JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 42.236.17.100

42.236.17.100 was found in our database!

This IP was reported 124 times. Confidence of Abuse is 0%: ?

ISP	China Unicom Henan province network
Usage Type	Fixed Line ISP
ASN	AS4837
Hostname(s)	hn.kd.ny.adsl
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Zhengzhou, Henan

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 42.236.17.100

Whois 42.236.17.100

IP Abuse Reports for 42.236.17.100:

This IP address has been reported a total of 124 times from 23 distinct sources. 42.236.17.100 was first reported on January 17th 2022, and the most recent report was 6 months ago.

Old Reports: The most recent abuse report for this IP address is from 6 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 gnom4ik	2026-02-20 19:38:47 (6 months ago)	ban-reviewer auto report; ip=42.236.17.100; scenario=http:scan; verdict=valid_ban; confidence=0.85; ... show more ban-reviewer auto report; ip=42.236.17.100; scenario=http:scan; verdict=valid_ban; confidence=0.85; categories=14,15,18; active_decisions=1; lookback_decisions=1; nginx_requests=0; appsec_matches=0; auth_events=0; kernel_events=0; signals=scan/exploit pattern detected (http:scan); ip has active decisions total of 1; abuseipdb category includes port scan (14) and hacking (15) show less	Port Scan Hacking Brute-Force
🇨🇳 ThreatBook.io	2026-01-31 00:26:46 (6 months ago)	ThreatBook Intelligence: IDC more details on http://threatbook.io/ip/42.236.17.100 2026-01-30 17:46: ... show more ThreatBook Intelligence: IDC more details on http://threatbook.io/ip/42.236.17.100 2026-01-30 17:46:32 /group.html show less	Web App Attack
🇺🇸 TPI-Abuse	2026-01-29 09:52:10 (6 months ago)	(mod_security) mod_security (id:210831) triggered by 42.236.17.100 (hn.kd.ny.adsl): 1 in the last 30 ... show more (mod_security) mod_security (id:210831) triggered by 42.236.17.100 (hn.kd.ny.adsl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 29 04:52:06.152532 2026] [security2:error] [pid 968621:tid 968621] [client 42.236.17.100:14507] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.peaksalesnw.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.peaksalesnw.com"] [uri "/"] [unique_id "aXstxgMnmrfPFMSv0gWRUAAAAAE"], referer: http://www.peaksalesnw.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-01-29 09:02:45 (6 months ago)	(mod_security) mod_security (id:210831) triggered by 42.236.17.100 (hn.kd.ny.adsl): 1 in the last 30 ... show more (mod_security) mod_security (id:210831) triggered by 42.236.17.100 (hn.kd.ny.adsl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 29 04:02:39.180663 2026] [security2:error] [pid 23754:tid 23754] [client 42.236.17.100:21377] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|jiggaboojones.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "jiggaboojones.com"] [uri "/"] [unique_id "aXsiL_K1FqiDbWMMgIai6QAAABg"], referer: http://jiggaboojones.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-01-29 08:12:02 (6 months ago)	(mod_security) mod_security (id:210831) triggered by 42.236.17.100 (hn.kd.ny.adsl): 1 in the last 30 ... show more (mod_security) mod_security (id:210831) triggered by 42.236.17.100 (hn.kd.ny.adsl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 29 03:11:57.932259 2026] [security2:error] [pid 27356:tid 27424] [client 42.236.17.100:57304] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|kwainet.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "kwainet.com"] [uri "/"] [unique_id "aXsWTZUfT1B2RrjdjQ_15wAAAoU"], referer: http://kwainet.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 tecnicorioja	2026-01-28 23:00:18 (6 months ago)	(Mod_security)	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-10-12 05:57:13 (10 months ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 42.236.17.100 (CN/Ch ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 42.236.17.100 (CN/China/hn.kd.ny.adsl) show less	Bad Web Bot
🇨🇳 ThreatBook.io	2025-10-10 23:18:43 (10 months ago)	ThreatBook Intelligence: IDC more details on http://threatbook.io/ip/42.236.17.100 2025-10-10 00:37: ... show more ThreatBook Intelligence: IDC more details on http://threatbook.io/ip/42.236.17.100 2025-10-10 00:37:07 / 2025-10-10 21:39:49 /dfdfd show less	Web App Attack
🇩🇪 rh24	2025-10-09 08:34:40 (10 months ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 42.236.17.100 (CN/Ch ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 42.236.17.100 (CN/China/hn.kd.ny.adsl) show less	Bad Web Bot
🇨🇳 ThreatBook.io	2025-10-05 22:57:12 (10 months ago)	ThreatBook Intelligence: IDC more details on http://threatbook.io/ip/42.236.17.100 2025-10-05 14:38: ... show more ThreatBook Intelligence: IDC more details on http://threatbook.io/ip/42.236.17.100 2025-10-05 14:38:51 / show less	Web App Attack
🇩🇪 rh24	2025-10-01 06:11:07 (10 months ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 42.236.17.100 (CN/Ch ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 42.236.17.100 (CN/China/hn.kd.ny.adsl) show less	Bad Web Bot
🇮🇹 Progetto1	2025-09-11 15:13:02 (11 months ago)	Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇩🇪 rh24	2025-08-16 11:18:55 (1 year ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 42.236.17.100 (CN/Ch ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 42.236.17.100 (CN/China/hn.kd.ny.adsl) show less	Bad Web Bot
🇩🇪 Hazzard	2025-08-12 09:57:26 (1 year ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted])	Bad Web Bot
🇦🇺 MAGIC	2025-08-11 01:04:09 (1 year ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot

Showing 1 to 15 of 124 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2400:cb00:988:1000:adad:7496:a3f4:b804

🇨🇱 190.5.35.91

🇮🇩 182.23.83.98

🇺🇸 45.61.177.200

🇬🇧 35.203.211.91

🇺🇸 34.123.233.216

🇺🇦 31.28.172.207

🇦🇷 190.221.191.251

🇺🇸 172.202.9.120

🇩🇿 154.241.0.158

🇫🇮 147.185.133.138

🇬🇧 141.101.99.124

🇺🇸 136.112.193.102

🇳🇬 102.90.103.28

🇲🇾 47.250.162.17

🇸🇬 47.128.121.76

🇳🇱 45.148.10.141

🇳🇴 209.198.156.49

🇹🇼 198.235.24.122

🇵🇱 185.67.8.73