JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 169.224.125.42

169.224.125.42 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 19%: ?

19%

ISP	Earthlink Telecommunications Equipment Trading & Services DMCC
Usage Type	Fixed Line ISP
ASN	AS199739
Domain Name	earthlink.iq
Country	🇮🇶 Iraq
City	Al-Musayab, Babil

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 169.224.125.42

Whois 169.224.125.42

IP Abuse Reports for 169.224.125.42:

This IP address has been reported a total of 13 times from 11 distinct sources. 169.224.125.42 was first reported on August 16th 2024, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-18 17:34:22 (1 day ago)	(mod_security) mod_security (id:210350) triggered by 169.224.125.42 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 169.224.125.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 18 13:34:16.787057 2026] [security2:error] [pid 607:tid 753] [client 169.224.125.42:8582] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|mastermanagementconsultant.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "mastermanagementconsultant.com"] [uri "/"] [unique_id "aq12GHZIskgcLPQFU5RqTAAAAhA"], referer: https://rankcheckerseo.online/dir/natural-seo-backlinks-131634 show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-08-27 15:27:03 (3 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 gui-ying233	2026-08-25 07:16:36 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 show less	Bad Web Bot
🇺🇸 gui-ying233	2026-08-23 07:03:01 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇩🇪 Vegascosmetics	2026-06-27 13:28:50 (2 months ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated redirect. Vegas Security	DDoS Attack Hacking Exploited Host
Anonymous	2026-06-15 23:00:34 (3 months ago)	Large-scale coordinated botnet (200+k IPs). Attacker: mikhail-smirnov-79830323 (LinkedIn/profile ID) ... show more Large-scale coordinated botnet (200+k IPs). Attacker: mikhail-smirnov-79830323 (LinkedIn/profile ID) employed by Angara Technologies Group (Explicitly identified himself as enemy a week before attack began) \| Attack Signature Blocked: /wishlist/index/add/product/10898/form_key/UzqnoZ6UBXX0WcOI/ \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 \| (Magento Site) show less	Hacking Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-17 05:55:23 (4 months ago)	(mod_security) mod_security (id:217210) triggered by 169.224.125.42 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:217210) triggered by 169.224.125.42 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 17 01:55:16.218482 2026] [security2:error] [pid 8073:tid 8073] [client 169.224.125.42:10540] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?i:(?:[a-z]{3,10}\\\\s+(?:\\\\w{3,7}?://[\\\\w\\\\-\\\\./](?::\\\\d+)?)?/[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S])?\|connect (?:\\\\d{1,3}\\\\.){3}\\\\d{1,3}\\\\.?(?::\\\\d+)?\|options \\\\)\\\\s+[\\\\w\\\\./]+\|get /[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "114"] [id "217210"] [rev "1"] [msg "COMODO WAF: Invalid HTTP Request Line\|\|kalvanna.net\|F\|4"] [data "GET http://kalvanna.net HTTP/1.1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "kalvanna.net"] [uri "/"] [unique_id "aglYRNfIWMeaFxshE8prPgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-02-27 08:00:55 (6 months ago)	scanning http requests from known botnet	Web App Attack
🇮🇹 VHosting	2026-02-26 18:12:08 (6 months ago)	Detected mail brute force attack from 4 different servers	Brute-Force
🇮🇩 hermawan	2025-11-29 14:39:41 (9 months ago)	[Sat Nov 29 21:38:55.797580 2025] [security2:error] [pid 1209105:tid 140527018170048] [client 169.22 ... show more [Sat Nov 29 21:38:55.797580 2025] [security2:error] [pid 1209105:tid 140527018170048] [client 169.224.125.42:19911] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "NetBSD" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "252"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: NetBSD found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (X11; NetBSD) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/27.0.1453.116 Safari/537.36 request_line = GET /index.php/profil/meteorologi/list-all-categories/4279-klimatologi/analisis-klimatologi/monitoring-dan-prakiraan-curah-hujan-dasarian-di-provinsi-jawa-timur/monitoring-dan-prakiraan-curah-hujan-dasarian-di-provinsi-jawa-timur-tahun-2025/555561864-monitoring-dan-prediksi-curah-hujan-dasarian-update-20-april-tahun-2025-di-provin..."] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-a ... show less	Hacking Web App Attack
🇳🇱 exxos	2025-08-20 14:03:01 (1 year ago)	Attacks with Bad user agents	Hacking
🇪🇸 Global Cyber Police	2025-07-27 17:06:32 (1 year ago)	Malicious bot activity detected: Hitting honeypot page (200 OK with 258/259 bytes sent).	Port Scan Brute-Force Web App Attack
Anonymous	2024-08-16 07:31:01 (2 years ago)	dovecot	Brute-Force Web App Attack

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 209.50.183.93

🇧🇪 198.235.24.137

🇹🇼 198.235.24.86

🇪🇨 190.242.106.251

🇺🇸 165.154.173.226

🇺🇸 162.216.149.13

🇬🇧 154.16.44.24

🇮🇶 151.244.153.113

🇵🇰 110.39.6.180

🇰🇷 49.246.3.236

🇺🇸 196.198.211.247

🇺🇸 162.216.149.105

🇧🇪 141.135.180.129

🇧🇩 137.59.49.85

🇧🇩 103.187.39.162

🇳🇱 77.239.124.179

🇺🇸 35.188.212.31

🇺🇸 24.199.107.68

🇺🇸 165.154.202.146

🇵🇱 109.205.211.21