42.92.120.64

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted.
Abuse Confidence Score
0% Low Risk
73 reports
37 reporters · latest 1 year ago
ISP
CHINANET Gansu province network
Usage Type
Fixed Line ISP
ASN
AS4134
Domain Name
chinatelecom.cn
Country
🇨🇳 China
City
Lanzhou, Gansu
Log in to view charts and search reports for this IP. Log In

No reports in the last 60 days

42.92.120.64 has been reported 73 times. The most recent report is from .

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Total reports
73 from 37 distinct reporters
First reported
Most recent report
Reporter IoA Timestamp (UTC) Comment Categories
Anonymous
bad ssl requests
Port Scan Hacking Web App Attack
🇳🇱 bontekoe.technology
42.92.120.64 banned on rtr - Threshold reached: 3 failures
Web App Attack
🇩🇪 _ArminS_
SP-Scan 56085:49666 detected 2025.10.12 06:11:22 blocked until 2025.11.30 22:14:09
Port Scan
🇨🇳 ThreatBook.io
ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/42.92.120.64 2025-10-05 03:49:02 /
Web App Attack
🇵🇱 sefinek.net
Honeypot hit: Unauthorized traffic on 1883/mqttd
Port Scan
Anonymous
unsolicited connect TCP dport 5985 (sport 59089)
Hacking
🇺🇸 MPL
tcp/11211 (2 or more attempts)
Port Scan
🇵🇱 Niko's Stuff
[1x] F2B | Suspicious activity blocked on: ufw | BanTime: 604800s | Suspicious TCP packet from 42.92.120.64:61830 → port 850 | TTL: 236, LEN: 44, TOS: 0x00, PREC: 0x00, Interface: eth0
Port Scan
🇳🇱 Study Bitcoin 🤗
Port probe to tcp/53 (domain name) [srv133]
DNS Compromise Port Scan
🇩🇪 David Ferneding
Blocked by UFW (TCP on 47001) Source port: 36981 TTL: 238 Packet length: 44 TOS: 0x00 This report (for 42.92.120.64) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇬🇧 spamverify.com
Honeypot Hit: Port Scan (1521) ORACLE
Web Spam Blog Spam Bad Web Bot Web App Attack
🇺🇸 MPL
tcp/5008 (2 or more attempts)
Port Scan
🇺🇸 MPL
tcp/49155
Port Scan
🇳🇱 Study Bitcoin 🤗
Port probe to tcp/8081 (http) [srv124]
Port Scan
🇺🇸 COMPLEX
Honeypot [1]: Empty payload (likely service probe); 8085 [1] TCP
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 204.76.203.213
🇳🇱 185.136.15.13
🇮🇹 172.213.26.234
🇺🇸 165.22.135.171
🇷🇺 94.243.10.136
🇨🇦 85.217.149.20
🇬🇧 81.19.219.243
🇧🇬 79.124.62.134
🇺🇦 77.75.146.23
🇺🇸 72.178.248.90
🇺🇸 71.76.151.139
🇳🇱 35.214.222.68
🇳🇱 35.214.165.44
🇬🇧 35.203.211.101
🇶🇦 34.18.165.18
🇳🇱 34.1.228.226
🇱🇹 212.192.23.210
🇹🇳 197.7.219.82
🇹🇷 185.136.205.183
🇦🇷 179.49.125.153
feedback