JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 42.236.101.194

42.236.101.194 was found in our database!

This IP was reported 154 times. Confidence of Abuse is 0%: ?

ISP	China Unicom Henan province network
Usage Type	Fixed Line ISP
ASN	AS4837
Hostname(s)	hn.kd.ny.adsl
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Zhengzhou, Henan

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 42.236.101.194

Whois 42.236.101.194

IP Abuse Reports for 42.236.101.194:

This IP address has been reported a total of 154 times from 32 distinct sources. 42.236.101.194 was first reported on January 19th 2022, and the most recent report was 4 months ago.

Old Reports: The most recent abuse report for this IP address is from 4 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 gnom4ik	2026-02-20 19:57:31 (4 months ago)	ban-reviewer auto report; ip=42.236.101.194; scenario=http:scan; verdict=valid_ban; confidence=0.85; ... show more ban-reviewer auto report; ip=42.236.101.194; scenario=http:scan; verdict=valid_ban; confidence=0.85; categories=14,15,18; active_decisions=1; lookback_decisions=1; nginx_requests=0; appsec_matches=0; auth_events=0; kernel_events=0; signals=IP flagged for HTTP scanning activity (scenario: http:scan); Decision was made by CAPI with a 7980 minute duration (nearly 6 days); IP has no active decisions in the lookback window but shows a single decision in the total count, suggesting it's a new or r show less	Port Scan Hacking Brute-Force
🇺🇸 TPI-Abuse	2026-01-31 02:22:20 (5 months ago)	(mod_security) mod_security (id:210831) triggered by 42.236.101.194 (hn.kd.ny.adsl): 1 in the last 3 ... show more (mod_security) mod_security (id:210831) triggered by 42.236.101.194 (hn.kd.ny.adsl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 30 21:22:14.058521 2026] [security2:error] [pid 458877:tid 458877] [client 42.236.101.194:32684] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|kotelbarmitzvah.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "kotelbarmitzvah.com"] [uri "/"] [unique_id "aX1nVkZrdBPEj_rQVGUbkgAAACk"], referer: https://kotelbarmitzvah.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-01-29 14:30:53 (5 months ago)	(mod_security) mod_security (id:210831) triggered by 42.236.101.194 (hn.kd.ny.adsl): 1 in the last 3 ... show more (mod_security) mod_security (id:210831) triggered by 42.236.101.194 (hn.kd.ny.adsl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 29 09:30:47.508963 2026] [security2:error] [pid 4010:tid 4037] [client 42.236.101.194:49559] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|360degreevalue.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "360degreevalue.com"] [uri "/"] [unique_id "aXtvFytTV0RS_-EtqukniAAAAE0"], referer: http://360degreevalue.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 rh24	2026-01-29 08:21:40 (5 months ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 42.236.101.194 (CN/C ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 42.236.101.194 (CN/China/hn.kd.ny.adsl) show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-01-29 07:46:58 (5 months ago)	(mod_security) mod_security (id:210831) triggered by 42.236.101.194 (hn.kd.ny.adsl): 1 in the last 3 ... show more (mod_security) mod_security (id:210831) triggered by 42.236.101.194 (hn.kd.ny.adsl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 29 02:46:52.958372 2026] [security2:error] [pid 31822:tid 31822] [client 42.236.101.194:8908] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|statisticsbook.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "statisticsbook.com"] [uri "/"] [unique_id "aXsQbOLquCsBcYcf2r6LmwAAAAk"], referer: http://statisticsbook.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-01-27 05:37:50 (5 months ago)	Multiple WAF Violations	Web App Attack
Anonymous	2025-10-19 10:49:48 (8 months ago)	Excessive crawling/scraping	Hacking Brute-Force
🇩🇪 rh24	2025-10-16 10:47:47 (8 months ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 42.236.101.194 (CN/C ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 42.236.101.194 (CN/China/hn.kd.ny.adsl) show less	Bad Web Bot
🇩🇪 rh24	2025-10-05 07:21:20 (8 months ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 42.236.101.194 (CN/C ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 42.236.101.194 (CN/China/hn.kd.ny.adsl) show less	Bad Web Bot
Anonymous	2025-09-28 12:16:06 (9 months ago)	Excessive crawling/scraping	Hacking Brute-Force
🇺🇸 TPI-Abuse	2025-09-25 11:48:08 (9 months ago)	(mod_security) mod_security (id:243420) triggered by 42.236.101.194 (hn.kd.ny.adsl): 1 in the last 3 ... show more (mod_security) mod_security (id:243420) triggered by 42.236.101.194 (hn.kd.ny.adsl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 25 07:48:02.807089 2025] [security2:error] [pid 30198:tid 30198] [client 42.236.101.194:17923] ModSecurity: Access denied with code 403 (phase 3). Match of "validateByteRange 0-31" against "REQUEST_HEADERS:Cookie" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "6640"] [id "243420"] [rev "4"] [msg "COMODO WAF: Information disclosure vulnerability in Eclipse Jetty before 9.2.9.v20150224 (CVE-2015-2080)\|\|www.iclpost.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.iclpost.com"] [uri "/index.php"] [unique_id "aNUr8WZ6p3Ly-hoGlFLXFAAAABM"], referer: https://www.iclpost.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 rh24	2025-09-19 11:05:29 (9 months ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 42.236.101.194 (CN/C ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 42.236.101.194 (CN/China/hn.kd.ny.adsl) show less	Bad Web Bot
🇩🇪 rh24	2025-09-18 10:41:17 (9 months ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 42.236.101.194 (CN/C ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 42.236.101.194 (CN/China/hn.kd.ny.adsl) show less	Bad Web Bot
🇩🇪 Hazzard	2025-09-03 07:23:54 (9 months ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted])	Bad Web Bot
🇩🇪 rh24	2025-08-07 15:54:05 (10 months ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 42.236.101.194 (CN/C ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 42.236.101.194 (CN/China/hn.kd.ny.adsl) show less	Bad Web Bot

Showing 1 to 15 of 154 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 194.126.179.165

🇩🇪 2620:0:cc7::55

🇱🇰 220.247.224.226

🇳🇱 209.38.46.66

🇳🇱 209.38.45.178

🇧🇷 200.223.68.34

🇸🇬 185.200.116.67

🇨🇦 184.107.95.45

🇩🇪 158.101.161.27

🇺🇸 149.22.80.7

🇬🇧 149.13.200.36

🇩🇪 134.209.245.69

🇨🇳 116.63.245.187

🇩🇪 92.50.89.157

🇳🇱 209.38.42.100

🇳🇱 209.38.32.216

🇳🇱 204.76.203.219

🇨🇱 190.110.164.254

🇮🇳 150.129.28.57

🇨🇳 112.123.59.108