JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 172.252.197.192

172.252.197.192 was found in our database!

This IP was reported 5 times. Confidence of Abuse is 13%: ?

13%

ISP	Subnet Digital LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS398781
Domain Name	subnetdigital.com
Country	🇺🇸 United States of America
City	Santa Clara, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 172.252.197.192

Whois 172.252.197.192

IP Abuse Reports for 172.252.197.192:

This IP address has been reported a total of 5 times from 5 distinct sources. 172.252.197.192 was first reported on October 26th 2025, and the most recent report was 14 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Tilellit.PRO	2026-10-22 01:20:37 (14 hours ago)	PrestaShop faceted search filter flooding attempt	DDoS Attack Bad Web Bot
Anonymous	2026-10-04 16:56:10 (2 weeks ago)	Distributed web scraper targeting /store/filtered/ on www.liquoroutletwinecellars.com. Residential p ... show more Distributed web scraper targeting /store/filtered/ on www.liquoroutletwinecellars.com. Residential proxy - IP+timestamp provided for ISP DHCP log attribution. show less	DDoS Attack Bad Web Bot Exploited Host
🇺🇸 SX Communications	2026-08-02 15:12:55 (2 months ago)	Blocked abusive HTTP application-layer DoS / botnet traffic from 172.252.197.192: traffic from this ... show more Blocked abusive HTTP application-layer DoS / botnet traffic from 172.252.197.192: traffic from this address continues high-cost dynamic page and feed requests at abusive rates via TCP/HTTPS despite edge block responses. Likely compromised end-user host. show less	DDoS Attack Bad Web Bot Exploited Host
🇺🇸 鬼影233	2026-03-27 00:20:43 (6 months ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 TPI-Abuse	2025-10-26 10:00:00 (11 months ago)	(mod_security) mod_security (id:210730) triggered by 172.252.197.192 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 172.252.197.192 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 26 05:59:53.689305 2025] [security2:error] [pid 26178:tid 26178] [client 172.252.197.192:37569] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|civilwarzone.com\|F\|2"] [data ".dll"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "civilwarzone.com"] [uri "/~site/Scripts_ExternalRedirect/ExternalRedirect.dll"] [unique_id "aP3xGc9qSi6KWTfAHFaRiQAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 5 of 5 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇿🇦 165.16.167.116

🇮🇳 113.11.231.104

🇿🇦 105.28.108.165

🇮🇩 103.172.20.218

🇩🇪 102.220.161.79

🇺🇸 34.134.28.99

🇯🇵 8.216.10.202

🇲🇦 196.217.138.235

🇧🇷 186.211.249.123

🇳🇱 185.242.226.17

🇳🇱 138.226.239.234

🇺🇸 129.121.115.239

🇨🇳 124.174.7.42

🇰🇷 123.212.9.122

🇮🇳 122.180.242.27

🇮🇳 20.207.202.183

🇺🇸 20.118.251.93

🇯🇵 8.211.165.58

🇩🇪 8.211.45.194

🇷🇺 5.44.169.70