JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 42.201.192.38

42.201.192.38 was found in our database!

This IP was reported 67 times. Confidence of Abuse is 34%: ?

34%

ISP	Huawei-Cloud-HK
Usage Type	Data Center/Web Hosting/Transit
ASN	AS136907
Domain Name	huawei.com
Country	🇭🇰 Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 42.201.192.38

Whois 42.201.192.38

IP Abuse Reports for 42.201.192.38:

This IP address has been reported a total of 67 times from 8 distinct sources. 42.201.192.38 was first reported on May 17th 2026, and the most recent report was 6 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-08-22 23:19:52 (6 hours ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.38 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 19:19:44.795843 2026] [security2:error] [pid 11650:tid 11650] [client 42.201.192.38:36923] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|enriquelaw.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "enriquelaw.com"] [uri "/"] [unique_id "aooukMB2OeZKwLd0vMS2WwAAAA8"], referer: https://enriquelaw.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-22 21:22:43 (7 hours ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.38 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 17:22:36.333743 2026] [security2:error] [pid 8101:tid 8101] [client 42.201.192.38:35359] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|garanta.co\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "garanta.co"] [uri "/"] [unique_id "aooTHOZ0BaquFVtdOFHLYwAAAA4"], referer: https://garanta.co/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-22 17:31:12 (11 hours ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.38 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 13:31:06.958671 2026] [security2:error] [pid 22116:tid 22116] [client 42.201.192.38:45489] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|deborahbein.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "deborahbein.com"] [uri "/"] [unique_id "aonc2iWyjrA3PsJ2X2rTFQAAAAk"], referer: https://dianewrightquilts.blogspot.com/2016/01/yep-yaksilk-roving.html show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-22 08:38:15 (20 hours ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.38 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 04:38:11.439159 2026] [security2:error] [pid 21464:tid 21560] [client 42.201.192.38:25614] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|certificationwiki.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "certificationwiki.com"] [uri "/"] [unique_id "aolf83iOQyS5w3Zr7VR0fgAAAhA"], referer: https://certificationwiki.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-21 16:17:52 (1 day ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.38 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 21 12:17:48.067364 2026] [security2:error] [pid 13295:tid 13295] [client 42.201.192.38:43754] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|circulodesonido.org\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "circulodesonido.org"] [uri "/contactenos"] [unique_id "aoh6LBJDsAiNzpKWudzwNQAAABA"], referer: https://circulodesonido.org/ show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-08-18 05:42:36 (4 days ago)	Web application attack detected.	Web App Attack
🇺🇸 TPI-Abuse	2026-08-17 21:28:48 (5 days ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.38 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 17:28:41.998291 2026] [security2:error] [pid 11000:tid 11000] [client 42.201.192.38:52533] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|koidivision.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "koidivision.com"] [uri "/"] [unique_id "aoN9CerAiyt0_I7lOw8D7wAAAAI"], referer: https://koidivision.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-17 20:03:40 (5 days ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.38 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 16:03:37.458872 2026] [security2:error] [pid 4691:tid 4691] [client 42.201.192.38:21890] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|certifiedfarmersmarkets.org\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "certifiedfarmersmarkets.org"] [uri "/"] [unique_id "aoNpGdgl-pNQDJ8s8VBvYgAAAA4"], referer: https://certifiedfarmersmarkets.org/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-17 14:04:09 (5 days ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.38 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 10:04:02.459905 2026] [security2:error] [pid 1757:tid 1775] [client 42.201.192.38:43776] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|credit-protector.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "credit-protector.com"] [uri "/"] [unique_id "aoMU0sWbsGkYetj0Xd2tbAAAAMc"], referer: https://credit-protector.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-17 05:56:36 (5 days ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.38 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 01:56:31.018252 2026] [security2:error] [pid 15669:tid 15669] [client 42.201.192.38:25350] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|jmgrigg.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "jmgrigg.com"] [uri "/"] [unique_id "aoKij4w3ciC4cX6qTR-irwAAABc"], referer: https://jmgrigg.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-17 02:25:30 (6 days ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.38 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 16 22:25:24.051440 2026] [security2:error] [pid 9324:tid 9324] [client 42.201.192.38:43938] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|barrykrueger.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "barrykrueger.com"] [uri "/"] [unique_id "aoJxFBQroshzx5osr_ocngAAAAE"], referer: https://barrykrueger.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-16 19:41:39 (6 days ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.38 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 16 15:41:34.037785 2026] [security2:error] [pid 30489:tid 30489] [client 42.201.192.38:42037] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|mosherpit.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "mosherpit.com"] [uri "/"] [unique_id "aoISbiEJKOFpRezatZ4cTgAAAAY"], referer: https://mosherpit.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-16 19:20:31 (6 days ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.38 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 16 15:20:25.710163 2026] [security2:error] [pid 19625:tid 19625] [client 42.201.192.38:53909] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|dipseanet.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dipseanet.com"] [uri "/"] [unique_id "aoINeSxM7iOSlDpRhh2FHwAAABw"], referer: https://dipseanet.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-16 17:14:02 (6 days ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.38 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 16 13:13:54.349151 2026] [security2:error] [pid 3645:tid 3645] [client 42.201.192.38:27221] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|rachel-heiko.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "rachel-heiko.com"] [uri "/"] [unique_id "aoHv0hXXCUfVdfcRfJOGswAAAAY"], referer: https://rachel-heiko.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-16 16:15:31 (6 days ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.38 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 16 12:15:27.207843 2026] [security2:error] [pid 840666:tid 840666] [client 42.201.192.38:43644] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|catholicshopper.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "catholicshopper.com"] [uri "/"] [unique_id "aoHiH03_qWfE0gMkLH9-RgAAAAE"], referer: https://catholicshopper.com/ show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 67 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇴 190.129.22.145

🇯🇵 46.250.254.226

🇮🇷 217.60.255.130

🇹🇼 198.235.24.115

🇩🇪 167.94.146.40

🇺🇸 147.182.254.196

🇺🇸 142.93.55.142

🇳🇱 91.92.40.31

🇫🇷 88.175.148.120

🇺🇸 52.33.236.33

🇸🇬 47.84.135.151

🇳🇱 45.148.10.141

🇧🇪 35.205.24.245

🇫🇷 2400:cb00:533:1000:78ed:bca0:e87d:de2f

🇨🇳 219.82.2.10

🇨🇳 218.72.8.20

🇭🇰 199.45.155.73

🇺🇸 198.199.65.168

🇺🇸 162.216.149.239

🇨🇳 118.81.199.1