152.42.237.180

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted.
Abuse Confidence Score
0% Low Risk
21 reports
19 reporters · latest 1 year ago
ISP
DigitalOcean, LLC
Usage Type
Data Center/Web Hosting/Transit
ASN
AS14061
Domain Name
digitalocean.com
Country
🇸🇬 Singapore
City
Singapore
Log in to view charts and search reports for this IP. Log In

No reports in the last 60 days

152.42.237.180 has been reported 21 times. The most recent report is from .

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Total reports
21 from 19 distinct reporters
First reported
Most recent report
Reporter IoA Timestamp (UTC) Comment Categories
🇬🇧 openstrike.co.uk
15 attacks on PHP URLs, Wordpress URLs: GET /domain.cgi?id=246/xmlrpc.php?rsd HTTP/1.1 GET //cms/wp-includes/wlwmanifest.xml HTTP/1.1
Web App Attack
🇺🇦 URAN Publishing Service
152.42.237.180 - - [24/Oct/2025:16:32:58 +0300] "GET /wp-includes/ID3/license.txt HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" ...
Web App Attack
🇮🇱 Dolphi
POST //xmlrpc.php
Brute-Force Web App Attack
🇬🇧 thetomtaylor.co.uk
Fail2Ban - [NGINX]WordPress Logins Sniffings on nginx-wordpress-sniffer ... [wa02]
Bad Web Bot Web App Attack
Anonymous
apache vulnerability scan
Web App Attack
🇺🇸 agenciahypelab.com.br
WordPress login brute-force detectado e bloqueado pelo CSF/LFD. Trigger: LF_TRIGGER
Brute-Force SSH
🇬🇧 Globe2
ModSec - Multiple 403s within a short period of time
Web App Attack
Anonymous
Trawling for Open Source CMS installs
Hacking Brute-Force
🇧🇪 cmbplf
1.092 requests with url.path */wp-includes/wlwmanifest.xml
Brute-Force Bad Web Bot
🇬🇧 Shadymint
url probing from IP marked as abusive
Web App Attack
🇦🇺 2000cn.com.au
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Hacking Web App Attack
🇺🇦 URAN Publishing Service
Web App Attack
Anonymous
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force SSH
🇮🇪 Jim Keir
2025-10-24 10:42:42 152.42.237.180 File scanning, blocking 152.42.237.180 for 5 minutes
Web App Attack
🇳🇿 Tripwire
Scanning for exploits - //wp-includes/ID3/license.txt
Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇮🇩 165.154.48.160
🇺🇸 157.22.46.112
🇸🇬 143.198.194.141
🇺🇸 137.184.48.107
🇺🇸 136.90.24.58
🇸🇬 129.221.150.10
🇨🇳 111.162.152.164
🇳🇱 77.67.26.16
🇫🇮 65.21.164.231
🇧🇷 45.174.238.106
🇺🇸 45.88.160.143
🇨🇳 36.213.69.67
🇬🇧 35.203.211.216
🇺🇸 35.196.97.107
🇳🇱 34.178.70.173
🇳🇱 34.178.46.255
feedback