JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

152.42.252.199

Neutral Activity

Abuse Confidence Score

0% Low Risk

42 reports

36 reporters · latest 9 months ago

ISP: DigitalOcean, LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS14061
Hostname(s): mail.orientandvictoria.com
Domain Name: digitalocean.com
Country: 🇸🇬 Singapore
City: Singapore

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

152.42.252.199 has been reported 42 times. The most recent report is from 9 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

42 from 36 distinct reporters

First reported

February 9th 2026

Most recent report

9 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 octageeks.com	2026-02-14 05:06:07 UTC · (9 months ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇺🇸 Jason Howell	2026-02-13 08:05:07 UTC · (9 months ago)	152.42.252.199 - - [13/Feb/2026:02:04:57 -0600] "GET /wp-login.php HTTP/1.1" 200 4195 "https://www.bing.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 152.42.252.199 - - [13/Feb/2026:02:0 ... show more 152.42.252.199 - - [13/Feb/2026:02:04:57 -0600] "GET /wp-login.php HTTP/1.1" 200 4195 "https://www.bing.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 152.42.252.199 - - [13/Feb/2026:02:05:05 -0600] "POST /wp-login.php HTTP/1.1" 200 1932 "https://devilsglenstorage.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15" 152.42.252.199 - - [13/Feb/2026:02:05:06 -0600] "GET /wp-admin/index.php HTTP/1.1" 302 619 "https://devilsglenstorage.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:120.0) Gecko/20100101 Firefox/120.0" 152.42.252.199 - - [13/Feb/2026:02:05:06 -0600] "GET /wp-login.php?redirect_to=https%3A%2F%2Fdevilsglenstorage.com%2Fwp-admin%2Findex.php&reauth=1 HTTP/1.1" 200 3600 "https://devilsglenstorage.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:120.0) Gecko/20100101 Firefox/120.0" 152.42.25 ... show less	Web App Attack
🇫🇷 Kimax	2026-02-13 06:44:21 UTC · (9 months ago)	RdpGuard detected brute-force attempt on HTTP	Brute-Force
Anonymous	2026-02-13 06:05:00 UTC · (9 months ago)	<jail> banned by fail2ban	Brute-Force Web App Attack
🇬🇧 Greg Poulson	2026-02-13 04:55:05 UTC · (9 months ago)	Our website was hit by this DDOS at a rate of 594 in 5 minutes.	DDoS Attack Web Spam Brute-Force
🇷🇺 DZBOT	2026-02-13 04:22:50 UTC · (9 months ago)	Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇦🇺 paulshipley.com.au	2026-02-13 00:52:59 UTC · (9 months ago)	valueaddedpromotions.com.au:443 152.42.252.199 - - [13/Feb/2026:11:52:32 +1100] "POST /wp-login.php HTTP/1.1" 401 13078 "https://valueaddedpromotions.com.au/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, l ... show more valueaddedpromotions.com.au:443 152.42.252.199 - - [13/Feb/2026:11:52:32 +1100] "POST /wp-login.php HTTP/1.1" 401 13078 "https://valueaddedpromotions.com.au/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" valueaddedpromotions.com.au:443 152.42.252.199 - - [13/Feb/2026:11:52:35 +1100] "POST /wp-login.php HTTP/1.1" 403 3859 "https://valueaddedpromotions.com.au/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15" valueaddedpromotions.com.au:443 152.42.252.199 - - [13/Feb/2026:11:52:36 +1100] "GET /wp-admin/index.php HTTP/1.1" 403 3639 "https://valueaddedpromotions.com.au/wp-login.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" valueaddedpromotions.com.au:443 152.42.252.199 - - [13/Feb/2026:11:52:37 +1100] "GET /wp-admin/profile.php HTTP/1.1" 403 3639 "https ... show less	Web App Attack
🇧🇪 taivas.nl	2026-02-13 00:32:10 UTC · (9 months ago)	Bad_requests	Bad Web Bot
🇦🇺 paulshipley.com.au	2026-02-13 00:31:59 UTC · (9 months ago)	valueaddedpromotions.com.au:443 152.42.252.199 - - [13/Feb/2026:11:30:41 +1100] "GET /?author=1 HTTP/1.1" 404 156928 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:118.0) Gecko/20100101 Firefox/118.0" valueaddedpromotions.com.au:443 152.42.2 ... show more valueaddedpromotions.com.au:443 152.42.252.199 - - [13/Feb/2026:11:30:41 +1100] "GET /?author=1 HTTP/1.1" 404 156928 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:118.0) Gecko/20100101 Firefox/118.0" valueaddedpromotions.com.au:443 152.42.252.199 - - [13/Feb/2026:11:30:43 +1100] "GET /?author=2 HTTP/1.1" 404 156928 "https://wordpress.org/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1; rv:118.0) Gecko/20100101 Firefox/118.0" valueaddedpromotions.com.au:443 152.42.252.199 - - [13/Feb/2026:11:30:45 +1100] "GET /?author=3 HTTP/1.1" 404 156928 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" valueaddedpromotions.com.au:443 152.42.252.199 - - [13/Feb/2026:11:30:47 +1100] "GET /?author=4 HTTP/1.1" 404 156928 "https://wordpress.org/" "Mozilla/5.0 (Windows NT 11.0; Win64; x64; rv:120.0) Gecko/20100101 Firefox/120.0" valueaddedpromotions.com.au:443 152.42.252.199 - - [13/Feb/2026:11:31:28 +1100] "POST /wp-logi ... show less	Web App Attack
Anonymous	2026-02-12 16:33:14 UTC · (9 months ago)		Web App Attack
🇩🇪 ps-center	2026-02-12 16:13:16 UTC · (9 months ago)	SS1: Web Attack GET /wp-login.php	Web Spam Hacking Bad Web Bot Web App Attack
🇳🇱 ConsulHosting	2026-02-12 15:53:40 UTC · (9 months ago)	Excessive failed CAPTCHA attempts (CAPTCHA DoS)	Web App Attack
🇺🇸 mind5t0rm	2026-02-12 14:10:30 UTC · (9 months ago)	(WPLOGIN) WP Login Attack 152.42.252.199 (SG/Singapore/-): 3 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_TRIGGER; Logs: 152.42.252.199 - - [12/Feb/2026:21:10:12 +0700] "GET /wp-login.php HTTP/2.0" 200 2455 "https://wordpress.org/" ... show more (WPLOGIN) WP Login Attack 152.42.252.199 (SG/Singapore/-): 3 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_TRIGGER; Logs: 152.42.252.199 - - [12/Feb/2026:21:10:12 +0700] "GET /wp-login.php HTTP/2.0" 200 2455 "https://wordpress.org/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1; rv:121.0) Gecko/20100101 Firefox/121.0" 152.42.252.199 - - [12/Feb/2026:21:10:25 +0700] "GET /wp-login.php HTTP/2.0" 200 2455 "https://wordpress.org/" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 152.42.252.199 - - [12/Feb/2026:21:10:28 +0700] "GET /wp-login.php?redirect_to=https%3A%2F%2Fzerowaterthailand.com%2Fwp-admin%2F&reauth=1 HTTP/2.0" 200 2460 "https://duckduckgo.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:119.0) Gecko/20100101 Firefox/119.0" show less	Port Scan
Anonymous	2026-02-12 13:55:03 UTC · (9 months ago)	Bot / scanning and/or hacking attempts: GET /wp-login.php HTTP/1.1, GET /wp-admin/ HTTP/1.1	Hacking Web App Attack
🇬🇧 yvoictra	2026-02-12 10:56:26 UTC · (9 months ago)	152.42.252.199 - - [12/Feb/2026:11:56:21 +0100] "POST /wp-login.php HTTP/1.1" 200 3101 "https://quiquetieva.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:120.0) Gecko/20100101 Firefox/120.0" 152.42.252.199 - - [12/Feb/2026:11:56:23 ... show more 152.42.252.199 - - [12/Feb/2026:11:56:21 +0100] "POST /wp-login.php HTTP/1.1" 200 3101 "https://quiquetieva.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:120.0) Gecko/20100101 Firefox/120.0" 152.42.252.199 - - [12/Feb/2026:11:56:23 +0100] "POST /wp-login.php HTTP/1.1" 200 3106 "https://quiquetieva.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:118.0) Gecko/20100101 Firefox/118.0" 152.42.252.199 - - [12/Feb/2026:11:56:24 +0100] "POST /wp-login.php HTTP/1.1" 200 3107 "https://quiquetieva.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 152.42.252.199 - - [12/Feb/2026:11:56:26 +0100] "POST /wp-login.php HTTP/1.1" 200 3107 "https://quiquetieva.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Brute-Force Web App Attack

Showing 1 to 15 of 42 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇰🇷 222.107.156.227

🇪🇹 196.188.33.234

🇳🇱 185.223.235.3

🇩🇪 185.220.101.181

🇭🇰 103.20.223.33

🇳🇱 77.239.124.153

🇺🇸 45.132.227.144

🇮🇷 37.148.40.39

🇬🇧 31.14.254.32

🇵🇱 2a00:f41:192a:8b09:c110:1597:2052:3eef

🇬🇧 217.146.80.106

🇳🇱 195.178.110.227

🇬🇧 188.240.59.23

🇧🇷 186.195.16.41

🇹🇼 123.58.205.100

🇺🇸 66.80.28.12

🇺🇸 40.124.123.6

🇺🇸 40.76.250.59

🇺🇸 20.102.104.109

🇫🇷 217.182.195.140