JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 42.201.192.23

42.201.192.23 was found in our database!

This IP was reported 65 times. Confidence of Abuse is 28%: ?

28%

ISP	Huawei-Cloud-HK
Usage Type	Data Center/Web Hosting/Transit
ASN	AS136907
Domain Name	huawei.com
Country	🇭🇰 Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 42.201.192.23

Whois 42.201.192.23

IP Abuse Reports for 42.201.192.23:

This IP address has been reported a total of 65 times from 7 distinct sources. 42.201.192.23 was first reported on March 26th 2026, and the most recent report was 15 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-08-15 22:57:08 (15 hours ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.23 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 15 18:57:01.222117 2026] [security2:error] [pid 26958:tid 26958] [client 42.201.192.23:59242] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|starfrontiers.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "starfrontiers.com"] [uri "/"] [unique_id "aoDuvcQA0fb9Za5syezPYgAAAB8"], referer: https://starfrontiers.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-15 19:52:54 (18 hours ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.23 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 15 15:52:50.765220 2026] [security2:error] [pid 20963:tid 20963] [client 42.201.192.23:40440] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|styxwamworld.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "styxwamworld.com"] [uri "/"] [unique_id "aoDDko_A8kS0ESOWTCUd_wAAAAM"], referer: https://styxwamworld.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-15 05:16:07 (1 day ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.23 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 15 01:16:04.017131 2026] [security2:error] [pid 10067:tid 10067] [client 42.201.192.23:40636] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|femalegamblers.org\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "femalegamblers.org"] [uri "/contact"] [unique_id "an_2FFo72N1Y03OGilGcCQAAAAY"], referer: https://femalegamblers.org/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-14 03:01:55 (2 days ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.23 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 13 23:01:47.621270 2026] [security2:error] [pid 1134:tid 1134] [client 42.201.192.23:18651] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|glendaleheritage.org\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "glendaleheritage.org"] [uri "/memories"] [unique_id "an6FG8FtW9kox3a0wBNs2QAAAAs"], referer: https://glendaleheritage.org/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-11 22:08:31 (4 days ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.23 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 11 18:08:24.989433 2026] [security2:error] [pid 3667364:tid 3667364] [client 42.201.192.23:60839] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|compassionfatigue.org\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "compassionfatigue.org"] [uri "/uploads/1/3/7/9/137936581/cfap_thetenlaws_healthycaregiving.pdf"] [unique_id "anudWFdvUyMUF3Vez9AfdQAAAAM"], referer: https://compassionfatigue.org/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇦 1gz	2026-08-11 00:42:20 (5 days ago)	Triggered Cloudflare WAF (firewallCustom) from HK. Action taken: BLOCK Protocol: HTTP/2 (GET method) ... show more Triggered Cloudflare WAF (firewallCustom) from HK. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: /english/municipality-of-gostivar-work-continues-on-the-ground-to-restore-the-water-supply-system-to-normal/939344 UA: Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-08-10 11:53:54 (6 days ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.23 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 10 07:53:48.995411 2026] [security2:error] [pid 184765:tid 184833] [client 42.201.192.23:50574] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|agqo.org\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "agqo.org"] [uri "/"] [unique_id "anm7zFAbezwR3SUHFpAT4QAAAgE"], referer: https://agqo.org/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇦 1gz	2026-08-04 10:56:51 (1 week ago)	Triggered Cloudflare WAF (firewallCustom) from HK. Action taken: BLOCK Protocol: HTTP/2 (GET method) ... show more Triggered Cloudflare WAF (firewallCustom) from HK. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: /english/fuel-prices-rise-from-midnight-in-north-macedonia/947046 UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-08-02 05:38:36 (2 weeks ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.23 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 02 01:38:30.316446 2026] [security2:error] [pid 1195781:tid 1195781] [client 42.201.192.23:55651] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|stacyfarm.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "stacyfarm.com"] [uri "/history"] [unique_id "am7X1iQAD9QECIxNuMXrIgAAAAk"], referer: https://stacyfarm.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-31 04:24:45 (2 weeks ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.23 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 31 00:24:38.715220 2026] [security2:error] [pid 225542:tid 225542] [client 42.201.192.23:50599] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|waterspell.net\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "waterspell.net"] [uri "/books-and-readers/adverse-reactions-equal-parts-western-dystopian-and-paranormal"] [unique_id "amwjhgYfG0sKcN1S-gaGVwAAAAo"], referer: https://waterspell.net/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-30 06:39:09 (2 weeks ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.23 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 30 02:39:06.421211 2026] [security2:error] [pid 1904085:tid 1904085] [client 42.201.192.23:35256] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|studioarts.net\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "studioarts.net"] [uri "/"] [unique_id "amrxihB7n9B3Wxnrap_KVgAAAAg"], referer: https://studioarts.net/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-29 22:12:25 (2 weeks ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.23 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 29 18:12:19.965041 2026] [security2:error] [pid 509174:tid 509174] [client 42.201.192.23:30267] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|lertap5.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "lertap5.com"] [uri "/Documentation/ActivatingWindowsVersionsOfLertap5.pdf"] [unique_id "amp6w9PK2yZXtpTP_aokrgAAABI"], referer: http://lertap5.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-29 20:09:49 (2 weeks ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.23 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 29 16:09:43.916526 2026] [security2:error] [pid 3596845:tid 3596845] [client 42.201.192.23:10139] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|goldengatecorgis.org\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "goldengatecorgis.org"] [uri "/"] [unique_id "ampeBwXudJXf3mPNtKOigAAAAAU"], referer: https://goldengatecorgis.org/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-29 18:30:14 (2 weeks ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.23 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 29 14:30:08.439951 2026] [security2:error] [pid 29001:tid 29044] [client 42.201.192.23:13849] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|nothingwithoutwater.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "nothingwithoutwater.com"] [uri "/"] [unique_id "ampGsGBu3l7J9tFYG0h2DAAAAU0"], referer: https://nothingwithoutwater.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-29 15:52:06 (2 weeks ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.23 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 29 11:52:02.649450 2026] [security2:error] [pid 3394257:tid 3394257] [client 42.201.192.23:10408] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|isaacsonpaintings.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "isaacsonpaintings.com"] [uri "/paintingspages/the_wall.html"] [unique_id "amoholTD7GfbfSltEeHtOwAAAAI"], referer: https://isaacsonpaintings.com/ show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 65 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 97.74.87.152

🇱🇹 213.176.26.123

🇲🇽 187.222.69.11

🇨🇭 172.161.79.158

🇳🇬 154.120.89.81

🇫🇷 85.217.140.19

🇳🇱 45.148.10.183

🇵🇰 39.34.167.117

🇭🇰 20.24.67.246

🇧🇷 179.48.229.117

🇺🇸 172.245.213.201

🇺🇸 159.223.175.198

🇪🇬 154.177.108.44

🇺🇸 104.237.156.209

🇷🇺 90.151.171.109

🇱🇹 62.60.130.148

🇨🇳 36.106.167.216

🇺🇸 20.65.69.59

🇱🇹 213.176.26.182

🇱🇹 213.176.26.134