JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 169.224.1.42

169.224.1.42 was found in our database!

This IP was reported 27 times. Confidence of Abuse is 32%: ?

32%

ISP	Earthlink Telecommunications Equipment Trading & Services DMCC
Usage Type	Fixed Line ISP
ASN	AS199739
Domain Name	earthlink.iq
Country	🇮🇶 Iraq
City	Baghdad, Baghdad

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 169.224.1.42

Whois 169.224.1.42

IP Abuse Reports for 169.224.1.42:

This IP address has been reported a total of 27 times from 18 distinct sources. 169.224.1.42 was first reported on July 27th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-28 15:49:23 (1 day ago)	(mod_security) mod_security (id:210350) triggered by 169.224.1.42 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210350) triggered by 169.224.1.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 11:49:16.211223 2026] [security2:error] [pid 25142:tid 25142] [client 169.224.1.42:44432] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|barmitzvahnapkins.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "barmitzvahnapkins.com"] [uri "/"] [unique_id "arqMfKK-1UjSyfLOj8cSzAAAAAQ"], referer: https://bulkpadachecker.store/dir/backlinks-for-search-ranking-19148 show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 librebit	2026-09-26 07:17:22 (4 days ago)	Brute force	Brute-Force
🇺🇸 鬼影233	2026-09-20 14:53:54 (1 week ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-11 13:41:25 (2 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-04 11:11:44 (3 weeks ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-08-29 09:45:33 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 show less	Bad Web Bot
🇺🇸 kosada.com	2026-08-26 20:13:10 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
Anonymous	2026-08-26 10:39:10 (1 month ago)	MikroTik Enterprise Honeypot	Port Scan
🇩🇪 Vegascosmetics	2026-08-08 18:44:58 (1 month ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after deep/obfuscated attack (encoding nest ... show more Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after deep/obfuscated attack (encoding nesting / CPU-drain risk). Evidence: DEEP ATTACK: Recursive currentUrl nesting detected show less	Hacking Exploited Host Web App Attack
🇺🇸 kosada.com	2026-07-28 19:18:35 (2 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 stechusa	2026-07-23 08:09:20 (2 months ago)	[Askari] \| Behavior: Targeting specific pages, HTTP/1.1 over TLS, Concurrent page load during attack ... show more [Askari] \| Behavior: Targeting specific pages, HTTP/1.1 over TLS, Concurrent page load during attack, Slow-read attack show less	Bad Web Bot DDoS Attack
🇺🇸 stechusa	2026-07-23 08:09:20 (2 months ago)	ELEVATED_THREAT \| 673 IPs targeting /brand.html \| Facet request during elevated threat (facet_ratio= ... show more ELEVATED_THREAT \| 673 IPs targeting /brand.html \| Facet request during elevated threat (facet_ratio=0.99, unique_ips=940) \| Recv-Q=1489 bytes on ESTABLISHED connection (threshold=1000) show less	Bad Web Bot DDoS Attack
🇩🇪 SMARTNET	2026-05-27 06:03:53 (4 months ago)	Aisuru(Mirai variant) DDoS \| Incident ID: 5b730afc-5cec-4742-843f-18085cc64e5c	DDoS Attack
🇩🇪 filstal.org	2026-05-01 14:06:18 (4 months ago)	Bad web bot: Spoofed/obsolete UA (Mozilla/5.0 (Linux; Android 2.2.1) AppleWebKit/534.1 (KHTML; like ... show more Bad web bot: Spoofed/obsolete UA (Mozilla/5.0 (Linux; Android 2.2.1) AppleWebKit/534.1 (KHTML; like Gecko) Chrome/35.0.830.0 Safari/534.1). Mass-scanning WordPress plugin. Coordinated large-scale bot attack. show less	Bad Web Bot Web App Attack
Anonymous	2026-04-29 17:48:43 (5 months ago)	Unauthorized connection attempt on Port 2323	Port Scan Hacking Exploited Host

Showing 1 to 15 of 27 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 199.45.155.36

🇬🇧 188.240.59.37

🇨🇦 85.217.149.19

🇺🇸 74.125.75.255

🇨🇦 70.54.182.130

🇦🇺 50.6.54.173

🇻🇳 27.72.195.145

🇷🇴 2.57.122.209

🇺🇸 217.60.7.209

🇩🇪 207.154.253.245

🇨🇳 203.212.9.221

🇵🇾 170.51.42.62

🇮🇳 122.176.99.60

🇰🇷 112.216.120.67

🇨🇦 51.222.156.111

🇩🇪 45.79.249.37

🇿🇦 41.133.117.133

🇺🇸 20.168.116.153

🇧🇷 187.61.217.197

🇮🇹 178.175.236.60