JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 152.42.244.142

152.42.244.142 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 50%: ?

50%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 152.42.244.142

Whois 152.42.244.142

IP Abuse Reports for 152.42.244.142:

This IP address has been reported a total of 13 times from 13 distinct sources. 152.42.244.142 was first reported on September 30th 2026, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 2000cn.com.au	2026-09-30 22:55:44 (3 weeks ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing	Web App Attack Hacking
🇳🇱 tmiland	2026-09-30 22:12:59 (3 weeks ago)	(wordpress_wlwmanifest) WordPress wlwmanifest.xml Attack 152.42.244.142 (SG/Singapore/-): 3 in the l ... show more (wordpress_wlwmanifest) WordPress wlwmanifest.xml Attack 152.42.244.142 (SG/Singapore/-): 3 in the last 3600 secs; IP: 152.42.244.142; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 152.42.244.142 - - [01/Oct/2026:00:12:53 +0200] "GET //xmlrpc.php?rsd HTTP/1.1" 404 2992 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 152.42.244.142 - - [01/Oct/2026:00:12:54 +0200] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 2992 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 152.42.244.142 - - [01/Oct/2026:00:12:54 +0200] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 2992 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" show less	Brute-Force
Anonymous	2026-09-30 21:24:29 (3 weeks ago)	152.42.244.142 - - [01/Oct/2026:05:24:29 +0800] "GET /en/xmlrpc.php?rsd HTTP/1.1" 404 16 "-" "Mozill ... show more 152.42.244.142 - - [01/Oct/2026:05:24:29 +0800] "GET /en/xmlrpc.php?rsd HTTP/1.1" 404 16 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇫🇮 bittiguru.fi	2026-09-30 20:52:53 (3 weeks ago)	152.42.244.142 - [30/Sep/2026:23:52:51 +0300] "POST //xmlrpc.php HTTP/1.1" 200 415 "-" "Mozilla/5.0 ... show more 152.42.244.142 - [30/Sep/2026:23:52:51 +0300] "POST //xmlrpc.php HTTP/1.1" 200 415 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" "-" 152.42.244.142 - [30/Sep/2026:23:52:53 +0300] "POST //xmlrpc.php HTTP/1.1" 403 426 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" "-" ... show less	Hacking Brute-Force Web App Attack
🇩🇪 SCHAPPY	2026-09-30 20:21:40 (3 weeks ago)	Malicious activity from IP detected: crowdsecurity/http-probing.	Web App Attack Hacking
Anonymous	2026-09-30 20:16:52 (3 weeks ago)	IP matched detection query 20 more in short time bad rqs.	Brute-Force Web App Attack Hacking
Anonymous	2026-09-30 20:05:12 (3 weeks ago)	Blocked: Reason='Suspicious traffic score=60 (review-based detection)'; Requests=21	Hacking
🇧🇪 cmbplf	2026-09-30 19:36:51 (3 weeks ago)	6.796 POST requests with url.path /wp-login.php 477 requests with url.path /wp-includes/wlwmanife ... show more 6.796 POST requests with url.path /wp-login.php 477 requests with url.path /wp-includes/wlwmanifest.xml show less	Brute-Force Bad Web Bot
🇩🇪 LRob	2026-09-30 19:26:38 (3 weeks ago)	Web exploit attempt \| method: GET \| path: // \| query: author=1, author=2 \| ua: Mozilla/5.0 (Windows ... show more Web exploit attempt \| method: GET \| path: // \| query: author=1, author=2 \| ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36 show less	Hacking Web App Attack
🇺🇸 lavnet.net	2026-09-30 19:00:21 (3 weeks ago)	[Wed Sep 30 19:00:20.934470 2026] [authz_core:error] [pid 337686:tid 337732] [client 152.42.244.142: ... show more [Wed Sep 30 19:00:20.934470 2026] [authz_core:error] [pid 337686:tid 337732] [client 152.42.244.142:54222] AH01630: client denied by server configuration: /var/www/thejunkymonkey.com/web/index.php [Wed Sep 30 19:00:20.934770 2026] [authz_core:error] [pid 337686:tid 337732] [client 152.42.244.142:54222] AH01630: client denied by server configuration: /var/www/thejunkymonkey.com/web/index.php [Wed Sep 30 19:00:21.160672 2026] [authz_core:error] [pid 337686:tid 337721] [client 152.42.244.142:54222] AH01630: client denied by server configuration: /var/www/thejunkymonkey.com/web/index.php ... show less	Brute-Force
🇩🇪 Vegascosmetics	2026-09-30 19:00:08 (3 weeks ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after PHP/CMS/webshell exploit probe (possi ... show more Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after PHP/CMS/webshell exploit probe (possible exploited host). Evidence: AttackPattern: /wp-includes/ (Match: /wp-includes/) show less	Hacking Exploited Host Web App Attack
🇮🇹 VHosting	2026-09-30 19:00:05 (3 weeks ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇧🇷 mubusys.com	2026-09-30 18:59:24 (3 weeks ago)	152.42.244.142 - - [30/Sep/2026:15:59:24 -0300] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 404 118 ... show more 152.42.244.142 - - [30/Sep/2026:15:59:24 -0300] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 404 1186 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" "-" 152.42.244.142 - - [30/Sep/2026:15:59:24 -0300] "GET //xmlrpc.php?rsd HTTP/1.1" 404 27 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" "-" show less	Hacking

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇪🇹 196.189.24.178

🇳🇱 195.178.110.228

🇲🇴 182.93.50.90

🇲🇽 177.224.136.201

🇲🇾 175.141.173.25

🇩🇪 167.94.145.20

🇺🇸 162.216.150.235

🇳🇱 91.108.9.147

🇳🇱 91.108.9.36

🇧🇬 78.128.112.215

🇩🇪 69.5.169.194

🇸🇬 47.237.168.120

🇷🇺 46.8.60.80

🇳🇱 45.148.10.151

🇺🇸 34.171.159.32

🇦🇺 34.40.145.110

🇺🇸 20.163.58.0

🇺🇸 13.52.239.158

🇰🇷 1.214.214.114

🇺🇸 216.73.216.147