking Web App Attack
🇬🇧 AvonleaConsulting	2026-11-12 11:20:42 UTC · (7 hours ago)	Scanning unused Default website or suspicious access to valid sites from IP marked as abusive	Bad Web Bot Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇳 120.71.5.15

🇳🇱 209.250.247.85

🇫🇮 147.185.133.34

🇺🇸 104.196.225.165

🇧🇩 103.148.74.80

🇿🇦 102.218.219.96

🇷🇴 92.118.39.14

🇸🇬 47.128.61.21

🇳🇱 45.148.10.152

🇳🇱 34.178.88.39

🇧🇷 34.95.155.51

🇵🇪 200.37.103.36

🇰🇪 197.248.207.139

🇳🇱 172.70.47.92

🇬🇧 172.68.186.177

🇺🇸 139.87.113.59

🇨🇳 125.94.107.91

🇬🇧 92.207.4.157

🇭🇰 34.92.79.45

🇸🇮 31.57.37.91