JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

152.42.245.84

Recent Activity

Abuse Confidence Score

86% Critical

20 reports

16 reporters · latest 8 hours ago

ISP: DigitalOcean, LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS14061
Domain Name: digitalocean.com
Country: 🇸🇬 Singapore
City: Singapore

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

20 from 16 distinct reporters

First reported

November 21st 2024

Most recent report

8 hours ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 4 🇵🇱 Poland 3 🇦🇺 Australia 2

Most common categories Web App Attack 16 Bad Web Bot 6 Brute-Force 5 Hacking 1

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Mangelot Hosting	2026-11-06 17:50:31 UTC · (8 hours ago)	(bad_user_agent) srv103 Attack tool user-agent 152.42.245.84 (SG/Singapore/-): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:	Web App Attack
🇺🇸 antlac1	2026-11-06 17:07:52 UTC · (9 hours ago)	crowdsecurity/http-bad-user-agent	Brute-Force Web App Attack
🇮🇹 VHosting	2026-11-06 15:30:04 UTC · (11 hours ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇦🇺 Proxay Fox	2026-11-06 11:37:17 UTC · (15 hours ago)	152.42.245.84 - - [06/Nov/2026:21:35:51 +1000] "GET /images/images/cache.php HTTP/2.0" 404 36 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie ... show more 152.42.245.84 - - [06/Nov/2026:21:35:51 +1000] "GET /images/images/cache.php HTTP/2.0" 404 36 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "152.42.245.84" 454 314 TLSv1.3/TLS_AES_256_GCM_SHA384 . c8554e084d13eab7681184c333dbe747539d1fe7ac0d61719ec7a03bc313bad5 152.42.245.84 - - [06/Nov/2026:21:36:00 +1000] "GET /cgi-bin/cgi-bin/cgi-bin/cgi-bin/cache.php HTTP/2.0" 404 36 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "152.42.245.84" 467 314 TLSv1.3/TLS_AES_256_GCM_SHA384 . 73175f85a5b1695f53a403966901423889099d481e707df8843633b3211143eb 152.42.245.84 - - [06/Nov/2026:21:36:10 +1000] "GET /images/images/images/images/images/images/images/images/cache.php HTTP/2.0" 404 36 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NR ... show less	Brute-Force Web App Attack
🇧🇪 taivas.nl	2026-11-06 11:02:08 UTC · (15 hours ago)	Site scraper	Web App Attack
🇦🇺 Proxay Fox	2026-11-06 05:00:04 UTC · (21 hours ago)	152.42.245.84 - - [06/Nov/2026:14:58:13 +1000] "GET /images/images/cache.php HTTP/2.0" 404 36 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie ... show more 152.42.245.84 - - [06/Nov/2026:14:58:13 +1000] "GET /images/images/cache.php HTTP/2.0" 404 36 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "152.42.245.84" 454 314 TLSv1.3/TLS_AES_256_GCM_SHA384 . 2cb7a7efa4b4cf8780ed775bf8845cd4496c7fffb1bb1027658dbcf95e7f9bb8 152.42.245.84 - - [06/Nov/2026:14:58:24 +1000] "GET /cgi-bin/cgi-bin/cgi-bin/cgi-bin/cache.php HTTP/2.0" 404 36 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "152.42.245.84" 467 314 TLSv1.3/TLS_AES_256_GCM_SHA384 . fba24ad0cffd664361e2e855e6ae87d2615994a8c42c7f78c3bb3d2a5eb69fba 152.42.245.84 - - [06/Nov/2026:14:58:36 +1000] "GET /images/images/images/images/images/images/images/images/cache.php HTTP/2.0" 404 36 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NR ... show less	Brute-Force Web App Attack
🇫🇮 paissangroup	2026-11-06 04:54:09 UTC · (21 hours ago)	Multiple WAF Violations	Web App Attack
🇵🇱 Budyn	2026-11-06 04:54:06 UTC · (21 hours ago)	[Budyn Honeypot Sinkhole] \| Attack type: Enterprise & Framework Recon Scanner \| Summary: Web scanner triggered an emulated security trap. \| Evidence: \| Host: git.dont-eat-the-pudding.online \| Path: /cgi-bin/cgi-bin/cgi-bin/cgi-bin/cache.php \| User-Ag ... show more [Budyn Honeypot Sinkhole] \| Attack type: Enterprise & Framework Recon Scanner \| Summary: Web scanner triggered an emulated security trap. \| Evidence: \| Host: git.dont-eat-the-pudding.online \| Path: /cgi-bin/cgi-bin/cgi-bin/cgi-bin/cache.php \| User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36 \| Request: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇵🇱 Budyn	2026-11-06 00:03:47 UTC · (1 day ago)	[Budyn Honeypot Sinkhole] \| Attack type: Enterprise & Framework Recon Scanner \| Summary: Web scanner triggered an emulated security trap. \| Evidence: \| Host: git.budyn.xyz \| Path: /cgi-bin/cgi-bin/cgi-bin/cgi-bin/cache.php \| User-Agent: Mozlila/5.0 ( ... show more [Budyn Honeypot Sinkhole] \| Attack type: Enterprise & Framework Recon Scanner \| Summary: Web scanner triggered an emulated security trap. \| Evidence: \| Host: git.budyn.xyz \| Path: /cgi-bin/cgi-bin/cgi-bin/cgi-bin/cache.php \| User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36 \| Request: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-11-05 21:26:44 UTC · (1 day ago)	Multiple WAF Violations	Web App Attack
🇩🇪 Jarda_H	2026-11-05 18:40:18 UTC · (1 day ago)	http-bad-user-agent	Web App Attack
🇪🇸 masterguru	2026-11-05 18:33:24 UTC · (1 day ago)	BAD BOT - Detected and Blocked.. Matched phrase "mozlila" at REQUEST_HEADERS:User-Agent. (1100000-122)	Bad Web Bot
🇺🇸 Major Hostility	2026-11-05 18:13:30 UTC · (1 day ago)	"GET /images/images/cache.php HTTP/1.1" 404 "GET /cgi-bin/cgi-bin/cgi-bin/cgi-bin/cache.php HTTP/1.1" 404 "GET /images/images/images/images/images/images/images/images/cache.php HTTP/1.1" 404 "GET /images/images/images/images/images/images/images/cac ... show more "GET /images/images/cache.php HTTP/1.1" 404 "GET /cgi-bin/cgi-bin/cgi-bin/cgi-bin/cache.php HTTP/1.1" 404 "GET /images/images/images/images/images/images/images/images/cache.php HTTP/1.1" 404 "GET /images/images/images/images/images/images/images/cache.php HTTP/1.1" 404 "GET /images/images/images/images/images/images/cache.php HTTP/1.1" 404 "GET /images/images/images/images/images/cache.php HTTP/1.1" 404 "GET /images/images/images/images/cache.php HTTP/1.1" 404 "GET /images/images/images/cache.php HTTP/1.1" 404 "GET /wp-content/plugins/plugins/cache.php HTTP/1.1" 404 "GET /assets/images/images/cache.php HTTP/1.1" 404 "GET /blogs/media/media/cache.php HTTP/1.1" 404 "GET /cache/cache/cache.php HTTP/1.1"%2 show less	Web App Attack
🇺🇸 kosada.com	2026-11-05 18:07:53 UTC · (1 day ago)	Repeated requests for suspicious nonexistent URLs, for example: /images/images/images/images/images/images/images/images/cache.php (HTTP/1.1 port 443, user agent: "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, ... show more Repeated requests for suspicious nonexistent URLs, for example: /images/images/images/images/images/images/images/images/cache.php (HTTP/1.1 port 443, user agent: "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36") show less	Web App Attack
🇺🇦 URAN Publishing Service	2026-11-05 16:53:15 UTC · (1 day ago)	[05/Nov/2026:18:53:15 +0200] -- 152.42.245.84 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /wp-content/plugins/plugins/cache.php HTTP/1.1	Bad Web Bot Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇪🇹 196.189.124.218

🇨🇦 193.242.184.240

🇳🇱 193.176.31.196

🇲🇽 187.190.35.163

🇺🇸 172.252.95.117

🇺🇸 172.56.113.84

🇺🇸 40.223.136.27

🇳🇱 185.226.197.120

🇳🇱 185.226.197.119

🇳🇱 185.226.197.118

🇳🇱 185.226.197.117

🇨🇴 181.63.27.76

🇺🇸 172.252.84.191

🇺🇸 172.121.117.100

🇺🇸 134.22.196.123

🇳🇱 109.160.32.134

🇵🇰 103.203.45.70

🇳🇱 77.67.26.52

🇪🇬 41.178.230.115

🇺🇸 40.223.169.126