JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 42.201.192.3

42.201.192.3 was found in our database!

This IP was reported 69 times. Confidence of Abuse is 31%: ?

31%

ISP	Huawei-Cloud-HK
Usage Type	Data Center/Web Hosting/Transit
ASN	AS136907
Domain Name	huawei.com
Country	🇭🇰 Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 42.201.192.3

Whois 42.201.192.3

IP Abuse Reports for 42.201.192.3:

This IP address has been reported a total of 69 times from 7 distinct sources. 42.201.192.3 was first reported on March 21st 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-08-18 03:58:27 (1 hour ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.3 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 23:58:19.278330 2026] [security2:error] [pid 32265:tid 32265] [client 42.201.192.3:13394] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|xcarsubscription.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "xcarsubscription.com"] [uri "/"] [unique_id "aoPYW59vSzrFrv46ZjLLzAAAADg"], referer: https://xcarsubscription.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-18 00:46:41 (4 hours ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.3 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 20:46:33.940637 2026] [security2:error] [pid 17530:tid 17530] [client 42.201.192.3:53919] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|infojeffreysbay.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "infojeffreysbay.com"] [uri "/"] [unique_id "aoOraZw8OoBxK3LUw0zjwQAAAAE"], referer: https://infojeffreysbay.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-17 16:39:07 (13 hours ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.3 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 12:39:01.526350 2026] [security2:error] [pid 19950:tid 19950] [client 42.201.192.3:28758] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|jcrluthier.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "jcrluthier.com"] [uri "/"] [unique_id "aoM5JegDCazV9ZWwwPY5_QAAAAo"], referer: https://jcrluthier.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-17 08:53:49 (20 hours ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.3 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 04:53:42.622924 2026] [security2:error] [pid 32649:tid 340] [client 42.201.192.3:59012] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|certificationwiki.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "certificationwiki.com"] [uri "/been_worried_by_frequent_ringing_in_ears_"] [unique_id "aoLMFrpoc6uu1DXf-7W6-QAAAIc"], referer: https://certificationwiki.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-17 06:51:48 (22 hours ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.3 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 02:51:43.304301 2026] [security2:error] [pid 14910:tid 14910] [client 42.201.192.3:11757] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|kelvinlouie.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "kelvinlouie.com"] [uri "/"] [unique_id "aoKvf7RgzSm06Bck-wlrFQAAAAY"], referer: https://kelvinlouie.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-16 23:12:18 (1 day ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.3 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 16 19:12:14.788806 2026] [security2:error] [pid 29260:tid 29260] [client 42.201.192.3:17024] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|pharmaceuticalsalescertifications.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pharmaceuticalsalescertifications.com"] [uri "/the-value-of-certifications"] [unique_id "aoJDzpWRtNf7ShRwX7gg-gAAAAU"], referer: https://pharmaceuticalsalescertifications.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-16 14:54:20 (1 day ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.3 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 16 10:54:15.452992 2026] [security2:error] [pid 2405:tid 2405] [client 42.201.192.3:20564] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|thewhitedfamily.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "thewhitedfamily.com"] [uri "/"] [unique_id "aoHPF4KzRZepMOBDFmugyAAAAAQ"], referer: https://thewhitedfamily.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-15 20:41:41 (2 days ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.3 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 15 16:41:37.058267 2026] [security2:error] [pid 2854:tid 2854] [client 42.201.192.3:31878] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|mastersonsmotel.ca\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "mastersonsmotel.ca"] [uri "/index.html"] [unique_id "aoDPAShIBGvwgG70kl7B-QAAAAc"], referer: https://mastersonsmotel.ca/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-15 15:04:58 (2 days ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.3 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 15 11:04:53.810817 2026] [security2:error] [pid 32267:tid 32267] [client 42.201.192.3:10250] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|midwayisland.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "midwayisland.com"] [uri "/"] [unique_id "aoCAFWnI8jGNSztQv5t1YgAAACI"], referer: https://midwayisland.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-15 01:38:09 (3 days ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.3 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 14 21:38:03.122245 2026] [security2:error] [pid 18481:tid 18504] [client 42.201.192.3:35437] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|gryphix.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gryphix.com"] [uri "/"] [unique_id "an_C-8zILmZlqQ8PY4ixfQAAABU"], referer: https://gryphix.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-13 11:05:25 (4 days ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.3 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 13 07:05:21.878818 2026] [security2:error] [pid 3122:tid 3122] [client 42.201.192.3:48795] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.clcmillvale.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.clcmillvale.com"] [uri "/wp-content/uploads/2020/02/Mighty-to-Save.pdf"] [unique_id "an2k8ST5njW9XAK2k4X10gAAAAA"], referer: https://www.clcmillvale.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-08 18:54:11 (1 week ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.3 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 08 14:54:02.798441 2026] [security2:error] [pid 2354267:tid 2354267] [client 42.201.192.3:42156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|timetemple.org\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "timetemple.org"] [uri "/about"] [unique_id "and7Si-XPve1TOdnBi9JGQAAABo"], referer: https://timetemple.org/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-07 21:35:38 (1 week ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.3 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 07 17:35:33.983124 2026] [security2:error] [pid 2479065:tid 2479065] [client 42.201.192.3:58952] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.mavikalem.org\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.mavikalem.org"] [uri "/kitapciklar/"] [unique_id "anZPpYlgkReEqArSnxOUMQAAAAw"], referer: https://mavikalem.org/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-07 14:58:09 (1 week ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.3 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 07 10:58:04.231975 2026] [security2:error] [pid 2726624:tid 2726624] [client 42.201.192.3:50805] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|spirits66.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "spirits66.com"] [uri "/"] [unique_id "anXyfLl3lK5F0rgd1XBJgAAAAAw"], referer: https://spirits66.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇦 1gz	2026-08-03 03:51:51 (2 weeks ago)	Triggered Cloudflare WAF (firewallCustom) from HK. Action taken: BLOCK Protocol: HTTP/2 (GET method) ... show more Triggered Cloudflare WAF (firewallCustom) from HK. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: /english/rule-of-law-does-not-recognize-ethnic-belonging-clear-message-after-tensions-over-demolitions-in-ujman/943243 UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot

Showing 1 to 15 of 69 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 205.210.31.55

🇺🇸 195.184.76.116

🇺🇸 195.184.76.59

🇷🇴 193.32.162.84

🇺🇸 172.217.36.91

🇺🇸 148.153.56.174

🇵🇭 139.135.241.24

🇺🇸 104.152.52.213

🇺🇸 52.188.191.193

🇧🇷 177.118.53.242

🇺🇸 172.202.39.151

🇪🇸 170.253.35.26

🇺🇸 162.214.96.231

🇧🇩 103.127.84.251

🇨🇮 102.209.221.190

🇺🇸 97.83.131.185

🇫🇷 91.231.89.133

🇩🇪 69.5.169.78

🇹🇼 61.222.86.239

🇬🇭 41.204.63.118