JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 142.252.153.111

142.252.153.111 was found in our database!

This IP was reported 8 times. Confidence of Abuse is 31%: ?

31%

ISP	EGIHosting
Usage Type	Data Center/Web Hosting/Transit
ASN	AS18779
Domain Name	egihosting.com
Country	🇺🇸 United States of America
City	San Jose, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 142.252.153.111

Whois 142.252.153.111

IP Abuse Reports for 142.252.153.111:

This IP address has been reported a total of 8 times from 5 distinct sources. 142.252.153.111 was first reported on July 29th 2026, and the most recent report was 45 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 LRob	2026-08-23 19:18:28 (45 minutes ago)	L7 DDoS: distributed flood on a shop's faceted search — automated requests to search/sort URLs, one ... show more L7 DDoS: distributed flood on a shop's faceted search — automated requests to search/sort URLs, one or two per address from thousands of addresses, no page assets loaded \| path: /18-velo-route \| query: q=Stock+magasin-Cycling+Cavaillon-Cycling+H%C3%A9nin%5C-Beaumont-Cycling+Montpellier/Taille-S-XL-XXL-55-57-L&resultsPerPage=36 \| 2026-08-23 19:18 UTC show less	DDoS Attack Web App Attack
Anonymous	2026-08-18 09:54:20 (5 days ago)	"Packet Flood; Triggered WAF; Persistent 404 Attempts"	DDoS Attack
Anonymous	2026-08-17 07:15:14 (6 days ago)	"Packet Flood; Triggered WAF; Persistent 404 Attempts"	DDoS Attack
🇺🇸 TPI-Abuse	2026-08-11 13:21:20 (1 week ago)	(mod_security) mod_security (id:210730) triggered by 142.252.153.111 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 142.252.153.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 11 09:21:14.330209 2026] [security2:error] [pid 27990:tid 27990] [client 142.252.153.111:49568] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|encoremtmorris.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "encoremtmorris.com"] [uri "/info/page-23/[email protected]"] [unique_id "anshyuKnmSYHW99qfeQL_wAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-08 07:45:19 (2 weeks ago)	(mod_security) mod_security (id:210730) triggered by 142.252.153.111 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 142.252.153.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 08 03:45:11.289399 2026] [security2:error] [pid 809239:tid 809239] [client 142.252.153.111:36526] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.chicagowca.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.chicagowca.com"] [uri "/[email protected]"] [unique_id "anbehzdd0qUCqEPdtvHkxQAAACM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-08-06 19:56:00 (2 weeks ago)	"Packet Flood; Triggered WAF; Persistent 404 Attempts"	DDoS Attack
🇮🇹 A000Z	2026-08-01 04:06:17 (3 weeks ago)	Fail2Ban: 142.252.153.111 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/ ... show more Fail2Ban: 142.252.153.111 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.3206.1904 Mobile Safari/537.36 show less	Bad Web Bot
🇨🇭 backslash	2026-07-29 00:12:08 (3 weeks ago)	block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8	Bad Web Bot

Showing 1 to 8 of 8 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 2a03:b0c0:1:d0::e05:9001

🇺🇸 216.73.216.98

🇨🇭 195.177.93.134

🇳🇱 172.94.9.193

🇿🇦 165.73.181.136

🇸🇬 138.199.60.10

🇺🇸 73.147.19.171

🇺🇸 35.237.117.165

🇦🇷 186.148.80.185

🇷🇺 176.53.197.186

🇨🇳 121.37.40.93

🇺🇸 45.146.55.201

🇨🇳 36.62.25.211

🇨🇴 190.109.16.33

🇦🇷 190.92.109.18

🇺🇸 172.105.128.11

🇺🇸 162.216.150.249

🇺🇸 103.54.56.236

🇰🇿 95.57.207.100

🇦🇪 94.202.11.91