JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 42.232.5.92

42.232.5.92 was found in our database!

This IP was reported 9 times. Confidence of Abuse is 0%: ?

ISP	China Unicom Henan province network
Usage Type	Fixed Line ISP
ASN	AS4837
Hostname(s)	hn.kd.ny.adsl
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Zhengzhou, Henan

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 42.232.5.92

Whois 42.232.5.92

IP Abuse Reports for 42.232.5.92:

This IP address has been reported a total of 9 times from 3 distinct sources. 42.232.5.92 was first reported on February 13th 2022, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-06 01:06:25 (3 months ago)	(mod_security) mod_security (id:210831) triggered by 42.232.5.92 (hn.kd.ny.adsl): 1 in the last 300 ... show more (mod_security) mod_security (id:210831) triggered by 42.232.5.92 (hn.kd.ny.adsl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 21:06:20.772335 2026] [security2:error] [pid 10103:tid 10103] [client 42.232.5.92:42540] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.sarves.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.sarves.com"] [uri "/"] [unique_id "aiNyjP7jSGNBCwUTEEiGTgAAAAM"], referer: http://www.sarves.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-05 20:55:08 (3 months ago)	(mod_security) mod_security (id:210831) triggered by 42.232.5.92 (hn.kd.ny.adsl): 1 in the last 300 ... show more (mod_security) mod_security (id:210831) triggered by 42.232.5.92 (hn.kd.ny.adsl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 16:55:01.684032 2026] [security2:error] [pid 19939:tid 19944] [client 42.232.5.92:0] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.mindgardens.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.mindgardens.com"] [uri "/"] [unique_id "aiM3pRHJ63nMxS_dQjX-hQAAAEM"], referer: http://www.mindgardens.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-04 18:51:14 (3 months ago)	(mod_security) mod_security (id:210831) triggered by 42.232.5.92 (hn.kd.ny.adsl): 1 in the last 300 ... show more (mod_security) mod_security (id:210831) triggered by 42.232.5.92 (hn.kd.ny.adsl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 14:51:11.275187 2026] [security2:error] [pid 10461:tid 10461] [client 42.232.5.92:43662] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.crucialpins.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.crucialpins.com"] [uri "/"] [unique_id "aiHJH6RQcXcLCl2Q_kY6LwAAAAc"], referer: https://www.crucialpins.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-03 22:02:56 (3 months ago)	(mod_security) mod_security (id:210831) triggered by 42.232.5.92 (hn.kd.ny.adsl): 1 in the last 300 ... show more (mod_security) mod_security (id:210831) triggered by 42.232.5.92 (hn.kd.ny.adsl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 18:02:52.051645 2026] [security2:error] [pid 26820:tid 26820] [client 42.232.5.92:43095] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.twccsolutions.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.twccsolutions.com"] [uri "/"] [unique_id "aiCkjCXxDIOJgSFXJ44Z1gAAAA4"], referer: http://www.twccsolutions.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇿🇦 IrisFlower	2022-02-15 15:11:06 (4 years ago)	Unauthorized connection attempt detected from IP address 42.232.5.92 to port 2323 [J]	Port Scan Hacking
🇿🇦 IrisFlower	2022-02-14 18:49:52 (4 years ago)	Unauthorized connection attempt detected from IP address 42.232.5.92 to port 23 [J]	Port Scan Hacking
🇿🇦 IrisFlower	2022-02-14 14:28:40 (4 years ago)	Unauthorized connection attempt detected from IP address 42.232.5.92 to port 2323 [J]	Port Scan Hacking
🇧🇷 Renato Freitas	2022-02-14 05:18:38 (4 years ago)	Attack: Remote Command Injection Activity 2 Web Attack: Gpon Router Cmd Injection CVE-2018-10562	Hacking Web App Attack
🇿🇦 IrisFlower	2022-02-13 17:48:22 (4 years ago)	Unauthorized connection attempt detected from IP address 42.232.5.92 to port 8080 [J]	Port Scan Hacking

Showing 1 to 9 of 9 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 198.235.24.129

🇹🇼 198.235.24.117

🇺🇿 193.104.179.151

🇧🇷 189.125.111.177

🇷🇺 176.52.41.17

🇬🇧 109.238.86.163

🇺🇸 45.92.71.36

🇨🇳 42.49.82.219

🇺🇸 40.124.176.147

🇮🇱 37.142.155.105

🇰🇷 36.39.206.8

🇮🇱 34.165.110.208

🇧🇷 16.5.0.168

🇹🇼 198.235.24.112

🇹🇼 198.235.24.111

🇧🇷 190.2.71.168

🇩🇪 188.166.160.65

🇧🇷 187.50.194.182

🇵🇱 185.243.53.236

🇨🇴 181.78.85.27