JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

152.42.237.97

Neutral Activity

Abuse Confidence Score

0% Low Risk

33 reports

31 reporters · latest 7 months ago

ISP: DigitalOcean, LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS14061
Domain Name: digitalocean.com
Country: 🇸🇬 Singapore
City: Singapore

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

152.42.237.97 has been reported 33 times. The most recent report is from 7 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

33 from 31 distinct reporters

First reported

March 15th 2026

Most recent report

7 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇯🇵 pixelboost.kr	2026-04-05 01:34:29 UTC · (7 months ago)	152.42.237.97 - - [05/Apr/2026:10:34:27 +0900] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" ...	Bad Web Bot Web App Attack
🇱🇹 sh97	2026-03-23 13:28:18 UTC · (7 months ago)	Winner: SSH Brute Force from 152.42.237.97 at 2026-03-23 18:58:18 IST	Brute-Force SSH
🇹🇷 rtbh.com.tr	2026-03-18 20:12:08 UTC · (7 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2026-03-17 20:12:07 UTC · (7 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇫🇷 SpaceHost-Server	2026-03-17 00:38:55 UTC · (7 months ago)		Brute-Force Web App Attack
🇨🇳 ThreatBook.io	2026-03-15 22:20:21 UTC · (7 months ago)	ThreatBook Intelligence: Edu,Spam more details on https://threatbook.io/ip/152.42.237.97	SSH
Anonymous	2026-03-15 18:53:15 UTC · (7 months ago)	Portscan: TCP/22 (35x)	Port Scan
🇫🇷 Hiigara	2026-03-15 13:00:52 UTC · (7 months ago)	connection attempt : 152.42.237.97 on port : tcp/22 (SSH)	Port Scan
🇪🇸 tg_de	2026-03-15 12:53:22 UTC · (7 months ago)	17 attempts since 15.03.2026 12:36:22 UTC - last one: 2026-03-15T13:53:22.362080+01:00 beta sshd-session[3936820]: Connection closed by authenticating user root 152.42.237.97 port 46836 [preauth]	Brute-Force SSH
🇵🇱 ntxg	2026-03-15 12:52:28 UTC · (7 months ago)	2026-03-15T13:52:25.335955+01:00 serverftp sshd[390482]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.42.237.97 user=root 2026-03-15T13:52:27.101367+01:00 serverftp sshd[390482]: Failed password for roo ... show more 2026-03-15T13:52:25.335955+01:00 serverftp sshd[390482]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.42.237.97 user=root 2026-03-15T13:52:27.101367+01:00 serverftp sshd[390482]: Failed password for root from 152.42.237.97 port 41802 ssh2 ... show less	Brute-Force SSH
🇷🇴 abuse_IP_reporter	2026-03-15 12:45:02 UTC · (7 months ago)	Mar 15 14:30:52 server UFW BLOCK SRC=152.42.237.97 PROTO=TCP SPT=57756 DPT=22	Port Scan
🇵🇱 sefinek.net	2026-03-15 12:43:44 UTC · (7 months ago)	Honeypot hit: Brute-force attack detected on 22/SSH • Credentials: root:root, root:admin, root:password, root:123456, root:123456789, root:1234, root:12345 • Number of login attempts: 7 • 4 command(s) were executed during the session • Client: SSH-2. ... show more Honeypot hit: Brute-force attack detected on 22/SSH • Credentials: root:root, root:admin, root:password, root:123456, root:123456789, root:1234, root:12345 • Number of login attempts: 7 • 4 command(s) were executed during the session • Client: SSH-2.0-Go Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Brute-Force SSH Hacking
🇩🇪 hserv	2026-03-15 12:41:49 UTC · (7 months ago)	2026-03-15T13:39:39.821480chnode7 sshd[2125076]: Failed password for root from 152.42.237.97 port 58486 ssh2 2026-03-15T13:40:45.168146chnode7 sshd[2133565]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152. ... show more 2026-03-15T13:39:39.821480chnode7 sshd[2125076]: Failed password for root from 152.42.237.97 port 58486 ssh2 2026-03-15T13:40:45.168146chnode7 sshd[2133565]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.42.237.97 user=root 2026-03-15T13:40:46.831299chnode7 sshd[2133565]: Failed password for root from 152.42.237.97 port 34850 ssh2 2026-03-15T13:41:47.053277chnode7 sshd[2141658]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.42.237.97 user=root 2026-03-15T13:41:49.229278chnode7 sshd[2141658]: Failed password for root from 152.42.237.97 port 59002 ssh2 ... show less	Brute-Force SSH
🇺🇸 gbzret4d	2026-03-15 12:41:27 UTC · (7 months ago)	Blocked by CrowdSec. Scenario: crowdsecurity/ssh-slow-bf	Brute-Force SSH
🇿🇦 oh.mg	2026-03-15 12:41:16 UTC · (7 months ago)	2026-03-15T14:39:01.368838+02:00 chat.me.ke sshd[2625683]: Failed password for root from 152.42.237.97 port 49192 ssh2 2026-03-15T14:40:07.642773+02:00 chat.me.ke sshd[2631496]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=s ... show more 2026-03-15T14:39:01.368838+02:00 chat.me.ke sshd[2625683]: Failed password for root from 152.42.237.97 port 49192 ssh2 2026-03-15T14:40:07.642773+02:00 chat.me.ke sshd[2631496]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.42.237.97 user=root 2026-03-15T14:40:09.421791+02:00 chat.me.ke sshd[2631496]: Failed password for root from 152.42.237.97 port 40572 ssh2 2026-03-15T14:41:12.852414+02:00 chat.me.ke sshd[2636801]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.42.237.97 user=root 2026-03-15T14:41:15.224558+02:00 chat.me.ke sshd[2636801]: Failed password for root from 152.42.237.97 port 50162 ssh2 ... show less	Brute-Force SSH

Showing 1 to 15 of 33 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 2604:a880:2:d1:0:1:b75f:6001

🇰🇷 221.156.173.44

🇳🇱 200.138.46.18

🇨🇳 183.224.97.83

🇦🇷 148.222.223.103

🇳🇱 45.148.10.162

🇬🇧 45.133.173.100

🇰🇷 43.155.222.143

🇺🇸 20.168.11.172

🇺🇸 195.184.76.164

🇦🇷 186.177.198.128

🇬🇧 172.236.28.161

🇭🇰 156.225.1.87

🇧🇬 79.124.62.230

🇳🇱 77.239.124.43

🇺🇸 54.153.76.194

🇺🇸 52.54.112.237

🇺🇸 45.156.129.161

🇵🇪 38.9.38.42

🇺🇸 20.106.226.249