JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 42.201.192.40

42.201.192.40 was found in our database!

This IP was reported 80 times. Confidence of Abuse is 36%: ?

36%

ISP	Huawei-Cloud-HK
Usage Type	Data Center/Web Hosting/Transit
ASN	AS136907
Domain Name	huawei.com
Country	🇭🇰 Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 42.201.192.40

Whois 42.201.192.40

IP Abuse Reports for 42.201.192.40:

This IP address has been reported a total of 80 times from 8 distinct sources. 42.201.192.40 was first reported on May 17th 2026, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-08-28 20:22:18 (4 days ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.40 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 16:22:13.787261 2026] [security2:error] [pid 32088:tid 32088] [client 42.201.192.40:26868] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|vmbinc.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vmbinc.com"] [uri "/"] [unique_id "apHt9WtzvylyEJkjLjA7LAAAAAY"], referer: https://fashionclothingnews.com/all/3111/23.html show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-28 18:15:23 (4 days ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.40 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 14:15:15.562701 2026] [security2:error] [pid 32222:tid 32222] [client 42.201.192.40:13421] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|jbaydeliveries.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "jbaydeliveries.com"] [uri "/"] [unique_id "apHQM8z9XsQZgDI6PSt5TgAAAA0"], referer: https://dolphin-view.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-28 11:05:33 (4 days ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.40 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 07:05:28.837859 2026] [security2:error] [pid 9950:tid 9950] [client 42.201.192.40:37103] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|saudigreenrecyling.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "saudigreenrecyling.com"] [uri "/images"] [unique_id "apFreM2dt1uqgMxQCMlKUwAAABc"], referer: https://saudigreenrecyling.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-28 06:53:54 (4 days ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.40 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 02:53:47.364335 2026] [security2:error] [pid 7968:tid 7968] [client 42.201.192.40:22038] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|jasconius.org\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "jasconius.org"] [uri "/"] [unique_id "apEweygH8Zgab0QCq9IldQAAAAk"], referer: https://missburrg.com/all/386/12.html show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-27 11:10:26 (5 days ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.40 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 07:10:18.411006 2026] [security2:error] [pid 7704:tid 7704] [client 42.201.192.40:16979] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|montepulciano.org\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "montepulciano.org"] [uri "/"] [unique_id "apAbGiLEOPslGtPj41M57AAAAAk"], referer: https://montepulciano.org/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-27 08:11:31 (5 days ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.40 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 04:11:26.007099 2026] [security2:error] [pid 6701:tid 6701] [client 42.201.192.40:54178] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|sigi.biz\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "sigi.biz"] [uri "/"] [unique_id "ao_xLnXl5qh-qqeuRD55fwAAACg"], referer: https://sahammurah.com/all/2628/13.html show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-26 17:15:14 (6 days ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.40 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 13:15:08.637424 2026] [security2:error] [pid 32071:tid 32071] [client 42.201.192.40:22271] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|feministvoice.blog\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "feministvoice.blog"] [uri "/"] [unique_id "ao8fHOUbGL41iN3EmQdJEwAAAAs"], referer: https://fashionclothingnews.com/all/1049/9.html show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-26 09:45:36 (6 days ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.40 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 05:45:31.959483 2026] [security2:error] [pid 10037:tid 10037] [client 42.201.192.40:37243] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|silver-nm.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "silver-nm.com"] [uri "/"] [unique_id "ao61u4OCNCIHPobZJSplxQAAAAg"], referer: https://s-tribe.net/all/394/17.html show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 FireGuard Server	2026-08-26 05:30:07 (6 days ago)	Blocked by os-abuseipdb; 5 hits, proto=tcp, ports=443	Port Scan Hacking
🇺🇸 TPI-Abuse	2026-08-26 05:10:54 (6 days ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.40 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 01:10:48.457243 2026] [security2:error] [pid 3164279:tid 3164378] [client 42.201.192.40:55519] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|plumeraproductions.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "plumeraproductions.com"] [uri "/"] [unique_id "ao51WJ6_TRTe7k7y6zbHzAAAAEM"], referer: https://plumeraproductions.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-25 23:58:11 (1 week ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.40 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 19:58:04.550444 2026] [security2:error] [pid 19127:tid 19127] [client 42.201.192.40:35306] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|nealschon.global\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "nealschon.global"] [uri "/"] [unique_id "ao4sDCAWZwmGEVp2d9RJlwAAAAw"], referer: https://nealschon.global/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-25 06:02:18 (1 week ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.40 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 02:02:12.148707 2026] [security2:error] [pid 12713:tid 12713] [client 42.201.192.40:22267] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|rajabarber.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "rajabarber.com"] [uri "/"] [unique_id "ao0v5OX0ILPB8MICMyXQHQAAACA"], referer: https://rajabarber.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Jochen Pretli	2026-08-23 21:46:57 (1 week ago)	connection to honeypot	Email Spam Port Scan
🇺🇸 TPI-Abuse	2026-08-23 18:10:55 (1 week ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.40 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 23 14:10:49.702679 2026] [security2:error] [pid 25247:tid 25247] [client 42.201.192.40:32348] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.mosheimlib.org\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.mosheimlib.org"] [uri "/"] [unique_id "aos3qd_NGKFDEE5JCHr-4AAAAA4"], referer: https://mosheimlib.org/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-22 22:14:10 (1 week ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.40 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 18:14:03.193237 2026] [security2:error] [pid 4925:tid 4925] [client 42.201.192.40:33784] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|xtrl.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "xtrl.com"] [uri "/"] [unique_id "aoofK97j5DhpKCZdrc0q7QAAABE"], referer: https://xtrl.com/ show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 80 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 85.217.140.8

🇬🇧 5.252.83.173

🇺🇸 2600:3c03::2000:8cff:fe1a:4259

🇩🇪 213.209.159.208

🇺🇸 205.210.31.38

🇦🇱 185.89.157.197

🇮🇩 180.246.36.237

🇺🇸 172.203.212.141

🇻🇳 171.250.115.191

🇺🇸 162.216.149.190

🇫🇮 147.185.133.60

🇺🇸 130.131.220.95

🇻🇳 115.84.178.56

🇵🇰 110.38.15.222

🇮🇳 103.69.146.79

🇺🇸 91.230.168.241

🇩🇪 91.92.240.38

🇪🇸 80.102.218.187

🇺🇸 45.194.67.15

🇨🇳 36.250.73.3