JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 142.252.156.48

142.252.156.48 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 24%: ?

24%

ISP	EGIHosting
Usage Type	Data Center/Web Hosting/Transit
ASN	AS18779
Domain Name	egihosting.com
Country	🇺🇸 United States of America
City	Santa Clara, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 142.252.156.48

Whois 142.252.156.48

IP Abuse Reports for 142.252.156.48:

This IP address has been reported a total of 16 times from 11 distinct sources. 142.252.156.48 was first reported on July 10th 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 A000Z	2026-10-23 03:00:41 (2 hours ago)	Fail2Ban: 142.252.156.48 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5 ... show more Fail2Ban: 142.252.156.48 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 show less	Bad Web Bot
🇮🇹 A000Z	2026-10-16 02:12:14 (1 week ago)	Fail2Ban: 142.252.156.48 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5 ... show more Fail2Ban: 142.252.156.48 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 show less	Bad Web Bot
🇩🇪 HandyTreff.de	2026-10-09 02:47:47 (2 weeks ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -46.158 (Bad < -10 / Very Bad < -20 ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -46.158 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0. show less	Web App Attack Bad Web Bot
🇩🇪 FeG Deutschland	2026-09-17 16:02:04 (1 month ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 28	Exploited Host Web App Attack
🇳🇱 DrLex0	2026-09-11 12:26:57 (1 month ago)	BnL006: Obvious dumb distributed botnet crawler stepping into honeypot trap, violating robots.txt an ... show more BnL006: Obvious dumb distributed botnet crawler stepping into honeypot trap, violating robots.txt and meta directives 142.252.156.48 443 - [11/Sep/2026:12:26:54 +0000] "GET [redacted] HTTP/1.1" 410 6136 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" 142.252.156.48 443 - [11/Sep/2026:12:26:57 +0000] "GET [redacted] HTTP/1.1" 200 930 "[redacted]" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" show less	Bad Web Bot Exploited Host
🇩🇪 botreporter	2026-08-31 17:24:20 (1 month ago)	bot wiki account creation attempts	Web Spam Bad Web Bot
🇩🇪 LRob	2026-08-23 02:54:49 (2 months ago)	L7 DDoS: distributed flood on a shop's faceted search — automated requests to search/sort URLs, one ... show more L7 DDoS: distributed flood on a shop's faceted search — automated requests to search/sort URLs, one or two per address from thousands of addresses, no page assets loaded \| path: /18-velo-route \| query: q=Stock+magasin-Cycling+H%C3%A9nin%5C-Beaumont/Mat%C3%A9riau-Aluminium/Taille-M-XL-47-55-57&order=product.price.desc&resultsPerP show less	DDoS Attack Web App Attack
Anonymous	2026-08-18 05:33:51 (2 months ago)	Unauthorized bot with fake user agent	Hacking
🇳🇱 DrLex0	2026-08-16 02:08:06 (2 months ago)	BnL006: Obvious dumb distributed botnet crawler stepping into honeypot trap, violating robots.txt an ... show more BnL006: Obvious dumb distributed botnet crawler stepping into honeypot trap, violating robots.txt and meta directives 142.252.156.48 443 - [16/Aug/2026:02:08:06 +0000] "GET [redacted] HTTP/1.1" 503 6164 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36" show less	Bad Web Bot Exploited Host
Anonymous	2026-08-14 22:29:25 (2 months ago)	"Packet Flood; Triggered WAF; Persistent 404 Attempts"	DDoS Attack
🇺🇸 TPI-Abuse	2026-08-11 13:57:29 (2 months ago)	(mod_security) mod_security (id:210730) triggered by 142.252.156.48 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 142.252.156.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 11 09:57:24.156996 2026] [security2:error] [pid 3039703:tid 3039703] [client 142.252.156.48:39398] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.nancyscafeandcatering.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.nancyscafeandcatering.com"] [uri "/wp-content/themes/eatery/3600sex.com"] [unique_id "ansqRONCTtct0LyedWov_gAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-08-08 02:01:39 (2 months ago)	2026-08-08 04:01:39 ERROR util.AccessViolations - 142.252.156.48 report to fail2ban - action: block ... show more 2026-08-08 04:01:39 ERROR util.AccessViolations - 142.252.156.48 report to fail2ban - action: block ... show less	Hacking Brute-Force Bad Web Bot
🇨🇭 backslash	2026-07-26 09:03:02 (2 months ago)	block ruleset 798ECF92F12ADC636D3520C2890AF17ADEFDE3BE	Bad Web Bot
Anonymous	2026-07-16 08:11:00 (3 months ago)	"Packet Flood; Triggered WAF; Persistent 404 Attempts"	DDoS Attack
Anonymous	2026-07-11 15:44:00 (3 months ago)	"Packet Flood; Triggered WAF; Persistent 404 Attempts"	DDoS Attack

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇴 192.223.104.145

🇿🇦 165.165.122.220

🇺🇸 104.28.159.133

🇸🇬 103.250.11.140

🇫🇷 91.196.152.204

🇨🇳 42.194.129.23

🇮🇳 2405:201:5803:f1e6:3014:5891:bb69:28ba

🇨🇳 218.81.172.117

🇺🇸 216.73.216.69

🇳🇱 185.223.235.58

🇺🇸 167.99.225.242

🇺🇸 162.216.150.192

🇺🇸 162.159.114.56

🇮🇳 152.59.58.31

🇧🇩 151.158.16.121

🇧🇪 130.211.66.216

🇩🇪 109.160.32.179

🇳🇵 103.38.248.250

🇷🇺 91.144.158.62

🇮🇷 85.198.19.241