JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 109.61.42.223

109.61.42.223 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 0%: ?

ISP	G-Core Labs Customer assignment
Usage Type	Data Center/Web Hosting/Transit
ASN	AS199524
Domain Name	gcore.com
Country	🇦🇪 United Arab Emirates
City	Dubai, Dubai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 109.61.42.223

Whois 109.61.42.223

IP Abuse Reports for 109.61.42.223:

This IP address has been reported a total of 15 times from 4 distinct sources. 109.61.42.223 was first reported on June 1st 2024, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 nyuuzyou	2025-02-17 07:36:58 (1 year ago)	Intensive scraping: https://4get.ducks.party/web?s=%22Enter%20your%20URL%22%20%22Advanced%22%20%22Sh ... show more Intensive scraping: https://4get.ducks.party/web?s=%22Enter%20your%20URL%22%20%22Advanced%22%20%22Short%20URL%20Bookmarklet%22&lang=tk&scraper=google_cse show less	Bad Web Bot
🇩🇪 nyuuzyou	2025-02-17 07:36:58 (1 year ago)	Intensive scraping: https://4get.ducks.party/web?s=%22Enter%20your%20URL%22%20%22Advanced%22%20%22Sh ... show more Intensive scraping: https://4get.ducks.party/web?s=%22Enter%20your%20URL%22%20%22Advanced%22%20%22Short%20URL%20Bookmarklet%22&lang=tk&scraper=google_cse show less	Bad Web Bot
🇺🇸 PulseServers	2024-11-18 19:27:27 (1 year ago)	Malicious Web Traffic - Exploit probing, request floods, etc. on a server hosted by PulseServers.com ... show more Malicious Web Traffic - Exploit probing, request floods, etc. on a server hosted by PulseServers.com - ISUS2 ... show less	DDoS Attack Exploited Host
🇩🇪 nyuuzyou	2024-11-16 09:00:38 (1 year ago)	Intensive scraping: /web?s=%22%2Fsite%2FTR%3Fpg%3Dfund%26%22&country=lb-lb&scraper=ddg. User-Agent: ... show more Intensive scraping: /web?s=%22%2Fsite%2FTR%3Fpg%3Dfund%26%22&country=lb-lb&scraper=ddg. User-Agent: Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:114.0) Gecko/20100101 Firefox/114.0. show less	Bad Web Bot
🇺🇸 TPI-Abuse	2024-11-13 11:39:53 (1 year ago)	(mod_security) mod_security (id:210831) triggered by 109.61.42.223 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 109.61.42.223 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 13 06:39:46.584652 2024] [security2:error] [pid 1171641:tid 1171641] [client 109.61.42.223:49728] [client 109.61.42.223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|backstore.com\|F\|4"] [data "a href="] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "backstore.com"] [uri "/webalizer/usage_201711.html"] [unique_id "ZzSQAksKkcY0-pZkIDjv4AAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 nyuuzyou	2024-11-09 06:29:56 (1 year ago)	Intensive scraping: /web?s=%22Connect%20to%20site%20from%22%20%22Links%20from%20an%20external%20page ... show more Intensive scraping: /web?s=%22Connect%20to%20site%20from%22%20%22Links%20from%20an%20external%20page%22&country=mt-mt&scraper=yandex. User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:114.0) Gecko/20100101 Firefox/114.0. show less	Bad Web Bot
🇩🇪 nyuuzyou	2024-11-07 22:24:13 (1 year ago)	Intensive scraping: /web?s=%22Jax%20Guestbook%22%20%22by%20Jack%20%28tR%29%22%20%22www.jtr.de%2Fscri ... show more Intensive scraping: /web?s=%22Jax%20Guestbook%22%20%22by%20Jack%20%28tR%29%22%20%22www.jtr.de%2Fscripting%2Fphp%22&country=ss-ss&scraper=yandex. User-Agent: Mozilla/5.0 (X11; Linux i686; rv:114.0) Gecko/20100101 Firefox/114.0. show less	Bad Web Bot
🇩🇪 nyuuzyou	2024-11-07 06:39:11 (1 year ago)	Intensive scraping: /web?s=%22html.php%3Fid%3Dterms%22%20aujourd&country=ss-ss&scraper=wiby. User-Ag ... show more Intensive scraping: /web?s=%22html.php%3Fid%3Dterms%22%20aujourd&country=ss-ss&scraper=wiby. User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Xbox; Xbox One) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Edge/44.18363.8131. show less	Bad Web Bot
Anonymous	2024-11-06 00:18:45 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2024-10-15 15:01:43 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇫🇮 nyuuzyou	2024-10-07 06:40:32 (1 year ago)	Intensive scraping: /web?s=%22Your%20Name%20%28without%20space%20between%20letters%20and%20words%29% ... show more Intensive scraping: /web?s=%22Your%20Name%20%28without%20space%20between%20letters%20and%20words%29%22&country=fj-fj&scraper=yep. User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36. show less	Bad Web Bot
🇺🇸 TPI-Abuse	2024-09-09 16:05:08 (1 year ago)	(mod_security) mod_security (id:240335) triggered by 109.61.42.223 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 109.61.42.223 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 09 12:04:59.632452 2024] [security2:error] [pid 4995:tid 4995] [client 109.61.42.223:41228] [client 109.61.42.223] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 134.19.178.167 (0+1 hits since last alert)\|www.nationalenq.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.nationalenq.com"] [uri "/xmlrpc.php"] [unique_id "Zt8cq5fH45Iy90do_YOcFgAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-08-25 01:03:08 (1 year ago)	(mod_security) mod_security (id:240335) triggered by 109.61.42.223 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 109.61.42.223 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 24 21:03:01.579386 2024] [security2:error] [pid 23708:tid 23708] [client 109.61.42.223:55090] [client 109.61.42.223] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 141.98.102.179 (4+1 hits since last alert)\|www.puckerbackbikini.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.puckerbackbikini.com"] [uri "/xmlrpc.php"] [unique_id "ZsqCxeD-WOxlgn0OnEwOcAAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-08-23 02:50:42 (1 year ago)	(mod_security) mod_security (id:240335) triggered by 109.61.42.223 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 109.61.42.223 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 22 22:50:36.819567 2024] [security2:error] [pid 13388:tid 13388] [client 109.61.42.223:44026] [client 109.61.42.223] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 213.152.176.135 (1+1 hits since last alert)\|www.victorvictor.biz\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.victorvictor.biz"] [uri "/xmlrpc.php"] [unique_id "Zsf4_G-96c1GK6JlJM67OgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-06-01 03:52:16 (2 years ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 109.91.4.177

🇫🇷 91.231.89.252

🇬🇧 2a06:4880:6000::8f

🇶🇦 212.70.109.190

🇮🇳 140.238.160.152

🇮🇳 103.145.37.12

🇬🇭 102.223.92.101

🇳🇱 91.92.40.5

🇺🇸 193.3.53.11

🇺🇸 165.22.186.165

🇸🇬 101.47.8.187

🇮🇷 93.117.120.155

🇺🇸 66.132.186.211

🇧🇪 34.22.196.129

🇺🇸 23.104.75.61

🇺🇸 23.27.244.95

🇺🇸 3.219.80.71

🇭🇰 156.226.176.91

🇺🇸 147.182.179.186

🇯🇵 101.36.104.242