JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 152.32.169.42

152.32.169.42 was found in our database!

This IP was reported 679 times. Confidence of Abuse is 100%: ?

100%

ISP	UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED
Usage Type	Data Center/Web Hosting/Transit
ASN	AS135377
Domain Name	ucloud.cn
Country	🇭🇰 Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 152.32.169.42

Whois 152.32.169.42

IP Abuse Reports for 152.32.169.42:

This IP address has been reported a total of 679 times from 201 distinct sources. 152.32.169.42 was first reported on January 7th 2026, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 LTM	2026-05-30 06:20:02 (4 days ago)	DNS - Multiple recursive query request denied	DNS Poisoning Hacking
🇯🇵 mkaraki	2026-05-29 22:20:44 (5 days ago)	1780093243 # Service_probe # SIGNATURE_SEND # source_ip:152.32.169.42 # dst_port:20202 ...	Port Scan
🇳🇱 Eric	2026-05-29 21:12:41 (5 days ago)	[Fri May 29 21:12:31.201702 2026] [security2:error] [pid 1362518:tid 1362518] [client 152.32.169.42: ... show more [Fri May 29 21:12:31.201702 2026] [security2:error] [pid 1362518:tid 1362518] [client 152.32.169.42:27050] [client 152.32.169.42] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "94.209.38.171:443"] [severity "WARNING"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "94.209.38.171"] [uri "/"] [unique_id "ahoBP1P0my1oqqJ8q2DuugAAAAk"] [Fri May 29 21:12:40.211045 2026] [security2:error] [pid 1362495:tid 1362495] [client 152.32.169.42:36132] [client 152.32.169.42] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920 ... show less	Hacking Web App Attack
Anonymous	2026-05-29 11:29:52 (5 days ago)	$f2bV_matches	Brute-Force SSH
🇧🇷 W8C Dev	2026-05-29 11:25:08 (5 days ago)	May 29 08:25:07 vmori-manager-1 sshd[61975]: Connection closed by 152.32.169.42 port 45950 [preauth] ... show more May 29 08:25:07 vmori-manager-1 sshd[61975]: Connection closed by 152.32.169.42 port 45950 [preauth] ... show less	Brute-Force SSH
🇩🇪 Thomas Barth	2026-05-29 08:20:45 (5 days ago)	2026-05-29T10:20:45.162697+02:00 server sshd-session[6661]: Connection closed by 152.32.169.42 port ... show more 2026-05-29T10:20:45.162697+02:00 server sshd-session[6661]: Connection closed by 152.32.169.42 port 25862 [preauth] ... show less	Brute-Force SSH
🇲🇳 Public CSIRT/CC of Mongolia	2026-05-29 05:45:25 (5 days ago)	Honeypot hit: HTTP/1.1 request on 5357 GET / Accept: /; 5357 [5] TCP	Web App Attack
🇩🇪 dispaisyenterprises	2026-05-28 23:03:48 (5 days ago)	Honeypot [fra-de-honeypot]: HTTP/1.1 request on 8088 GET / Accept: /; 8088 [7] TCP Reported by Di ... show more Honeypot [fra-de-honeypot]: HTTP/1.1 request on 8088 GET / Accept: /; 8088 [7] TCP Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇬🇷 Xev	2026-05-28 22:39:01 (6 days ago)	SMTP credentials BruteForce Date: 2026-05-28 22:39:00 UTC Destination port: 25 Commands executed: h ... show more SMTP credentials BruteForce Date: 2026-05-28 22:39:00 UTC Destination port: 25 Commands executed: help AUTH NTLM Targeted device: Raspberry Pi show less	Brute-Force IoT Targeted
🇩🇪 Justin F. \| AS204464	2026-05-28 15:28:31 (6 days ago)	Honeypot [nx-infrastructure]: HTTP/1.1 request on 8082 GET / Accept: /; 8082 [5] TCP Reported by: ... show more Honeypot [nx-infrastructure]: HTTP/1.1 request on 8082 GET / Accept: /; 8082 [5] TCP Reported by: Justin F. show less	Hacking Bad Web Bot
🇳🇱 donarev419	2026-05-28 09:24:44 (6 days ago)	Connection to port 1666 with data transfer. Data preview: ��	Port Scan Hacking
🇧🇪 sauron-le-noir	2026-05-28 04:40:08 (6 days ago)	scan port : 23 from Hong Kong at Thu May 28 06:44:09 2026	Port Scan
🇫🇷 Kraften	2026-05-28 03:46:00 (6 days ago)	Dovecot imap-login 2 ...	DDoS Attack Brute-Force
🇫🇷 Mölkky	2026-05-28 03:21:20 (6 days ago)	Abusive IP (403 Forbidden)	Web App Attack
🇺🇸 donarev419	2026-05-28 02:49:43 (6 days ago)	Connection to port 88 with data transfer. Data preview: GET / HTTP/1.1 Host: 107.175.212.44:88 Acc ... show more Connection to port 88 with data transfer. Data preview: GET / HTTP/1.1 Host: 107.175.212.44:88 Accept: / show less	Port Scan Hacking

Showing 16 to 30 of 679 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 109.122.196.113

🇩🇪 213.209.159.158

🇱🇹 195.12.191.130

🇳🇱 176.65.139.130

🇺🇸 142.248.80.245

🇫🇷 91.196.152.177

🇫🇷 88.138.20.172

🇸🇬 47.128.112.216

🇳🇱 45.148.10.152

🇨🇳 42.193.139.14

🇺🇸 172.202.118.47

🇩🇪 172.71.164.53

🇺🇸 162.243.147.237

🇮🇳 136.232.157.230

🇩🇪 43.228.157.229

🇻🇳 14.177.234.24

🇨🇳 14.103.116.87

🇺🇿 185.203.236.212

🇸🇬 152.32.218.244

🇵🇭 138.84.127.67