JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 42.1.61.11

42.1.61.11 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 0%: ?

ISP	NOC Operation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS46015
Hostname(s)	exabytes-92080530.mschosting.org exabytes-13064273.mschosting.org
Domain Name	mschosting.com
Country	🇲🇾 Malaysia
City	Kuala Lumpur, Kuala Lumpur

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 42.1.61.11

Whois 42.1.61.11

IP Abuse Reports for 42.1.61.11:

This IP address has been reported a total of 13 times from 9 distinct sources. 42.1.61.11 was first reported on July 22nd 2024, and the most recent report was 10 months ago.

Old Reports: The most recent abuse report for this IP address is from 10 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 ᴀʀᴛ	2025-07-22 07:20:27 (10 months ago)	Triggered Cloudflare WAF (l7ddos) from MY. ASN: 46015 (EXABYTES-AS-AP Exa Bytes Network Sdn.Bhd.) Pr ... show more Triggered Cloudflare WAF (l7ddos) from MY. ASN: 46015 (EXABYTES-AS-AP Exa Bytes Network Sdn.Bhd.) Protocol: HTTP/2 (GET method) UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	DDoS Attack Bad Web Bot
🇺🇸 COMPLEX	2025-06-06 05:28:28 (1 year ago)	Triggered Cloudflare WAF (l7ddos) from MY. Action taken: BLOCK ASN: 46015 (EXABYTES-AS-AP Exa Bytes ... show more Triggered Cloudflare WAF (l7ddos) from MY. Action taken: BLOCK ASN: 46015 (EXABYTES-AS-AP Exa Bytes Network Sdn.Bhd.) Protocol: HTTP/2 (GET method) Endpoint: / show less	DDoS Attack Bad Web Bot
🇩🇪 Packets-Decreaser.NET	2025-05-10 17:53:04 (1 year ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇩🇪 Packets-Decreaser.NET	2025-05-09 13:16:26 (1 year ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇬🇧 Silly Development	2025-05-07 10:27:56 (1 year ago)	Malicious activity detected from 46015 EXABYTES-AS-AP Exa Bytes Network Sdn.Bhd. towards host sillyd ... show more Malicious activity detected from 46015 EXABYTES-AS-AP Exa Bytes Network Sdn.Bhd. towards host sillydev.co.uk (GET HTTP/2) @ 2025-05-07T10:27:56Z (3 occurrences) show less	DDoS Attack Exploited Host
🇬🇧 Silly Development	2025-05-07 10:27:56 (1 year ago)	Malicious activity detected from 46015 EXABYTES-AS-AP Exa Bytes Network Sdn.Bhd. towards host sillyd ... show more Malicious activity detected from 46015 EXABYTES-AS-AP Exa Bytes Network Sdn.Bhd. towards host sillydev.co.uk (GET HTTP/2) @ 2025-05-07T10:27:56Z (3 occurrences) show less	DDoS Attack Exploited Host
🇬🇧 uira.live	2025-05-04 11:26:02 (1 year ago)	Malicious activity detected from 46015 EXABYTES-AS-AP Exa Bytes Network Sdn.Bhd. towards host uira.l ... show more Malicious activity detected from 46015 EXABYTES-AS-AP Exa Bytes Network Sdn.Bhd. towards host uira.live (GET HTTP/2) @ 2025-05-04T11:26:02Z (6 occurrences) show less	DDoS Attack
🇩🇪 Packets-Decreaser.NET	2025-04-29 21:28:30 (1 year ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇺🇸 COMPLEX	2025-04-24 03:51:23 (1 year ago)	Triggered Cloudflare WAF (l7ddos) from MY. Action taken: BLOCK ASN: 46015 (EXABYTES-AS-AP Exa Bytes ... show more Triggered Cloudflare WAF (l7ddos) from MY. Action taken: BLOCK ASN: 46015 (EXABYTES-AS-AP Exa Bytes Network Sdn.Bhd.) Protocol: HTTP/2 (GET method) Timestamp: 2025-04-24T03:49:27Z show less	Bad Web Bot
Anonymous	2024-07-23 02:03:01 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇺🇸 TPI-Abuse	2024-07-23 00:56:29 (1 year ago)	(mod_security) mod_security (id:240335) triggered by 42.1.61.11 (exabytes-92080530.mschosting.org): ... show more (mod_security) mod_security (id:240335) triggered by 42.1.61.11 (exabytes-92080530.mschosting.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 22 20:56:21.345512 2024] [security2:error] [pid 4691:tid 4691] [client 42.1.61.11:60335] [client 42.1.61.11] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 42.1.61.11 (+1 hits since last alert)\|symbarenewables.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "symbarenewables.com"] [uri "/xmlrpc.php"] [unique_id "Zp7_taLjRFupIsLONEShlwAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Kenshin869	2024-07-23 00:32:24 (1 year ago)	Wordpress unauthorized access attempt	Brute-Force
🇩🇪 Marc	2024-07-22 21:11:21 (1 year ago)		Brute-Force

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇪 83.254.146.150

🇺🇸 66.234.152.204

🇺🇸 66.132.172.200

🇺🇸 50.6.224.135

🇳🇱 45.148.10.141

🇸🇬 45.78.206.111

🇧🇬 5.188.206.34

🇳🇱 193.176.31.213

🇨🇱 181.74.82.75

🇳🇱 85.121.127.157

🇭🇰 45.142.154.38

🇰🇷 14.32.231.200

🇳🇱 176.65.139.236

🇨🇳 106.75.169.149

🇸🇬 47.84.102.59

🇷🇴 2.57.121.25

🇺🇸 208.87.243.131

🇺🇸 173.197.1.238

🇹🇷 149.34.211.137

🇨🇳 111.47.243.219