🇨🇳
ThreatBook.io
2026-01-30 01:59:28
(5 months ago)
ThreatBook Intelligence: IDC more details on http://threatbook.io/ip/42.236.17.48
2026-01-29 00:51:5 ...
show more
ThreatBook Intelligence: IDC more details on http://threatbook.io/ip/42.236.17.48
2026-01-29 00:51:55 /
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-01-29 09:40:29
(5 months ago)
(mod_security) mod_security (id:210831) triggered by 42.236.17.48 (hn.kd.ny.adsl): 1 in the last 300 ...
show more
(mod_security) mod_security (id:210831) triggered by 42.236.17.48 (hn.kd.ny.adsl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 29 04:40:23.498395 2026] [security2:error] [pid 3669135:tid 3669135] [client 42.236.17.48:51499] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||troop9weymouth.com|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "troop9weymouth.com"] [uri "/"] [unique_id "aXsrB7TBKuy0LmDfiROvYgAAABE"], referer: https://troop9weymouth.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-29 09:23:10
(5 months ago)
(mod_security) mod_security (id:210831) triggered by 42.236.17.48 (hn.kd.ny.adsl): 1 in the last 300 ...
show more
(mod_security) mod_security (id:210831) triggered by 42.236.17.48 (hn.kd.ny.adsl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 29 04:23:05.492524 2026] [security2:error] [pid 16131:tid 16131] [client 42.236.17.48:31865] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.susanoneill.us|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.susanoneill.us"] [uri "/"] [unique_id "aXsm-XinfNgELAIfXmSUkwAAAA4"], referer: https://www.susanoneill.us/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-29 09:00:10
(5 months ago)
(mod_security) mod_security (id:210831) triggered by 42.236.17.48 (hn.kd.ny.adsl): 1 in the last 300 ...
show more
(mod_security) mod_security (id:210831) triggered by 42.236.17.48 (hn.kd.ny.adsl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 29 04:00:02.028562 2026] [security2:error] [pid 663619:tid 663619] [client 42.236.17.48:12885] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||powerlinemagazine.com|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "powerlinemagazine.com"] [uri "/"] [unique_id "aXshkqCt81ldazrj-XdL6gAAAAQ"], referer: http://powerlinemagazine.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-28 10:57:05
(5 months ago)
(mod_security) mod_security (id:210831) triggered by 42.236.17.48 (hn.kd.ny.adsl): 1 in the last 300 ...
show more
(mod_security) mod_security (id:210831) triggered by 42.236.17.48 (hn.kd.ny.adsl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jan 28 05:56:57.699544 2026] [security2:error] [pid 18950:tid 18950] [client 42.236.17.48:40023] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.turtle-trap.com|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.turtle-trap.com"] [uri "/"] [unique_id "aXnrebtTnhw6A-squEiRMQAAAAQ"], referer: http://www.turtle-trap.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-28 05:09:08
(5 months ago)
(mod_security) mod_security (id:210831) triggered by 42.236.17.48 (hn.kd.ny.adsl): 1 in the last 300 ...
show more
(mod_security) mod_security (id:210831) triggered by 42.236.17.48 (hn.kd.ny.adsl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jan 28 00:09:04.467145 2026] [security2:error] [pid 2857:tid 2857] [client 42.236.17.48:63639] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.praiseworthy.info|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.praiseworthy.info"] [uri "/"] [unique_id "aXmZ8PHWyPof9deCKYOWNQAAABY"], referer: http://www.praiseworthy.info/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-26 20:33:39
(5 months ago)
(mod_security) mod_security (id:210831) triggered by 42.236.17.48 (hn.kd.ny.adsl): 1 in the last 300 ...
show more
(mod_security) mod_security (id:210831) triggered by 42.236.17.48 (hn.kd.ny.adsl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 26 15:33:31.749087 2026] [security2:error] [pid 27362:tid 27362] [client 42.236.17.48:23257] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.cortona.ws|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.cortona.ws"] [uri "/index.html"] [unique_id "aXfPm-6CyAx4XOB0sDKTQQAAAAs"], referer: http://www.cortona.ws/index.html
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇳
ThreatBook.io
2025-10-19 23:49:12
(9 months ago)
ThreatBook Intelligence: IDC more details on http://threatbook.io/ip/42.236.17.48
2025-10-19 13:41:1 ...
show more
ThreatBook Intelligence: IDC more details on http://threatbook.io/ip/42.236.17.48
2025-10-19 13:41:12 /
show less
Web App Attack
🇩🇪
rh24
2025-10-12 10:37:10
(9 months ago)
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 42.236.17.48 (CN/Chi ...
show more
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 42.236.17.48 (CN/China/hn.kd.ny.adsl)
show less
Bad Web Bot
🇩🇪
rh24
2025-10-11 06:22:24
(9 months ago)
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 42.236.17.48 (CN/Chi ...
show more
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 42.236.17.48 (CN/China/hn.kd.ny.adsl)
show less
Bad Web Bot
2025-09-25 10:32:48
(10 months ago)
Excessive crawling/scraping
Hacking
Brute-Force
🇩🇪
Hazzard
2025-09-23 07:45:39
(10 months ago)
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 42.236.17.48 (CN/Chi ...
show more
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 42.236.17.48 (CN/China/hn.kd.ny.adsl)
show less
Bad Web Bot
🇩🇪
Hazzard
2025-08-31 08:47:22
(10 months ago)
(apache-useragents) Failed apache-useragents trigger with match [redacted])
Bad Web Bot
🇳🇱
i-turnradio.nl
2025-08-17 09:46:06
(11 months ago)
2025-08-17 @ 11:46:06 (CET) ~ Blocked based on risk assessment and prior abuse reports
Web App Attack
🇮🇹
Progetto1
2025-07-25 09:34:02
(1 year ago)
Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack