AbuseIPDB » 42.229.135.5
42.229.135.5 was found in our database!
This IP was reported 2 times. Confidence of
Abuse
is 4% : ?
ISP
China Unicom Henan province network
Usage Type
Fixed Line ISP
ASN
AS4837
Hostname(s)
hn.kd.ny.adsl
Domain Name
chinaunicom.cn
Country
π¨π³
China
City
Zhengzhou, Henan
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 42.229.135.5 :
This IP address has been reported a total of
2
times from
1 distinct
source.
42.229.135.5 was first reported on
June 3rd 2026 , and the most recent report was
2 days ago .
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
πΊπΈ
TPI-Abuse
2026-06-30 00:23:31
(2 days ago)
(mod_security) mod_security (id:210831) triggered by 42.229.135.5 (hn.kd.ny.adsl): 1 in the last 300 ...
show more
(mod_security) mod_security (id:210831) triggered by 42.229.135.5 (hn.kd.ny.adsl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 29 20:23:26.263322 2026] [security2:error] [pid 10626:tid 10626] [client 42.229.135.5:22658] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||thepercussionworks.com|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "thepercussionworks.com"] [uri "/"] [unique_id "akMMfmNKAqe2VMEX7tG--wAAAAM"], referer: http://thepercussionworks.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-06-03 04:02:24
(4 weeks ago)
(mod_security) mod_security (id:210831) triggered by 42.229.135.5 (hn.kd.ny.adsl): 1 in the last 300 ...
show more
(mod_security) mod_security (id:210831) triggered by 42.229.135.5 (hn.kd.ny.adsl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 00:02:17.518399 2026] [security2:error] [pid 27888:tid 27888] [client 42.229.135.5:35138] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||crochetfreepatterns.com|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "crochetfreepatterns.com"] [uri "/"] [unique_id "ah-nSTbhpiD5M8-Zzg54CwAAAAY"], referer: http://crochetfreepatterns.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
Showing 1 to
2
of 2 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown π©
Recently Reported IPs: