JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 142.252.53.3

142.252.53.3 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 45%: ?

45%

ISP	EGIHosting
Usage Type	Data Center/Web Hosting/Transit
ASN	AS18779
Domain Name	egihosting.com
Country	🇺🇸 United States of America
City	San Jose, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 142.252.53.3

Whois 142.252.53.3

IP Abuse Reports for 142.252.53.3:

This IP address has been reported a total of 14 times from 10 distinct sources. 142.252.53.3 was first reported on July 10th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇹 Information Security	2026-09-03 12:33:49 (1 hour ago)	Web App Attack	Web App Attack
🇵🇹 Information Security	2026-09-02 08:35:08 (1 day ago)	Web App Attack	Web App Attack
🇵🇹 Information Security	2026-09-01 02:59:56 (2 days ago)	Web App Attack	Web App Attack
Anonymous	2026-08-31 00:16:10 (3 days ago)	Distributed web scraper targeting /store/filtered/ on www.liquoroutletwinecellars.com. Residential p ... show more Distributed web scraper targeting /store/filtered/ on www.liquoroutletwinecellars.com. Residential proxy - IP+timestamp provided for ISP DHCP log attribution. show less	DDoS Attack Bad Web Bot Exploited Host
🇩🇪 LRob	2026-08-23 04:02:49 (1 week ago)	L7 DDoS: distributed flood on a shop's faceted search — automated requests to search/sort URLs, one ... show more L7 DDoS: distributed flood on a shop's faceted search — automated requests to search/sort URLs, one or two per address from thousands of addresses, no page assets loaded \| path: /18-velo-route \| query: q=Stock+magasin-Cycling+Montpellier/Mat%C3%A9riau-Aluminium/Taille-XS-XL-53&order=product.name.desc&resultsPerPage=36 show less	DDoS Attack Web App Attack
🇺🇸 TPI-Abuse	2026-08-21 19:20:26 (1 week ago)	(mod_security) mod_security (id:210730) triggered by 142.252.53.3 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 142.252.53.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 21 15:20:20.337650 2026] [security2:error] [pid 7115:tid 7115] [client 142.252.53.3:60040] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.tribwatch.com\|F\|2"] [data ".old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.tribwatch.com"] [uri "/mapCaucasia.Old"] [unique_id "aoik9Au1UAyiWrbk9wBQDgAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 klaus_ph	2026-08-20 03:27:38 (2 weeks ago)	142.252.53.3 - - [19/Aug/2026:02:46:46 +0200] "GET /psb/Author/Home?author=%22Willing%2C%20Klaus%22& ... show more 142.252.53.3 - - [19/Aug/2026:02:46:46 +0200] "GET /psb/Author/Home?author=%22Willing%2C%20Klaus%22&lng=it&type=Author HTTP/1.1" 200 7536 "-" "Mozilla/5.0 (Linux; Android 5.0; SM-G900P Build/LRX21T) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.1178.1004 Mobile Safari/537.36" ... show less	Bad Web Bot
🇳🇱 DrLex0	2026-08-17 16:27:54 (2 weeks ago)	BnL006: Obvious dumb distributed botnet crawler stepping into honeypot trap, violating robots.txt an ... show more BnL006: Obvious dumb distributed botnet crawler stepping into honeypot trap, violating robots.txt and meta directives 142.252.53.3 443 - [17/Aug/2026:16:27:44 +0000] "GET [redacted] HTTP/1.1" 503 6187 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" 142.252.53.3 443 - [17/Aug/2026:16:27:53 +0000] "GET [redacted] HTTP/1.1" 503 1710 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" 142.252.53.3 443 - [17/Aug/2026:16:27:54 +0000] "GET [redacted] HTTP/1.1" 200 1253 "[redacted]" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" show less	Bad Web Bot Exploited Host
🇮🇹 A000Z	2026-08-10 22:27:46 (3 weeks ago)	Fail2Ban: 142.252.53.3 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 ... show more Fail2Ban: 142.252.53.3 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36 show less	Bad Web Bot
Anonymous	2026-08-06 19:56:00 (3 weeks ago)	"Packet Flood; Triggered WAF; Persistent 404 Attempts"	DDoS Attack
🇨🇭 backslash	2026-08-03 05:12:00 (1 month ago)	block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8	Bad Web Bot
🇫🇷 bigorre.org	2026-07-25 06:41:18 (1 month ago)	Unidentified crawling: not a self-announced bot in user-agent	Bad Web Bot
Anonymous	2026-07-16 08:11:00 (1 month ago)	"Packet Flood; Triggered WAF; Persistent 404 Attempts"	DDoS Attack
Anonymous	2026-07-10 11:14:00 (1 month ago)	"Packet Flood; Triggered WAF; Multiple attempts to access nonexistent vulnerable php files"	DDoS Attack

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 211.217.132.69

🇰🇷 210.99.124.119

🇦🇺 203.214.89.195

🇺🇦 195.238.117.26

🇺🇸 195.184.76.250

🇩🇪 185.216.213.235

🇺🇸 165.227.83.252

🇳🇱 160.119.71.92

🇩🇪 136.92.47.58

🇩🇪 130.12.180.101

🇹🇼 111.70.29.124

🇻🇳 103.82.20.194

🇬🇧 87.236.176.242

🇰🇷 203.123.219.137

🇮🇳 202.88.209.51

🇮🇳 202.53.94.242

🇧🇷 201.63.138.70

🇧🇷 200.232.114.71

🇳🇱 192.253.248.215

🇧🇷 177.52.118.204