JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 152.42.253.238

152.42.253.238 was found in our database!

This IP was reported 67 times. Confidence of Abuse is 100%: ?

100%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 152.42.253.238

Whois 152.42.253.238

IP Abuse Reports for 152.42.253.238:

This IP address has been reported a total of 67 times from 46 distinct sources. 152.42.253.238 was first reported on February 12th 2026, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 CounterScrape	2026-07-04 02:02:00 (4 hours ago)	CounterScrape Deception: Bot identified as HONEYTOKEN_HIT (Unauthorized access attempt to leaked hon ... show more CounterScrape Deception: Bot identified as HONEYTOKEN_HIT (Unauthorized access attempt to leaked honeytoken infrastructure subdomain). Trapped in honeypot. Concurrency hits: 2. Bandwidth drained: 0.0 MB. show less	Bad Web Bot Port Scan
🇩🇪 dbmwebdesign	2026-07-03 16:40:05 (13 hours ago)	WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail	Web App Attack
🇺🇸 Rocky Mountain Bioengineering Symposium	2026-07-03 15:53:52 (14 hours ago)	[Fri Jul 03 09:53:51.861543 2026] [authz_core:error] [pid 102185:tid 140359841433152] [client 152.42 ... show more [Fri Jul 03 09:53:51.861543 2026] [authz_core:error] [pid 102185:tid 140359841433152] [client 152.42.253.238:12110] AH01630: client denied by server configuration: /var/www/public_html/journal/.env.bak [Fri Jul 03 09:53:52.350754 2026] [authz_core:error] [pid 102185:tid 140359950538304] [client 152.42.253.238:12110] AH01630: client denied by server configuration: /var/www/public_html/journal/.env.swp [Fri Jul 03 09:53:52.597165 2026] [authz_core:error] [pid 102185:tid 140359883396672] [client 152.42.253.238:12110] AH01630: client denied by server configuration: /var/www/public_html/journal/.env~ ... show less	Bad Web Bot
🇩🇪 webanyone	2026-07-03 15:15:43 (15 hours ago)	Repeated 404 errors, blocked by Fail2ban in custom-404 jail	Bad Web Bot
🇧🇪 cmbplf	2026-07-03 12:12:51 (18 hours ago)	2.311 requests from abuseipdb.com blacklisted IP (1yr8mos2w)	Brute-Force Bad Web Bot
Anonymous	2026-07-03 05:46:07 (1 day ago)	(caddyscan) Scanner path probe from 152.42.253.238 (SG/Singapore/-): 5 in the last 3600 secs; Ports: ... show more (caddyscan) Scanner path probe from 152.42.253.238 (SG/Singapore/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 152.42.253.238 - - [03/Jul/2026:05:46:02 +0000] "GET /.env.local HTTP/1.1" [REDACTED] 200 2627 152.42.253.238 - - [03/Jul/2026:05:46:02 +0000] "GET /.env.production HTTP/1.1" [REDACTED] 200 2627 152.42.253.238 - - [03/Jul/2026:05:46:02 +0000] "GET /.env.development HTTP/1.1" [REDACTED] 200 2627 152.42.253.238 - - [03/Jul/2026:05:46:02 +0000] "GET /.env.dev HTTP/1.1" [REDACTED] 200 2627 152.42.253.238 - - [03/Jul/2026:05:46:02 +0000] "GET /.env.prod HTTP/1.1" show less	Port Scan
🇺🇸 CounterScrape	2026-07-03 01:03:27 (1 day ago)	CounterScrape Deception: Bot identified as HONEYTOKEN_HIT (Unauthorized access attempt to leaked hon ... show more CounterScrape Deception: Bot identified as HONEYTOKEN_HIT (Unauthorized access attempt to leaked honeytoken infrastructure subdomain). Trapped in honeypot. Concurrency hits: 2. Bandwidth drained: 0.0 MB. show less	Bad Web Bot Port Scan
🇩🇪 on-com	2026-07-02 22:49:21 (1 day ago)	URL scan	Brute-Force Web App Attack
🇳🇱 Site.eu	2026-07-02 21:32:53 (1 day ago)	Excessive multi-domain requests	Brute-Force
🇩🇪 4server	2026-07-02 20:05:18 (1 day ago)	[ThuJul0222:05:12.7874162026][security2:error][pid3412016:tid3412055][client152.42.253.238:0]ModSecu ... show more [ThuJul0222:05:12.7874162026][security2:error][pid3412016:tid3412055][client152.42.253.238:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"gmint.ch\"][uri\"/.env.development.local\"][unique_id\"akbEeKksF2Kd6PQ3LBBeVQAAAEI\"] show less	Port Scan Brute-Force Web App Attack
🇳🇱 e.fierstra	2026-07-02 16:50:13 (1 day ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇳🇱 debestelapp	2026-07-02 08:10:06 (1 day ago)		Web App Attack
🇺🇸 infra-monitor	2026-07-02 08:00:07 (1 day ago)	Automated ban via infra-monitor: wp-sensitive-paths, mgmt-path-probe, wordpress-probe, +2 more	Port Scan Web App Attack
🇩🇪 itsolon	2026-07-02 04:20:11 (2 days ago)	[02/Jul/2026:06:20:10 +0200] 178296601078.396503 152.42.253.238 39846 217.154.7.177 443 [02/Jul/2026 ... show more [02/Jul/2026:06:20:10 +0200] 178296601078.396503 152.42.253.238 39846 217.154.7.177 443 [02/Jul/2026:06:20:10 +0200] 178296601071.625199 152.42.253.238 39846 217.154.7.177 443 [02/Jul/2026:06:20:10 +0200] 178296601069.991378 152.42.253.238 39846 217.154.7.177 443 [02/Jul/2026:06:20:10 +0200] 178296601056.908820 152.42.253.238 39846 217.154.7.177 443 [02/Jul/2026:06:20:11 +0200] 178296601182.112076 152.42.253.238 39846 217.154.7.177 443 ... show less	Port Scan Hacking Brute-Force Web App Attack
Anonymous	2026-07-02 01:49:22 (2 days ago)	152.42.253.238 - - [02/Jul/2026:03:49:13 +0200] "GET /settings.json HTTP/1.1" 404 555 "-" "Mozilla/5 ... show more 152.42.253.238 - - [02/Jul/2026:03:49:13 +0200] "GET /settings.json HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 (Silvy X Ran)" 152.42.253.238 - - [02/Jul/2026:03:49:13 +0200] "GET /secrets.json HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 (Silvy X Ran)" 152.42.253.238 - - [02/Jul/2026:03:49:14 +0200] "GET /credentials.json HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 (Silvy X Ran)" 152.42.253.238 - - [02/Jul/2026:03:49:14 +0200] "GET /cdp_api_key.json HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 (Silvy X Ran)" 152.42.253.238 - - [02/Jul/2026:03:49:15 +0200] "GET /app.js HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x6 ... show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 67 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.226

🇧🇪 198.235.24.165

🇸🇬 172.253.236.209

🇺🇸 172.96.182.111

🇸🇪 171.25.158.70

🇧🇷 170.246.121.154

🇧🇷 170.81.67.197

🇵🇱 109.205.211.91

🇺🇸 104.236.61.21

🇮🇩 103.125.48.56

🇺🇸 73.13.242.131

🇩🇪 68.183.212.68

🇯🇵 52.243.57.32

🇨🇳 36.144.72.180

🇺🇸 20.168.6.85

🇺🇸 20.163.60.204

🇧🇷 200.35.144.81

🇨🇴 191.104.108.66

🇰🇿 185.234.63.151

🇩🇪 178.142.219.130