JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 152.42.253.249

152.42.253.249 was found in our database!

This IP was reported 22 times. Confidence of Abuse is 11%: ?

11%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 152.42.253.249

Whois 152.42.253.249

IP Abuse Reports for 152.42.253.249:

This IP address has been reported a total of 22 times from 10 distinct sources. 152.42.253.249 was first reported on November 4th 2025, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 4server	2026-07-09 11:53:26 (2 hours ago)	[ThuJul0913:53:21.4439912026][security2:error][pid494139:tid494265][client152.42.253.249:0]ModSecuri ... show more [ThuJul0913:53:21.4439912026][security2:error][pid494139:tid494265][client152.42.253.249:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?i\)\(10\\\\\\\\.\\\\\\\\d{1\,3}\\\\\\\\.\\\\\\\\d{1\,3}\\\\\\\\.\\\\\\\\d{1\,3}\\|192\\\\\\\\.168\\\\\\\\.\\\\\\\\d{1\,3}\\\\\\\\.\\\\\\\\d{1\,3}\\|172\\\\\\\\.\(1[6-9]\\|2[0-9]\\|3[0-1]\)\\\\\\\\.\\\\\\\\d{1\,3}\\\\\\\\.\\\\\\\\d{1\,3}\\|fe80::\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"25\"][id\"990004\"][msg\"SSRFattempttoprivate/internalnetworkdetected\"][hostname\"www.manishimwe.ch\"][uri\"/images/PHOTO-4.jpg\"][unique_id\"ak-LsQ4_1GHvfTp_N7HIHwAAAZg\"]\,referer:http://www.manishimwe.ch/ show less	Hacking Web App Attack
🇺🇸 kosada.com	2026-05-19 16:28:08 (1 month ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇨🇦 1gz	2026-05-02 03:19:45 (2 months ago)	Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /uncategorized/sport-rast-i-ri-me-koronavirus-ne-premier-league-527668/27876/image UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇳🇱 Purple	2026-04-18 11:00:00 (2 months ago)	Scraping attack (2000IPs+) not respecting robots.txt - Spoofed browser header chrome win10	Bad Web Bot
Anonymous	2026-04-16 19:41:01 (2 months ago)	Automated bot traffic — residential proxy, fake browser fingerprint. UA="Mozilla/5.0 (Windows NT 10. ... show more Automated bot traffic — residential proxy, fake browser fingerprint. UA="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" show less	Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-04-12 06:11:22 (2 months ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-03-31 08:27:05 (3 months ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇨🇦 1gz	2026-03-26 08:00:43 (3 months ago)	Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /lajme/ne-angli-ben-leke-shume-dhe-shpejt-gazetari-rrefen-biseden-me-17-vjecarin-para-se-te-marre-gomonen-drejt-britanise-do-mesohem/368314/image UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇨🇦 1gz	2026-03-24 09:44:18 (3 months ago)	Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /wp-content/uploads/2024/06/1719433010x0-dhr-mga-260624mgacannabis-955.webp%20810w,%20https://albeu.com/wp-content/uploads/2024/06/1719433010x0-dhr-mga-260624mgacannabis-955-300x200.webp%20300w,%20https://albeu.com/wp-content/uploads/2024/06/1719433010x0-dhr-mga-260624mgacannabis-955-768x511.webp%20768w UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 kosada.com	2026-03-21 06:10:05 (3 months ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇬🇧 consul.to	2026-03-20 10:35:29 (3 months ago)	Web attack/malicious scanning detected	Web App Attack
🇨🇦 1gz	2026-03-08 23:56:55 (4 months ago)	Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /lajme/shqiptaret-te-dytet-ne-europe-pas-zviceraneve-qe-vete-ndihen-me-mire-me-shendet/442593/2 UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 kosada.com	2026-03-08 19:21:35 (4 months ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇨🇦 1gz	2026-02-25 08:47:59 (4 months ago)	Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /sport/futbollisti-qe-u-vra-ne-nje-perplasje-me-motor-tani-rezulton-i-gjalle/520601/image UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 johnkarlhill	2026-02-22 12:53:58 (4 months ago)	WebKnight blocked malicious web request on johnkarlhill.com	Brute-Force SSH

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 123.253.162.254

🇨🇳 113.88.76.82

🇺🇸 104.243.37.196

🇻🇳 103.157.219.78

🇮🇳 27.59.103.155

🇰🇷 1.231.81.166

🇺🇸 2607:f8b0:4004:c29::126

🇺🇸 2607:f8b0:4004:c1d::120

🇮🇳 223.233.80.114

🇺🇸 216.73.217.50

🇺🇸 172.202.117.217

🇺🇸 135.237.127.221

🇷🇴 92.118.39.50

🇭🇰 65.181.91.88

🇺🇸 45.156.129.57

🇩🇪 45.90.98.74

🇳🇱 195.178.110.199

🇸🇬 194.5.82.167

🇮🇩 182.253.64.224

🇲🇦 81.192.46.32