JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

142.202.242.202

Neutral Activity

Abuse confidence score ?

0% Low Risk

33 reports

22 reporters · latest 2 years ago

ISP	畑沢, 拓真
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14315
Hostname(s)	fleurpanhuijzen.com
Domain Name	srl-group.co.jp
Country	🇺🇸 United States of America
City	Phoenix, Arizona

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

142.202.242.202 has been reported 33 times. The most recent report is from 2 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 142.202.242.202

Export CSV

This IP address has been reported a total of 33 times from 22 distinct sources. 142.202.242.202 was first reported on January 25th 2023, and the most recent report was 2 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇪 webbfabriken	2024-01-26 21:12:54 (2 years ago)	spam or other hacking activities reported by webbfabriken security servers Attack reported by Webbf ... show more spam or other hacking activities reported by webbfabriken security servers Attack reported by Webbfabiken Security API - WFSecAPI show less	Web Spam
🇸🇪 webbfabriken	2024-01-25 12:52:56 (2 years ago)	spam or other hacking activities reported by webbfabriken security servers Attack reported by Webbf ... show more spam or other hacking activities reported by webbfabriken security servers Attack reported by Webbfabiken Security API - WFSecAPI show less	Web Spam
🇸🇪 webbfabriken	2024-01-22 21:13:34 (2 years ago)	spam or other hacking activities reported by webbfabriken security servers Attack reported by Webbf ... show more spam or other hacking activities reported by webbfabriken security servers Attack reported by Webbfabiken Security API - WFSecAPI show less	Web Spam
🇺🇦 URAN Publishing Service	2024-01-19 19:50:25 (2 years ago)	142.202.242.202 - - [19/Jan/2024:21:50:24 +0200] "GET /.env HTTP/1.1" 404 273 "-" "Mozilla/5.0 (X11; ... show more 142.202.242.202 - - [19/Jan/2024:21:50:24 +0200] "GET /.env HTTP/1.1" 404 273 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" ... show less	Web App Attack
🇺🇦 URAN Publishing Service	2024-01-19 18:32:27 (2 years ago)	142.202.242.202 - - [19/Jan/2024:20:32:26 +0200] "GET /wp-admin/fw.php HTTP/1.1" 404 285 "-" "Mozill ... show more 142.202.242.202 - - [19/Jan/2024:20:32:26 +0200] "GET /wp-admin/fw.php HTTP/1.1" 404 285 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 142.202.242.202 - - [19/Jan/2024:20:32:26 +0200] "GET /wp-content/fw.php HTTP/1.1" 404 285 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" ... show less	Web App Attack
🇺🇸 TPI-Abuse	2024-01-19 18:06:37 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 142.202.242.202 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 142.202.242.202 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 19 13:06:30.225788 2024] [security2:error] [pid 27121] [client 142.202.242.202:64028] [client 142.202.242.202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.naturalpozzolanassociation.pozzolan.org"] [uri "/.env"] [unique_id "Zaq6Jk7rGppE-FtMbZogWAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇷 ufn.edu.br	2024-01-19 17:31:42 (2 years ago)	[Fri Jan 19 15:31:39.788342 2024] [access_compat:error] [pid 14989] [client 142.202.242.202:50402] A ... show more [Fri Jan 19 15:31:39.788342 2024] [access_compat:error] [pid 14989] [client 142.202.242.202:50402] AH01797: client denied by server configuration: /var/www/html/fw.php [Fri Jan 19 15:31:40.494390 2024] [access_compat:error] [pid 8337] [client 142.202.242.202:50477] AH01797: client denied by server configuration: /var/www/html/ws.php [Fri Jan 19 15:31:41.202131 2024] [access_compat:error] [pid 6957] [client 142.202.242.202:50549] AH01797: client denied by server configuration: /var/www/html/bala.php ... show less	Exploited Host Web App Attack
🇩🇪 Ba-Yu	2024-01-19 16:59:52 (2 years ago)	General hacking/exploits/scanning	Web Spam Hacking Brute-Force Exploited Host Web App Attack
🇺🇸 MPL	2023-05-25 06:15:48 (3 years ago)	tcp/3389 (2 or more attempts)	Port Scan
🇧🇷 AC - Team	2023-02-07 20:23:43 (3 years ago)	142.202.242.202 - - [07/Feb/2023:17:23:41 -0300] "GET /.env HTTP/1.1" 403 433 "-" "Mozilla/5.0 (X11; ... show more 142.202.242.202 - - [07/Feb/2023:17:23:41 -0300] "GET /.env HTTP/1.1" 403 433 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" ... show less	Hacking Web App Attack
🇺🇸 dtorrer	2023-02-07 18:09:26 (3 years ago)	General vulnerability scan.	Port Scan
🇺🇸 physke	2023-02-07 12:18:02 (3 years ago)	REQUESTED PAGE: /.env	Web App Attack
🇳🇱 taivas.nl	2023-02-07 11:00:05 (3 years ago)	web_app_attack	Email Spam
🇮🇳 mmk	2023-02-07 10:40:17 (3 years ago)	Probing request "GET /.env" on port 80	Hacking Web App Attack
🇳🇱 tmiland	2023-02-07 08:08:45 (3 years ago)	(nginx_404) Dot directory Honeypot Trap 142.202.242.202 (VN/Vietnam/-): 2 in the last 3600 secs	Brute-Force Bad Web Bot

Showing 1 to 15 of 33 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 204.76.203.219

🇫🇷 109.222.90.130

🇻🇪 38.10.251.237

🇺🇸 216.25.90.33

🇵🇰 202.47.48.246

🇺🇸 172.236.96.130

🇺🇸 165.22.148.135

🇪🇨 157.100.111.75

🇫🇮 147.185.133.246

🇨🇳 117.187.180.214

🇨🇳 58.221.60.25

🇸🇬 47.130.108.237

🇸🇬 43.172.197.127

🇴🇲 38.10.229.205

🇷🇴 2.57.122.209

🇪🇨 191.99.57.13

🇦🇷 181.111.65.150

🇺🇸 104.140.148.102

🇪🇸 85.85.76.134

🇩🇪 82.29.177.108