JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 185.142.42.29

185.142.42.29 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 36%: ?

36%

ISP	Net Pro sarl
Usage Type	Fixed Line ISP
ASN	AS48206
Domain Name	netprolb.com
Country	🇱🇧 Lebanon
City	Baalbek, Baalbek-Hermel Governorate

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 185.142.42.29

Whois 185.142.42.29

IP Abuse Reports for 185.142.42.29:

This IP address has been reported a total of 19 times from 7 distinct sources. 185.142.42.29 was first reported on August 29th 2026, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-10-24 12:19:22 (3 days ago)	(mod_security) mod_security (id:210350) triggered by 185.142.42.29 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 185.142.42.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 08:19:19.482940 2026] [security2:error] [pid 6910:tid 6910] [client 185.142.42.29:38155] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|cbcfargo.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cbcfargo.com"] [uri "/resources/promise/true_joy.pdf"] [unique_id "atyiRzP61XN_-MEN-G71FgAAABc"], referer: https://cbcfargo.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Phenix Info	2026-10-17 18:10:35 (1 week ago)	SmallGuard.fr/Prestashop Massive 403	Web App Attack
🇨🇭 ALPHANET	2026-10-17 09:35:44 (1 week ago)	Botnet or web spider not respecting robots.txt	DDoS Attack Exploited Host
🇮🇩 David Koswari	2026-10-16 05:12:00 (1 week ago)	REQ_BLOCKED_ACL	DDoS Attack FTP Brute-Force Ping of Death Port Scan Hacking SQL Injection Spoofing Brute-Force Bad Web Bot Exploited Host Web App Attack SSH IoT Targeted
🇺🇸 鬼影233	2026-09-29 13:22:26 (4 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇩🇪 LRob	2026-09-29 00:56:12 (4 weeks ago)	Not following 301 redirects — wasted requests \| method: GET \| path: /pp \| ua: Mozilla/5.0 (Macintosh ... show more Not following 301 redirects — wasted requests \| method: GET \| path: /pp \| ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0. \| 2026-09-29 00:56 UTC show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-09-28 12:00:40 (4 weeks ago)	(mod_security) mod_security (id:210350) triggered by 185.142.42.29 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 185.142.42.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 08:00:33.540672 2026] [security2:error] [pid 27135:tid 27135] [client 185.142.42.29:41256] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|harrisconcepts.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "harrisconcepts.com"] [uri "/"] [unique_id "arpW4WK_dqUt_ZNarAbZBQAAAAY"], referer: https://bulkbacklinkanalyzer.online/dir/custom-seo-backlinks-89455 show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 鬼影233	2026-09-28 10:15:06 (4 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-09-25 12:30:58 (1 month ago)	(mod_security) mod_security (id:210350) triggered by 185.142.42.29 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 185.142.42.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 25 08:30:51.268408 2026] [security2:error] [pid 651996:tid 651996] [client 185.142.42.29:38915] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|garon.us\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "garon.us"] [uri "/hymen kaner.html"] [unique_id "arZpe7f4s2QIamxR7Y0ZBwAAAAQ"], referer: https://www.garon.us/zindex.html show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 鬼影233	2026-09-24 12:43:47 (1 month ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-22 01:39:26 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-21 20:05:46 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-21 09:20:36 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 show less	Bad Web Bot
🇨🇭 backslash	2026-09-17 09:21:06 (1 month ago)	block ruleset 6B63410D189E6343B910F7440B8499558BEC52EB	Bad Web Bot
🇩🇪 LRob	2026-09-15 04:42:48 (1 month ago)	Asking over plain http and never following the redirect served — a crawler that reads nothing it ask ... show more Asking over plain http and never following the redirect served — a crawler that reads nothing it asks for \| method: GET \| path: http://forum.lagarde6mm.com/viewtopic.php \| 2026-09-15 04:42 UTC show less	Bad Web Bot

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 34.220.145.75

🇷🇺 212.164.26.168

🇨🇳 124.160.254.46

🇮🇩 103.131.61.163

🇳🇱 45.148.10.121

🇺🇦 31.129.78.223

🇪🇬 197.120.67.95

🇩🇪 194.88.98.87

🇳🇱 192.253.248.229

🇺🇸 173.46.91.28

🇸🇬 168.144.142.237

🇮🇳 152.59.30.79

🇻🇳 113.161.222.150

🇹🇼 101.13.4.119

🇨🇳 58.241.232.147

🇸🇬 43.133.61.254

🇭🇰 20.205.120.210

🇧🇷 201.63.223.138

🇷🇺 195.206.63.137

🇧🇷 177.174.125.183