JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 142.252.153.176

142.252.153.176 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 43%: ?

43%

ISP	EGIHosting
Usage Type	Data Center/Web Hosting/Transit
ASN	AS18779
Domain Name	egihosting.com
Country	🇺🇸 United States of America
City	San Jose, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 142.252.153.176

Whois 142.252.153.176

IP Abuse Reports for 142.252.153.176:

This IP address has been reported a total of 13 times from 9 distinct sources. 142.252.153.176 was first reported on July 7th 2026, and the most recent report was 14 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇹 Information Security	2026-09-01 05:23:56 (14 hours ago)	Web App Attack	Web App Attack
🇵🇹 Information Security	2026-08-31 04:23:31 (1 day ago)	Web App Attack	Web App Attack
🇩🇪 FeG Deutschland	2026-08-26 07:19:42 (6 days ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 28	Exploited Host Web App Attack
🇮🇹 A000Z	2026-08-23 07:30:51 (1 week ago)	Fail2Ban: 142.252.153.176 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/ ... show more Fail2Ban: 142.252.153.176 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 show less	Bad Web Bot
🇩🇪 LRob	2026-08-21 15:45:32 (1 week ago)	L7 DDoS: distributed flood on a shop's faceted search — automated requests to search/sort URLs, one ... show more L7 DDoS: distributed flood on a shop's faceted search — automated requests to search/sort URLs, one or two per address from thousands of addresses, no page assets loaded \| path: /18-velo-route \| query: q=Stock+magasin-Cycling+H%C3%A9nin%5C-Beaumont-Cycling+Montpellier/Mat%C3%A9riau-Carbone/Taille-XS-53-57-60/Famille-Crosshill&or show less	DDoS Attack Web App Attack
🇺🇸 SX Communications	2026-08-13 20:34:59 (2 weeks ago)	Blocked abusive HTTP application-layer DoS / botnet traffic from 142.252.153.176: traffic from this ... show more Blocked abusive HTTP application-layer DoS / botnet traffic from 142.252.153.176: traffic from this address continues high-cost dynamic page and feed requests at abusive rates via TCP/HTTPS despite edge block responses. Likely compromised end-user host. show less	DDoS Attack Bad Web Bot Exploited Host
🇺🇸 TPI-Abuse	2026-08-12 12:45:52 (2 weeks ago)	(mod_security) mod_security (id:210730) triggered by 142.252.153.176 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 142.252.153.176 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 12 08:45:48.013265 2026] [security2:error] [pid 16875:tid 16875] [client 142.252.153.176:11152] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|khaoula.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "khaoula.com"] [uri "/[email protected]"] [unique_id "anxq_ExWV4pysEWgXULUPwAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 FeG Deutschland	2026-08-12 00:30:12 (2 weeks ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 28	Exploited Host Web App Attack
🇺🇸 SX Communications	2026-08-09 06:05:44 (3 weeks ago)	Blocked abusive HTTP application-layer DoS / botnet traffic from 142.252.153.176: traffic from this ... show more Blocked abusive HTTP application-layer DoS / botnet traffic from 142.252.153.176: traffic from this address continues high-cost dynamic page and feed requests at abusive rates via TCP/HTTPS despite edge block responses. Likely compromised end-user host. show less	DDoS Attack Bad Web Bot Exploited Host
🇫🇷 bigorre.org	2026-08-03 14:56:16 (4 weeks ago)	Unidentified crawling: not a self-announced bot in user-agent	Bad Web Bot
🇨🇭 backslash	2026-08-02 11:06:00 (4 weeks ago)	block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8	Bad Web Bot
🇵🇹 Subnet Shadow Specter	2026-07-23 14:37:32 (1 month ago)	[Activity Alert] Distributed scraper bot trapped searching for exact phrases. IP automatically block ... show more [Activity Alert] Distributed scraper bot trapped searching for exact phrases. IP automatically blocked and banned. [User-Agent]: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36 [OS]: Unknown. [IP Address]: 142.252.153.176 [IoA Datetime]: 2026-07-23 15:37:31 UTC +1. show less	Port Scan Hacking Bad Web Bot Web App Attack
🇮🇹 A000Z	2026-07-07 06:24:25 (1 month ago)	Fail2Ban: 142.252.153.176 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/ ... show more Fail2Ban: 142.252.153.176 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.7455.1119 Safari/537.36 show less	Bad Web Bot

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 154.221.35.72

🇳🇱 195.178.110.218

🇩🇪 167.94.146.68

🇹🇷 156.233.71.29

🇫🇮 147.185.133.177

🇮🇩 103.129.59.62

🇹🇷 95.70.149.182

🇷🇺 80.88.48.124

🇲🇽 38.22.170.10

🇫🇮 35.228.13.185

🇺🇸 35.185.231.92

🇺🇸 34.169.148.132

🇫🇷 34.163.156.79

🇨🇳 223.96.234.200

🇦🇺 220.235.145.228

🇷🇴 193.46.255.86

🇬🇧 185.247.137.124

🇧🇷 177.184.110.247

🇸🇦 176.45.178.61

🇮🇳 161.248.37.160