JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

42.202.17.126

Neutral Activity

Abuse Confidence Score

0% Low Risk

23 reports

14 reporters · latest 2 years ago

ISP: CHINANET Liaoning province network
Usage Type: Fixed Line ISP
ASN: AS4134
Domain Name: chinatelecom.cn
Country: 🇨🇳 China
City: Shenyang, Liaoning

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

42.202.17.126 has been reported 23 times. The most recent report is from 2 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

23 from 14 distinct reporters

First reported

January 29th 2024

Most recent report

2 years ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 speedtaq.com	2024-05-06 19:01:23 UTC · (2 years ago)	42.202.17.126 - - [06/May/2024:21:01:22 +0200] "GET /wp-content/plugins/elementor/assets/lib/swiper/css/swiper.min.css?ver=5.3.6 HTTP/1.1" 200 13230 "-" "Go-http-client/1.1"	Bad Web Bot
🇫🇷 conseilgouz	2024-05-05 02:37:45 UTC · (2 years ago)	fmw-Joomla User : try to access forms...	Hacking
🇪🇸 10dencehispahard SL	2024-04-30 17:00:15 UTC · (2 years ago)	Unauthorized login attempts [ accesslogs]	Brute-Force
🇫🇷 pm33	2024-04-30 15:41:54 UTC · (2 years ago)	Excessive crawling HTTP 404	Web App Attack
🇩🇪 uhlhosting	2024-04-29 04:04:05 UTC · (2 years ago)	musashi.ninja 42.202.17.126 - - [29/Apr/2024:06:04:04.582591 +0200] "GET /ja/ HTTP/1.1" 403 199 "-" "-" Zi8cNBlTut4b_R0MBmPFqQAAAE8 "-" /apache/20240429/20240429-0604/20240429-060404-Zi8cNBlTut4b_R0MBmPFqQAAAE8 0 1647 md5:5dc86c3bea4c0def6deef4989b8a ... show more musashi.ninja 42.202.17.126 - - [29/Apr/2024:06:04:04.582591 +0200] "GET /ja/ HTTP/1.1" 403 199 "-" "-" Zi8cNBlTut4b_R0MBmPFqQAAAE8 "-" /apache/20240429/20240429-0604/20240429-060404-Zi8cNBlTut4b_R0MBmPFqQAAAE8 0 1647 md5:5dc86c3bea4c0def6deef4989b8a660b musashi.ninja 42.202.17.126 - - [29/Apr/2024:06:04:04.838972 +0200] "GET /wp-content/uploads/2022/01/Martial-Arts.webp HTTP/1.1" 403 199 "-" "-" Zi8cNBlTut4b_R0MBmPFqgAAAE0 "-" /apache/20240429/20240429-0604/20240429-060404-Zi8cNBlTut4b_R0MBmPFqgAAAE0 0 1731 md5:9f05c9d9675a00182047c3195a951140 musashi.ninja 42.202.17.126 - - [29/Apr/2024:06:04:05.098768 +0200] "GET /wp-content/uploads/2022/01/default-avatar-2020-65-2.jpg HTTP/1.1" 403 199 "-" "-" Zi8cNRlTut4b_R0MBmPFqwAAAEk "-" /apache/20240429/20240429-0604/20240429-060405-Zi8cNRlTut4b_R0MBmPFqwAAAEk 0 1751 md5:0cfd89b929753b5dafa6c7994c6cbb9d musashi.ninja 42.202.17.126 - - [29/Apr/2024:06:04:05.340626 +0200] "GET /wp-content/plugins/gravityforms/assets/css/dist/theme-components. ... show less	DDoS Attack Brute-Force
🇺🇸 TPI-Abuse	2024-04-29 01:29:31 UTC · (2 years ago)	(mod_security) mod_security (id:210730) triggered by 42.202.17.126 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 28 21:29:24.673477 2024] [security2:error] [pid 11607] [client 42.202.17.126:37476] [client 42. ... show more (mod_security) mod_security (id:210730) triggered by 42.202.17.126 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 28 21:29:24.673477 2024] [security2:error] [pid 11607] [client 42.202.17.126:37476] [client 42.202.17.126] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|civilwarzone.com\|F\|2"] [data ".dll"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "civilwarzone.com"] [uri "/~site/Scripts_ExternalRedirect/ExternalRedirect.dll"] [unique_id "Zi739GlNeEFDQGFM7UkzBQAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 MAGIC	2024-04-28 05:00:19 UTC · (2 years ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇸 mnsf	2024-04-28 04:03:23 UTC · (2 years ago)	Request Overload (105)	Brute-Force Web App Attack
🇩🇪 kundukundu	2024-04-28 03:51:18 UTC · (2 years ago)		Web App Attack
🇦🇺 MAGIC	2024-04-23 10:15:55 UTC · (2 years ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
Anonymous	2024-04-23 08:48:09 UTC · (2 years ago)	Malicious activity detected	Hacking Web App Attack
Anonymous	2024-04-21 01:44:18 UTC · (2 years ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇦🇺 paulshipley.com.au	2024-04-19 01:18:03 UTC · (2 years ago)	paulshipley.id.au:443 42.202.17.126 - - [19/Apr/2024:11:17:59 +1000] "GET /wp-content/plugins/cookie-notice/js/front.min.js HTTP/1.1" 403 639 "-" "Go-http-client/1.1" paulshipley.id.au:443 42.202.17.126 - - [19/Apr/2024:11:18:01 +1000] "GET /wp-conte ... show more paulshipley.id.au:443 42.202.17.126 - - [19/Apr/2024:11:17:59 +1000] "GET /wp-content/plugins/cookie-notice/js/front.min.js HTTP/1.1" 403 639 "-" "Go-http-client/1.1" paulshipley.id.au:443 42.202.17.126 - - [19/Apr/2024:11:18:01 +1000] "GET /wp-content/plugins/cookie-notice/js/front.min.js HTTP/1.1" 403 620 "-" "Go-http-client/1.1" paulshipley.id.au:443 42.202.17.126 - - [19/Apr/2024:11:18:01 +1000] "GET /wp-content/plugins/cookie-notice/js/front.min.js HTTP/1.1" 403 620 "-" "Go-http-client/1.1" paulshipley.id.au:443 42.202.17.126 - - [19/Apr/2024:11:18:02 +1000] "GET /wp-content/plugins/cookie-notice/js/front.min.js HTTP/1.1" 403 620 "-" "Go-http-client/1.1" paulshipley.id.au:443 42.202.17.126 - - [19/Apr/2024:11:18:02 +1000] "GET /wp-content/plugins/cookie-notice/js/front.min.js HTTP/1.1" 403 620 "-" "Go-http-client/1.1" paulshipley.id.au:443 42.202.17.126 - - [19/Apr/2024:11:18:02 +1000] "GET /wp-content/plugins/cookie-notice/js/front.min.js HTTP/1.1" 403 620 "-" "Go-http-client/1.1 ... show less	Web App Attack
🇨🇭 backslash	2024-04-17 10:00:13 UTC · (2 years ago)	block ruleset 43A7B4C84F1C495B355A170A3ABE0D75374A5E0D	Bad Web Bot
🇦🇺 MAGIC	2024-02-07 01:10:05 UTC · (2 years ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇴 181.78.21.107

🇨🇭 179.43.153.2

🇧🇷 177.74.153.10

🇩🇪 109.238.199.232

🇬🇧 103.52.9.82

🇪🇸 46.25.18.10

🇺🇦 37.53.186.50

🇧🇷 189.90.55.243

🇦🇷 181.25.129.77

🇮🇳 152.56.157.180

🇳🇱 109.160.32.35

🇻🇳 101.99.13.241

🇦🇺 34.40.145.110

🇺🇸 31.105.11.139

🇵🇰 203.99.53.94

🇬🇧 195.96.139.76

🇻🇪 186.14.120.115

🇺🇸 147.185.132.66

🇳🇱 109.160.32.30

🇲🇦 102.97.132.117