152.42.235.140

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
60% Elevated
10 reports
10 reporters · latest 10 minutes ago
ISP
DigitalOcean, LLC
Usage Type
Data Center/Web Hosting/Transit
ASN
AS14061
Domain Name
digitalocean.com
Country
🇸🇬 Singapore
City
Singapore
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
10 from 10 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 4 🇫🇷 France 4 🇨🇦 Canada 1
Most common categories Hacking 4 Web App Attack 4 SSH 2 Port Scan 2 Bad Web Bot 2
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇫🇷 security.rdmc.fr
Web scan: 4xx requests without User-Agent
Web App Attack Bad Web Bot
🇩🇪 palla89
(mod_security) mod_security triggered on hostname [redacted] 152.42.235.140 (SG/Singapore/-)
SQL Injection
🇫🇷 ACE-INFORMATIQUE.NC
Brute-Force + SSH blocked by Fail2ban
Brute-Force SSH
🇫🇷 masterguru
Host header is a numeric IP address. Pattern match "^ (920350-135)
Hacking Bad Web Bot
🇩🇪 Mr-Money
scenario: crowdsecurity/http-sensitive-files - events: 5
Web App Attack Hacking
🇫🇷 Kejult
Honeypot Finding: verified TCP multi-port scan/probing; 62 application-level events across 2 target ports and 31 source port(s). Ports: 80/HTTP, 5174/service. Sensors: Tanner, Honeytrap.
Port Scan
🇩🇪 kingprincek
152.42.235.140 - - [15/Nov/2026:18:16:02 +0000] "GET /.env HTTP/1.1" 400 248 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" ...
Hacking Web App Attack
🇬🇧 sandra361
Port scan detected: 7 packets across 1 port (5173). | Evidence: GHOST_SCAN: IN=enp1s0f0 SRC=152.42.235.140 LEN=60 TOS=0x00 PREC=0x00 TTL=49 ID=20497 DF PROTO=TCP SPT=33402 DPT=5173 WINDOW=64240 RES=0x00 SYN URGP=0
Port Scan
🇨🇦 Bots.go.to.hell
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack Hacking
🇩🇪 NxtGenIT
Tanner Honeypot hit, Event Type: index, HTTP Method: GET, User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36, URI: /.env.bak
SSH

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇩🇪 104.207.57.191
🇺🇸 104.131.168.97
🇬🇧 87.192.106.182
🇺🇸 70.184.96.133
🇵🇪 38.25.17.10
🇺🇸 12.76.148.254
🇧🇷 201.28.234.10
🇦🇷 190.172.88.63
🇧🇷 189.6.9.140
🇨🇳 180.153.236.27
🇸🇬 172.70.142.112
🇺🇸 165.22.150.5
🇺🇸 98.173.235.214
🇳🇱 85.155.15.23
🇭🇰 45.249.244.136
🇺🇸 40.121.179.100
🇳🇱 35.214.224.182
🇳🇱 35.214.216.118
🇬🇧 35.203.210.172
🇺🇸 35.168.16.159
feedback