JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 209.242.194.192

209.242.194.192 was found in our database!

This IP was reported 7 times. Confidence of Abuse is 17%: ?

17%

ISP	HostRoyale LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS203020
Domain Name	hostroyale.com
Country	🇫🇷 France
City	Bordeaux, New Aquitaine

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 209.242.194.192

Whois 209.242.194.192

IP Abuse Reports for 209.242.194.192:

This IP address has been reported a total of 7 times from 6 distinct sources. 209.242.194.192 was first reported on March 28th 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 hermawan	2026-09-19 20:17:54 (2 hours ago)	[Sun Sep 20 03:17:45.978354 2026] [security2:error] [pid 113388:tid 140496718501568] [client 209.242 ... show more [Sun Sep 20 03:17:45.978354 2026] [security2:error] [pid 113388:tid 140496718501568] [client 209.242.194.192:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "image/heif" at REQUEST_HEADERS:accept. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "441"] [id "440009"] [msg " Image Heif"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: text/html found within REQUEST_HEADERS:accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/heif,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 request_line = GET /index.php HTTP/1.1 Request URI RAW = /index.php Request Basename = index.php"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php"] [unique_id "aq7t6fFbl8Lv7hbwIqqCmwAAAMg"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[113437] [GXTHtRvUYgs] [aq7t6fFbl8Lv7hbwIqqCmwAAAMg] keep_alive=[0] [2026-09-20 03 ... show less	Email Spam Hacking
🇺🇸 kosada.com	2026-08-27 19:25:06 (3 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇫🇷 bigorre.org	2026-07-26 11:43:21 (1 month ago)	Unidentified crawling: not a self-announced bot in user-agent	Bad Web Bot
🇺🇸 kosada.com	2026-07-12 23:03:15 (2 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇮🇹 A000Z	2026-05-21 10:45:28 (3 months ago)	Fail2Ban: 209.242.194.192 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/ ... show more Fail2Ban: 209.242.194.192 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Linux; Android 8.0; Pixel 2 Build/OPD3.170816.012) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.6152.1476 Mobile Safari/537.36 show less	Bad Web Bot
Anonymous	2026-04-14 18:07:12 (5 months ago)	Botnet-generated fake user-agent with impossible version. UA="Mozilla/5.0 (Linux; Android 8.0; Pixel ... show more Botnet-generated fake user-agent with impossible version. UA="Mozilla/5.0 (Linux; Android 8.0; Pixel 2 Build/OPD3.170816.012) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.6831.1189 Mob" show less	Bad Web Bot
🇵🇹 Subnet Shadow Specter	2026-03-28 20:59:16 (5 months ago)	[Security Alert] Targeted exploit scanning against Textbook Vulnerabilities. Bot hunting for PHP bac ... show more [Security Alert] Targeted exploit scanning against Textbook Vulnerabilities. Bot hunting for PHP backdoors. [Method]: GET. [Request]: /_nca/_next/static/css/888491170cbd7985.css?dpl=sha-64b19da /_nca/_next/static/css/888491170cbd7985.css?dpl=sha-64b19da. Access revoked. [User-Agent]: Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.9460.1606 Mobile Safari/537.36. [OS]: null. [IP Address]: 209.242.194.192. [Date]: 2026-03-28 20:56:09 UTC. show less	Bad Web Bot Hacking Web App Attack

Showing 1 to 7 of 7 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.178.110.218

🇦🇷 190.106.40.43

🇦🇺 110.174.213.140

🇧🇬 109.160.32.207

🇺🇸 70.167.235.208

🇹🇼 221.120.78.177

🇦🇺 61.68.77.236

🇳🇱 45.148.10.59

🇳🇱 45.148.10.28

🇺🇸 38.132.122.177

🇬🇧 35.203.210.245

🇰🇷 203.252.10.4

🇮🇳 117.247.193.27

🇳🇬 102.212.40.229

🇷🇴 92.118.39.71

🇳🇱 45.148.10.247

🇨🇳 14.116.189.74

🇺🇸 205.210.31.59

🇺🇸 157.230.234.202

🇺🇸 147.185.132.230