JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 152.42.240.20

152.42.240.20 was found in our database!

This IP was reported 51 times. Confidence of Abuse is 100%: ?

100%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 152.42.240.20

Whois 152.42.240.20

IP Abuse Reports for 152.42.240.20:

This IP address has been reported a total of 51 times from 45 distinct sources. 152.42.240.20 was first reported on October 21st 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 Masterpiece	2026-10-22 16:22:01 (1 hour ago)	Abusive web bot (http-bad-user-agent), 2 requests.	Bad Web Bot
🇳🇱 MyGlobalFlowers	2026-10-22 14:48:32 (3 hours ago)	Multiple WAF Violations	Web App Attack
🇪🇸 robotstxt	2026-10-22 11:53:57 (6 hours ago)	152.42.240.20 - - [22/Oct/2026:11:52:18 +0000] "GET //cgi-bin/cgi-bin/cgi-bin/cgi-bin/cache.php HTTP ... show more 152.42.240.20 - - [22/Oct/2026:11:52:18 +0000] "GET //cgi-bin/cgi-bin/cgi-bin/cgi-bin/cache.php HTTP/2.0" 403 2 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "152.42.240.20" edge="172.69.166.40" 152.42.240.20 - - [22/Oct/2026:11:52:31 +0000] "GET //images/images/images/images/images/images/images/images/cache.php HTTP/2.0" 403 2 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "152.42.240.20" edge="172.71.81.140" 152.42.240.20 - - [22/Oct/2026:11:52:46 +0000] "GET //images/images/images/images/images/images/images/cache.php HTTP/2.0" 403 2 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "152.42.240.20" edge="172.71.124. ... show less	Web App Attack
🇦🇺 Martlark	2026-10-22 11:45:45 (6 hours ago)	Flask-IPban - exploit URL requested:/images/images/cache.php	Web App Attack
🇵🇱 Budyn	2026-10-22 11:26:44 (6 hours ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: definitelynotahoneypot.top \| URI: //images/images/cache.php \| UA: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36 \| BODY: [Empty / GET Request] \| HEADERS: {"X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"SG","Cf-Connecting-Ip":"152.42.240.20","Cdn-Loop":"cloudflare; loops=1","Accept-Encoding":"gzip, br","Accept":"text\/html,application\/xhtml+xml,applic show less	Hacking Web App Attack
🇻🇮 Axel	2026-10-22 11:22:08 (6 hours ago)	WAF/ModSecurity blocked 12 malicious request(s) (HTTP 403) from this IP. Activity: Malicious IP behi ... show more WAF/ModSecurity blocked 12 malicious request(s) (HTTP 403) from this IP. Activity: Malicious IP behind the proxy detected x12. Latest: 2026-10-22T11:22:08Z. show less	Hacking Web App Attack
🇳🇱 WeCloudit-Anti-Abuse	2026-10-22 10:35:34 (7 hours ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-bad-user-agent	Web App Attack Bad Web Bot
🇵🇱 Budyn	2026-10-22 09:07:56 (9 hours ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: astropot.online \| URI: //images/images/cache.php \| UA: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36 \| BODY: [Empty / GET Request] \| HEADERS: {"X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"SG","Cf-Connecting-Ip":"152.42.240.20","Cdn-Loop":"cloudflare; loops=1","Accept-Encoding":"gzip, br","Accept":"text\/html,application\/xhtml+xml,application\/xml; show less	Hacking Web App Attack
🇨🇭 backslash	2026-10-22 08:18:08 (9 hours ago)		Web App Attack
🇵🇱 lns.bz	2026-10-22 08:06:37 (10 hours ago)	Web app attack [PL.Lu]	Exploited Host Web App Attack
🇫🇮 oh.mg	2026-10-22 07:04:59 (11 hours ago)	[Thu Oct 22 09:04:41.383132 2026] [security2:error] [pid 2380640:tid 2380642] [client 152.42.240.20: ... show more [Thu Oct 22 09:04:41.383132 2026] [security2:error] [pid 2380640:tid 2380642] [client 152.42.240.20:0] [client 152.42.240.20] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "intl.mmn.ca"] [uri "/images/images/cache.php"] [unique_id "atm1iQfJVWJjfY1mHMaAbwAAAsA"], referer: www.google.com [Thu Oct 22 09:04:59.328415 2026] [security2:error] [pid 2380611:tid 2380616] [client 152.42.240.20:0] [client 152.42.240.20] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ ... show less	Web App Attack Bad Web Bot
🇱🇹 Evag Touf	2026-10-22 07:01:20 (11 hours ago)	(mod_security) mod_security triggered on hostname [redacted] 152.42.240.20 (SG/Singapore/-)	SQL Injection
🇩🇪 LRob	2026-10-22 06:29:48 (11 hours ago)	Abusive crawler \| ua: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 ... show more Abusive crawler \| ua: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112. \| path: //images/images/cache.php show less	Bad Web Bot
🇬🇧 pinguin	2026-10-22 05:34:09 (12 hours ago)	Triggered Cloudflare WAF (firewallManaged) from SG. Action taken: LOG Protocol: HTTP/1.1 (GET method ... show more Triggered Cloudflare WAF (firewallManaged) from SG. Action taken: LOG Protocol: HTTP/1.1 (GET method) Endpoint: //cache/cache/cache.php UA: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇬🇧 openstrike.co.uk	2026-10-22 05:15:44 (13 hours ago)	12 attacks on PHP URLs: GET //cache/cache/cache.php HTTP/1.1	Web App Attack

Showing 1 to 15 of 51 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 177.174.109.143

🇺🇸 134.122.11.82

🇺🇸 130.131.162.15

🇺🇸 2604:2dc0:101:100::1f98

🇺🇸 216.227.169.91

🇭🇰 216.118.231.170

🇨🇱 190.100.196.203

🇳🇱 185.136.15.110

🇸🇬 150.109.10.219

🇺🇸 142.111.152.152

🇩🇪 109.160.32.153

🇳🇵 103.134.219.233

🇩🇪 89.125.156.55

🇫🇷 88.142.46.185

🇫🇷 85.217.140.45

🇳🇱 77.91.71.92

🇺🇸 66.249.68.97

🇫🇮 45.147.8.45

🇬🇧 35.203.210.139

🇦🇺 34.40.145.110