JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 142.44.187.229

142.44.187.229 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 4%: ?

ISP	OVH Hosting, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16276
Hostname(s)	14244187229.bybaginc.com
Domain Name	ovh.net
Country	🇨🇦 Canada
City	Montreal, Quebec

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 142.44.187.229

Whois 142.44.187.229

IP Abuse Reports for 142.44.187.229:

This IP address has been reported a total of 14 times from 6 distinct sources. 142.44.187.229 was first reported on March 6th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 Origon	2026-06-09 07:33:18 (1 day ago)	NOQUEUE - IP: 142.44.187.229 - Jun 9 09:33:18 plesk postfix/smtpd[3653379]: NOQUEUE: reject: RCPT f ... show more NOQUEUE - IP: 142.44.187.229 - Jun 9 09:33:18 plesk postfix/smtpd[3653379]: NOQUEUE: reject: RCPT from 14244187229.bybaginc.com[142.44.187.229]: 554 5.7.1 Service unavailable; Client host [142.44.187.229] blocked using dnsbl-3.uceprotect.net; Your ISP OVH, FR/AS16276 is UCEPROTECT-Level3 listed because of a spamscore of 117.2. See: http://www.uceprotect.net/rblcheck.php?ipr=142.44.187.229; from=<[email protected]> to=<REDACTED@REDACTED> proto=ESMTP helo=<14244187229.bybaginc.com> show less	Email Spam
🇨🇭 Origon	2026-06-03 13:08:48 (1 week ago)	NOQUEUE - IP: 142.44.187.229 - Jun 3 15:08:48 plesk postfix/smtpd[2663276]: NOQUEUE: reject: RCPT f ... show more NOQUEUE - IP: 142.44.187.229 - Jun 3 15:08:48 plesk postfix/smtpd[2663276]: NOQUEUE: reject: RCPT from 14244187229.bybaginc.com[142.44.187.229]: 554 5.7.1 Service unavailable; Client host [142.44.187.229] blocked using dnsbl-3.uceprotect.net; Your ISP OVH, FR/AS16276 is UCEPROTECT-Level3 listed because of a spamscore of 111.4. See: http://www.uceprotect.net/rblcheck.php?ipr=142.44.187.229; from=<[email protected]> to=<REDACTED@REDACTED> proto=ESMTP helo=<14244187229.bybaginc.com> show less	Email Spam
🇨🇭 Origon	2026-05-26 16:56:57 (2 weeks ago)	NOQUEUE - IP: 142.44.187.229 - May 26 18:56:57 plesk postfix/smtpd[3445546]: NOQUEUE: reject: RCPT ... show more NOQUEUE - IP: 142.44.187.229 - May 26 18:56:57 plesk postfix/smtpd[3445546]: NOQUEUE: reject: RCPT from 14244187229.bybaginc.com[142.44.187.229]: 554 5.7.1 Service unavailable; Client host [142.44.187.229] blocked using dnsbl-3.uceprotect.net; Your ISP OVH, FR/AS16276 is UCEPROTECT-Level3 listed because of a spamscore of 58.2. See: http://www.uceprotect.net/rblcheck.php?ipr=142.44.187.229; from=<[email protected]> to=<REDACTED@REDACTED> proto=ESMTP helo=<14244187229.bybaginc.com> show less	Email Spam
🇨🇭 Origon	2026-04-13 13:06:17 (1 month ago)	NOQUEUE - IP: 142.44.187.229 - Apr 13 15:06:16 plesk postfix/smtpd[1782628]: NOQUEUE: reject: RCPT ... show more NOQUEUE - IP: 142.44.187.229 - Apr 13 15:06:16 plesk postfix/smtpd[1782628]: NOQUEUE: reject: RCPT from 14244187229.bybaginc.com[142.44.187.229]: 554 5.7.1 Service unavailable; Client host [142.44.187.229] blocked using dnsbl-1.uceprotect.net; IP 142.44.187.229 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=142.44.187.229; from=<[email protected]> to=<REDACTED@REDACTED> proto=ESMTP helo=<14244187229.bybaginc.com> show less	Email Spam
🇨🇭 Origon	2026-04-01 04:34:27 (2 months ago)	NOQUEUE - IP: 142.44.187.229 - Apr 1 06:34:27 plesk postfix/smtpd[1999346]: NOQUEUE: reject: RCPT f ... show more NOQUEUE - IP: 142.44.187.229 - Apr 1 06:34:27 plesk postfix/smtpd[1999346]: NOQUEUE: reject: RCPT from 14244187229.bybaginc.com[142.44.187.229]: 554 5.7.1 Service unavailable; Client host [142.44.187.229] blocked using dnsbl-3.uceprotect.net; Your ISP OVH, FR/AS16276 is UCEPROTECT-Level3 listed because of a spamscore of 70.6. See: http://www.uceprotect.net/rblcheck.php?ipr=142.44.187.229; from=<[email protected]> to=<REDACTED@REDACTED> proto=ESMTP helo=<14244187229.bybaginc.com> show less	Email Spam
🇨🇭 Origon	2025-12-07 21:18:38 (6 months ago)	NOQUEUE - IP: 142.44.187.229 - Dec 7 22:18:38 plesk postfix/smtpd[1933096]: NOQUEUE: reject: RCPT f ... show more NOQUEUE - IP: 142.44.187.229 - Dec 7 22:18:38 plesk postfix/smtpd[1933096]: NOQUEUE: reject: RCPT from 14244187229.bybaginc.com[142.44.187.229]: 554 5.7.1 Service unavailable; Client host [142.44.187.229] blocked using dnsbl-1.uceprotect.net; IP 142.44.187.229 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=142.44.187.229; from=<[email protected]> to=<REDACTED@REDACTED> proto=ESMTP helo=<14244187229.bybaginc.com> show less	Email Spam
🇩🇪 WhiteShark	2025-08-29 08:48:43 (9 months ago)	bybaginc.com blocked due to abusive behavior	Email Spam
🇺🇸 TPI-Abuse	2025-08-26 14:31:53 (9 months ago)	(mod_security) mod_security (id:210730) triggered by 142.44.187.229 (14244187229.bybaginc.com): 1 in ... show more (mod_security) mod_security (id:210730) triggered by 142.44.187.229 (14244187229.bybaginc.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 26 10:31:48.857489 2025] [security2:error] [pid 29786:tid 29786] [client 142.44.187.229:34279] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|autodiscover.newmooncafe.com\|F\|2"] [data "[email protected]"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.newmooncafe.com"] [uri "/autodiscover/autodiscover.json/v1.0/[email protected]"] [unique_id "aK3FVOZeyAy_LfYHpLUFAAAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-07-24 20:18:11 (10 months ago)	(mod_security) mod_security (id:210730) triggered by 142.44.187.229 (14244187229.bybaginc.com): 1 in ... show more (mod_security) mod_security (id:210730) triggered by 142.44.187.229 (14244187229.bybaginc.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 24 16:18:04.164393 2025] [security2:error] [pid 17443:tid 17443] [client 142.44.187.229:42981] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|autodiscover.strawberryhillchristmas.com\|F\|2"] [data "[email protected]"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.strawberryhillchristmas.com"] [uri "/autodiscover/autodiscover.json/v1.0/[email protected]"] [unique_id "aIKU_L493bI2EIwNXQxxsQAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 DocNetzwerk	2025-07-18 08:25:02 (10 months ago)	(smtp-25-to-rcpt-from-2007-leak) Recipient address has been leaked in 2007 142.44.187.229 (CA/Canada ... show more (smtp-25-to-rcpt-from-2007-leak) Recipient address has been leaked in 2007 142.44.187.229 (CA/Canada/14244187229.bybaginc.com) show less	Hacking
🇺🇸 DiodeDave	2025-06-23 22:10:04 (11 months ago)	Attempted access after blacklisting	Email Spam
🇺🇸 TPI-Abuse	2025-05-05 19:01:28 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 142.44.187.229 (14244187229.bybaginc.com): 1 in ... show more (mod_security) mod_security (id:210730) triggered by 142.44.187.229 (14244187229.bybaginc.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 05 15:01:19.302109 2025] [security2:error] [pid 2052083:tid 2052083] [client 142.44.187.229:32871] [client 142.44.187.229] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|autodiscover.ebizplayers.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.ebizplayers.com"] [uri "/autodiscover/autodiscover.json/v1.0/[email protected]"] [unique_id "aBkK_wz6lUW8P3kD3vhfsAAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 WhiteShark	2025-04-29 12:23:19 (1 year ago)	bybaginc.com blocked due to abusive behavior	Email Spam
Anonymous	2025-03-06 01:20:07 (1 year ago)	Ports: 25,110,143,993,995; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 172.253.221.147

🇮🇹 172.213.219.2

🇩🇪 213.209.159.158

🇧🇪 198.235.24.154

🇹🇼 198.235.24.83

🇺🇸 47.251.174.222

🇨🇳 43.226.40.60

🇨🇦 20.151.14.182

🇮🇳 2402:e280:220b:8a:914f:c061:bce4:ba83

🇺🇸 195.184.76.87

🇷🇴 193.46.255.86

🇧🇩 182.48.68.82

🇺🇸 172.253.91.151

🇨🇳 113.13.7.1

🇺🇸 91.230.168.253

🇳🇱 84.86.56.171

🇮🇳 68.183.87.42

🇵🇰 36.255.32.12

🇺🇸 34.162.243.165

🇺🇸 20.169.107.122