JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 42.194.225.248

42.194.225.248 was found in our database!

This IP was reported 188 times. Confidence of Abuse is 38%: ?

38%

ISP	Tencent cloud computing (Beijing) Co., Ltd.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS45090
Domain Name	tencentcloud.com
Country	🇨🇳 China
City	Guangzhou, Guangdong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 42.194.225.248

Whois 42.194.225.248

IP Abuse Reports for 42.194.225.248:

This IP address has been reported a total of 188 times from 24 distinct sources. 42.194.225.248 was first reported on May 17th 2023, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 ghostwarriors	2026-06-29 05:20:30 (1 day ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-06-28 18:01:15 (1 day ago)	Bad bot detected via UA blacklist. Matched phrase "go-http-client" at REQUEST_HEADERS:user-agent. (7 ... show more Bad bot detected via UA blacklist. Matched phrase "go-http-client" at REQUEST_HEADERS:user-agent. (780210-133) show less	Hacking
🇯🇵 GuangChen233	2026-06-21 07:15:41 (1 week ago)	Blocked by CrowdSec: Ip 42.194.225.248 performed 'crowdsecurity/http-bad-user-agent' (2 events over ... show more Blocked by CrowdSec: Ip 42.194.225.248 performed 'crowdsecurity/http-bad-user-agent' (2 events over 241.718648ms) at 2026-06-21 07:15:40.033374983 0000 UTC show less	Bad Web Bot Web App Attack
Anonymous	2026-06-16 03:29:21 (2 weeks ago)	Banned by Fail2Ban on server	Web App Attack
🇫🇷 Sklurk	2026-06-09 19:50:29 (2 weeks ago)	Web App Attack	Web App Attack
🇧🇷 ICS Labs	2026-05-23 14:06:10 (1 month ago)	ICS Labs identified 42.194.225.248 as a malicious indicator from threat intelligence.	DDoS Attack Hacking Exploited Host
🇨🇳 ThreatBook.io	2026-05-18 23:10:49 (1 month ago)	ThreatBook Intelligence: IDC more details on http://threatbook.io/ip/42.194.225.248 2026-05-18 03:09 ... show more ThreatBook Intelligence: IDC more details on http://threatbook.io/ip/42.194.225.248 2026-05-18 03:09:05 /docs/images/docs-stylesheet.css 2026-05-18 03:09:05 /docs/images/fonts/fonts.css 2026-05-18 03:09:05 /docs/images/fonts/OpenSans400.woff 2026-05-18 06:02:16 /docs/images/fonts/fonts.css 2026-05-18 06:02:16 /docs/images/fonts/OpenSans400.woff 2026-05-18 06:02:17 /api/vip/i18n/api/v2/translation/products/vRNIUI/versions/1 2026-05-18 06:02:16 /docs/images/docs-stylesheet.css show less	Web App Attack
Anonymous	2026-05-11 00:00:00 (1 month ago)	"Security violation, excess traffic against library/education infrastructure"	Brute-Force
🇨🇳 ThreatBook.io	2026-05-10 23:35:31 (1 month ago)	ThreatBook Intelligence: IDC more details on http://threatbook.io/ip/42.194.225.248 2026-05-10 03:48 ... show more ThreatBook Intelligence: IDC more details on http://threatbook.io/ip/42.194.225.248 2026-05-10 03:48:44 /docs/security-manager-howto.html 2026-05-10 03:48:44 /docs/images/fonts/OpenSans400italic.woff show less	Web App Attack
🇨🇳 ThreatBook.io	2026-05-09 23:29:48 (1 month ago)	ThreatBook Intelligence: IDC more details on http://threatbook.io/ip/42.194.225.248 2026-05-09 19:12 ... show more ThreatBook Intelligence: IDC more details on http://threatbook.io/ip/42.194.225.248 2026-05-09 19:12:05 /docs/images/fonts/fonts.css 2026-05-09 19:12:05 /docs/images/docs-stylesheet.css 2026-05-09 19:12:05 /docs/web-socket-howto.html 2026-05-09 19:12:05 /docs/images/fonts/OpenSans400.woff show less	Web App Attack
🇦🇺 MAGIC	2026-05-06 00:05:30 (1 month ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇨🇳 ThreatBook.io	2026-05-04 23:45:20 (1 month ago)	ThreatBook Intelligence: IDC more details on http://threatbook.io/ip/42.194.225.248 2026-05-04 22:00 ... show more ThreatBook Intelligence: IDC more details on http://threatbook.io/ip/42.194.225.248 2026-05-04 22:00:16 /administrator/components/com_listing show less	Web App Attack
🇨🇳 ThreatBook.io	2026-05-01 23:30:30 (1 month ago)	ThreatBook Intelligence: IDC more details on http://threatbook.io/ip/42.194.225.248 2026-05-01 11:12 ... show more ThreatBook Intelligence: IDC more details on http://threatbook.io/ip/42.194.225.248 2026-05-01 11:12:33 /tomcat.css 2026-05-01 08:12:35 /cc.gif 2026-05-01 11:12:33 /bg-upper.png 2026-05-01 11:12:33 / 2026-05-01 11:12:33 /bg-nav.png show less	Web App Attack
🇨🇳 ThreatBook.io	2026-04-30 23:16:21 (1 month ago)	ThreatBook Intelligence: IDC more details on http://threatbook.io/ip/42.194.225.248 2026-04-30 04:14 ... show more ThreatBook Intelligence: IDC more details on http://threatbook.io/ip/42.194.225.248 2026-04-30 04:14:06 /docs/images/fonts/OpenSans700.woff show less	Web App Attack
🇺🇸 TPI-Abuse	2026-04-29 07:08:32 (2 months ago)	(mod_security) mod_security (id:210730) triggered by 42.194.225.248 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 42.194.225.248 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 29 03:08:27.743859 2026] [security2:error] [pid 19564:tid 19564] [client 42.194.225.248:15932] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.raintechgutters.com\|F\|2"] [data ".raintechgutters.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.raintechgutters.com"] [uri "/budget-gutter-services-orlando/www.raintechgutters.com"] [unique_id "afGuay-a-PO4JBrsyDrnqQAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 188 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇪🇹 196.189.184.114

🇷🇺 193.25.11.246

🇳🇱 176.65.148.243

🇬🇧 89.37.172.137

🇩🇪 47.245.128.248

🇺🇦 192.162.233.6

🇳🇱 185.93.89.36

🇨🇳 182.204.179.6

🇳🇱 172.253.7.213

🇸🇬 165.232.170.62

🇺🇸 162.216.150.83

🇬🇧 134.209.186.182

🇨🇳 113.142.138.147

🇨🇳 111.59.206.224

🇳🇱 93.123.109.102

🇶🇦 78.100.129.165

🇺🇸 18.119.209.50

🇮🇹 185.77.51.208

🇧🇷 177.128.224.122

🇲🇩 176.123.8.39