JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

42.179.234.95

Neutral Activity

Abuse Confidence Score

0% Low Risk

156 reports

102 reporters · latest 1 year ago

ISP: UNICOM Liaoning Province Network
Usage Type: Fixed Line ISP
ASN: AS4837
Domain Name: chinaunicom.cn
Country: 🇨🇳 China
City: Shenyang, Liaoning

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

42.179.234.95 has been reported 156 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

156 from 102 distinct reporters

First reported

April 12th 2024

Most recent report

1 year ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2025-09-16 16:07:54 UTC · (1 year ago)	(mod_security) mod_security (id:217291) triggered by 42.179.234.95 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 16 12:07:49.850716 2025] [security2:error] [pid 9751:tid 9751] [client 42.179.234.95:4928] ModS ... show more (mod_security) mod_security (id:217291) triggered by 42.179.234.95 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 16 12:07:49.850716 2025] [security2:error] [pid 9751:tid 9751] [client 42.179.234.95:4928] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(\\\\n\|\\\\r)" at ARGS_NAMES:\\r\\n3\\r\\nm. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "145"] [id "217291"] [rev "2"] [msg "HTTP Header Injection Attack via payload (CR/LF detected)\|\|kountz.org\|F\|2"] [data "Matched Data: \\x0d found within ARGS_NAMES:\\x5cr\\x5cn3\\x5cr\\x5cnm: \\x0d\\x0a3\\x0d\\x0am"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "kountz.org"] [uri "/calendar.php"] [unique_id "aMmLVV6VKBy6S1H3ZVTynwAAAB4"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Linuxmalwarehuntingnl	2024-07-03 07:00:02 UTC · (2 years ago)	Unauthorized connection attempt	Brute-Force
🇭🇰 Shivakumar Gurumurthy	2024-04-27 18:48:40 UTC · (2 years ago)	2024-04-20 05:04:21,571 fail2ban.actions [555]: NOTICE [sshd] Ban 42.179.234.95 2024-04-20 05:04:21,571 fail2ban.actions [555]: NOTICE [sshd] Ban 42.179.234.95 2024-04-20 05:04:21,571 fail2ban.actions [555]: NOTICE [sshd] Ban ... show more 2024-04-20 05:04:21,571 fail2ban.actions [555]: NOTICE [sshd] Ban 42.179.234.95 2024-04-20 05:04:21,571 fail2ban.actions [555]: NOTICE [sshd] Ban 42.179.234.95 2024-04-20 05:04:21,571 fail2ban.actions [555]: NOTICE [sshd] Ban 42.179.234.95 ... show less	Brute-Force SSH
Anonymous	2024-04-19 22:17:33 UTC · (2 years ago)	2024-04-20T00:16:30+02:00 exit-1 sshd[101828]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.179.234.95 user=root 2024-04-20T00:16:32+02:00 exit-1 sshd[101828]: Failed password for root from 42.179.234.95 ... show more 2024-04-20T00:16:30+02:00 exit-1 sshd[101828]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.179.234.95 user=root 2024-04-20T00:16:32+02:00 exit-1 sshd[101828]: Failed password for root from 42.179.234.95 port 60618 ssh2 2024-04-20T00:17:30+02:00 exit-1 sshd[101835]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.179.234.95 user=root 2024-04-20T00:17:33+02:00 exit-1 sshd[101835]: Failed password for root from 42.179.234.95 port 60450 ssh2 ... show less	Brute-Force SSH
🇩🇪 Hessfr	2024-04-19 19:30:14 UTC · (2 years ago)	Apr 19 19:21:54 ubuntu sshd[847938]: Invalid user r00t from 42.179.234.95 port 59218 Apr 19 19:23:20 ubuntu sshd[847986]: Invalid user liguo from 42.179.234.95 port 61969 Apr 19 19:26:07 ubuntu sshd[848113]: Invalid user vhserver from 42.179.234.95 p ... show more Apr 19 19:21:54 ubuntu sshd[847938]: Invalid user r00t from 42.179.234.95 port 59218 Apr 19 19:23:20 ubuntu sshd[847986]: Invalid user liguo from 42.179.234.95 port 61969 Apr 19 19:26:07 ubuntu sshd[848113]: Invalid user vhserver from 42.179.234.95 port 60222 Apr 19 19:27:27 ubuntu sshd[848159]: Invalid user qinyb from 42.179.234.95 port 59382 Apr 19 19:30:13 ubuntu sshd[848322]: Invalid user alvaro from 42.179.234.95 port 61384 ... show less	Brute-Force SSH
🇩🇪 kais-universum.de	2024-04-19 19:21:29 UTC · (2 years ago)	Apr 19 21:14:39 h2880623 sshd[481084]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.179.234.95 user=root Apr 19 21:14:41 h2880623 sshd[481084]: Failed password for root from 42.179.234.95 port 61427 ssh2 ... show more Apr 19 21:14:39 h2880623 sshd[481084]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.179.234.95 user=root Apr 19 21:14:41 h2880623 sshd[481084]: Failed password for root from 42.179.234.95 port 61427 ssh2 Apr 19 21:21:26 h2880623 sshd[481628]: Invalid user r00t from 42.179.234.95 port 59368 Apr 19 21:21:26 h2880623 sshd[481628]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.179.234.95 Apr 19 21:21:28 h2880623 sshd[481628]: Failed password for invalid user r00t from 42.179.234.95 port 59368 ssh2 ... show less	Brute-Force SSH
🇵🇱 Server	2024-04-19 19:04:35 UTC · (2 years ago)	Invalid 5 SSH connections in span of 15 minutes (honeypot)	Brute-Force SSH
🇩🇪 ipHunter	2024-04-19 17:48:05 UTC · (2 years ago)	$f2bV_matches	Brute-Force SSH
🇨🇭 spotterlog.ch	2024-04-19 17:47:21 UTC · (2 years ago)	Apr 19 19:46:10 spotterlog sshd[146942]: Invalid user dev from 42.179.234.95 port 58544 Apr 19 19:46:47 spotterlog sshd[146964]: Invalid user orion from 42.179.234.95 port 60108 Apr 19 19:47:20 spotterlog sshd[146979]: Invalid user guilherme from 42. ... show more Apr 19 19:46:10 spotterlog sshd[146942]: Invalid user dev from 42.179.234.95 port 58544 Apr 19 19:46:47 spotterlog sshd[146964]: Invalid user orion from 42.179.234.95 port 60108 Apr 19 19:47:20 spotterlog sshd[146979]: Invalid user guilherme from 42.179.234.95 port 58535 ... show less	Brute-Force SSH
🇩🇪 Hector Lorenzo	2024-04-19 13:05:30 UTC · (2 years ago)	$f2bV_matches	Brute-Force SSH
🇺🇸 caphector.com	2024-04-19 10:23:05 UTC · (2 years ago)	Apr 19 03:08:02 caphector sshd[1522492]: Invalid user admin from 42.179.234.95 port 58983 Apr 19 03:19:08 caphector sshd[1529097]: Invalid user ubuntu from 42.179.234.95 port 59030 Apr 19 03:20:43 caphector sshd[1529789]: Invalid user zbh from 42.179 ... show more Apr 19 03:08:02 caphector sshd[1522492]: Invalid user admin from 42.179.234.95 port 58983 Apr 19 03:19:08 caphector sshd[1529097]: Invalid user ubuntu from 42.179.234.95 port 59030 Apr 19 03:20:43 caphector sshd[1529789]: Invalid user zbh from 42.179.234.95 port 61403 Apr 19 03:22:16 caphector sshd[1530915]: Invalid user zf from 42.179.234.95 port 59862 Apr 19 03:23:04 caphector sshd[1531460]: Invalid user mongod from 42.179.234.95 port 59616 ... show less	Brute-Force SSH
Anonymous	2024-04-19 07:17:49 UTC · (2 years ago)	Apr 19 07:17:48 f2b auth.info sshd[130265]: Invalid user bibi from 42.179.234.95 port 60070 Apr 19 07:17:48 f2b auth.info sshd[130265]: Failed password for invalid user bibi from 42.179.234.95 port 60070 ssh2 Apr 19 07:17:48 f2b auth.info sshd[130265 ... show more Apr 19 07:17:48 f2b auth.info sshd[130265]: Invalid user bibi from 42.179.234.95 port 60070 Apr 19 07:17:48 f2b auth.info sshd[130265]: Failed password for invalid user bibi from 42.179.234.95 port 60070 ssh2 Apr 19 07:17:48 f2b auth.info sshd[130265]: Disconnected from invalid user bibi 42.179.234.95 port 60070 [preauth] ... show less	Brute-Force SSH
Anonymous	2024-04-19 04:18:31 UTC · (2 years ago)	Apr 19 04:15:45 mt-view-website sshd[903176]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.179.234.95 Apr 19 04:15:48 mt-view-website sshd[903176]: Failed password for invalid user tech from 42.179.234.9 ... show more Apr 19 04:15:45 mt-view-website sshd[903176]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.179.234.95 Apr 19 04:15:48 mt-view-website sshd[903176]: Failed password for invalid user tech from 42.179.234.95 port 60024 ssh2 Apr 19 04:18:30 mt-view-website sshd[903190]: Invalid user git from 42.179.234.95 port 59558 ... show less	Brute-Force SSH
🇩🇪 suble.org	2024-04-19 02:37:03 UTC · (2 years ago)	Apr 19 04:20:03 swsrv sshd[215835]: User root from 42.179.234.95 not allowed because not listed in AllowUsers Apr 19 04:33:27 swsrv sshd[216080]: User root from 42.179.234.95 not allowed because not listed in AllowUsers Apr 19 04:35:51 swsrv sshd[216 ... show more Apr 19 04:20:03 swsrv sshd[215835]: User root from 42.179.234.95 not allowed because not listed in AllowUsers Apr 19 04:33:27 swsrv sshd[216080]: User root from 42.179.234.95 not allowed because not listed in AllowUsers Apr 19 04:35:51 swsrv sshd[216124]: User root from 42.179.234.95 not allowed because not listed in AllowUsers Apr 19 04:37:01 swsrv sshd[216142]: Invalid user mehran from 42.179.234.95 port 59840 ... show less	Brute-Force SSH
Anonymous	2024-04-19 02:31:45 UTC · (2 years ago)	sshd	Brute-Force SSH

Showing 1 to 15 of 156 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇵🇱 162.158.103.43

🇷🇴 92.118.39.64

🇺🇸 43.165.125.66

🇧🇪 34.62.246.24

🇳🇱 213.209.159.228

🇳🇱 185.223.235.60

🇵🇰 182.183.71.102

🇮🇳 159.89.168.78

🇮🇳 103.179.95.103

🇩🇪 69.5.169.18

🇵🇰 39.56.115.187

🇰🇷 34.64.155.80

🇺🇸 209.141.46.171

🇰🇪 197.248.154.169

🇨🇴 181.62.2.57

🇳🇱 64.205.72.186

🇨🇳 58.34.174.90

🇻🇪 200.84.232.42

🇺🇸 147.185.132.162

🇷🇴 92.118.39.71