JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 42.201.192.41

42.201.192.41 was found in our database!

This IP was reported 62 times. Confidence of Abuse is 30%: ?

30%

ISP	Huawei-Cloud-HK
Usage Type	Data Center/Web Hosting/Transit
ASN	AS136907
Domain Name	huawei.com
Country	🇭🇰 Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 42.201.192.41

Whois 42.201.192.41

IP Abuse Reports for 42.201.192.41:

This IP address has been reported a total of 62 times from 6 distinct sources. 42.201.192.41 was first reported on May 12th 2026, and the most recent report was 14 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-08-12 05:56:37 (14 hours ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.41 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 12 01:56:31.752188 2026] [security2:error] [pid 29929:tid 29956] [client 42.201.192.41:45528] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|tnccivic.org\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "tnccivic.org"] [uri "/notification-of-zoning-requests"] [unique_id "anwLD3KdP8Ev0CNeHsuz5QAAARg"], referer: https://tnccivic.org/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇦 1gz	2026-08-11 00:20:58 (1 day ago)	Triggered Cloudflare WAF (firewallCustom) from HK. Action taken: BLOCK Protocol: HTTP/2 (GET method) ... show more Triggered Cloudflare WAF (firewallCustom) from HK. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: /english/dushi-on-the-votes-to-oust-abdixhiku-lets-see-if-we-have-them/950919 UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.6668.59 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-08-10 13:12:17 (2 days ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.41 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 10 09:12:09.186400 2026] [security2:error] [pid 2041030:tid 2041030] [client 42.201.192.41:44055] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|tigerpathteam.org\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "tigerpathteam.org"] [uri "/about/"] [unique_id "annOKfa7CFtypAhz-ixZFAAAAAs"], referer: https://tigerpathteam.org/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-10 09:16:39 (2 days ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.41 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 10 05:16:35.776825 2026] [security2:error] [pid 2051852:tid 2051852] [client 42.201.192.41:25176] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|rockinr.org\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "rockinr.org"] [uri "/2017/07"] [unique_id "anmW870ha9HfDjwzsZ8HPQAAAAM"], referer: https://rockinr.org/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇦 1gz	2026-08-10 00:31:16 (2 days ago)	Triggered Cloudflare WAF (firewallCustom) from HK. Action taken: BLOCK Protocol: HTTP/2 (GET method) ... show more Triggered Cloudflare WAF (firewallCustom) from HK. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: /english/typhoon-dolphin-hits-asia-over-1300-flights-canceled-and-more-than-400000-residents-evacuated/963902 UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-08-09 22:13:26 (2 days ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.41 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 09 18:13:19.869808 2026] [security2:error] [pid 3029:tid 3029] [client 42.201.192.41:15321] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.investorscalifornia.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.investorscalifornia.com"] [uri "/private-money-lenders-in-california/"] [unique_id "anj7f2KOxtFQmdof7-DmQQAAABo"], referer: https://investorscalifornia.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-09 01:55:17 (3 days ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.41 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 08 21:55:10.139310 2026] [security2:error] [pid 6963:tid 6963] [client 42.201.192.41:43647] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|ouzcorp.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "ouzcorp.com"] [uri "/cgi-bin"] [unique_id "anfd_tNWeySFhMP53i3jfQAAABM"], referer: https://ouzcorp.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-08 10:53:33 (4 days ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.41 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 08 06:53:26.542739 2026] [security2:error] [pid 25699:tid 25699] [client 42.201.192.41:38604] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.circleofsound.org\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.circleofsound.org"] [uri "/"] [unique_id "ancKprrZgxX3_QWdnd1JzwAAAAQ"], referer: https://circleofsound.org/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-07 14:13:37 (5 days ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.41 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 07 10:13:31.644382 2026] [security2:error] [pid 1852329:tid 1852329] [client 42.201.192.41:30241] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|jamesmsmall.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "jamesmsmall.com"] [uri "/blog/2016/05"] [unique_id "anXoC22c-5aj4AAuUf5-DAAAAAc"], referer: https://jamesmsmall.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-05 08:59:11 (1 week ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.41 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 05 04:59:06.482968 2026] [security2:error] [pid 3378908:tid 3378908] [client 42.201.192.41:10342] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|srosa.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "srosa.com"] [uri "/contact"] [unique_id "anL7Wglkd9JEcryLEwx-vQAAABQ"], referer: https://srosa.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇦 1gz	2026-08-03 07:26:03 (1 week ago)	Triggered Cloudflare WAF (firewallCustom) from HK. Action taken: BLOCK Protocol: HTTP/2 (GET method) ... show more Triggered Cloudflare WAF (firewallCustom) from HK. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: /english/kellici-denounces-500-million-dollars-of-taxpayers-money-went-to-the-new-justice-system-but-major-scandals-remain-uninvestigated/943144 UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-08-01 20:54:39 (1 week ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.41 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 16:54:33.296270 2026] [security2:error] [pid 743344:tid 743344] [client 42.201.192.41:27070] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|stthomastrainer.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "stthomastrainer.com"] [uri "/"] [unique_id "am5dCZYhIqrdASXiFdtPDwAAAAA"], referer: https://stthomastrainer.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-31 13:36:34 (1 week ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.41 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 31 09:36:28.540344 2026] [security2:error] [pid 14280:tid 14280] [client 42.201.192.41:35521] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.siouxfallslimos.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.siouxfallslimos.com"] [uri "/403.shtml"] [unique_id "amyk3MthAOVbWjxiN9KGnwAAAB4"], referer: https://siouxfallslimos.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇦 1gz	2026-07-31 11:33:17 (1 week ago)	Triggered Cloudflare WAF (firewallCustom) from HK. Action taken: BLOCK Protocol: HTTP/2 (GET method) ... show more Triggered Cloudflare WAF (firewallCustom) from HK. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: /maqedoni/shasivari-dhe-ambasadori-qehaja-diskutojne-forcimin-e-bashkepunimit-ne-drejtesi-dhe-reforma/944249 UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.6668.59 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-29 19:39:08 (2 weeks ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.41 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 29 15:39:01.916678 2026] [security2:error] [pid 1301:tid 1328] [client 42.201.192.41:15304] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|businesscertification.org\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "businesscertification.org"] [uri "/legalresearch/burkina.html"] [unique_id "ampW1d4p-fgnxWV4UgSjGgAAANg"], referer: https://businesscertification.org/ show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 62 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 220.86.129.106

🇰🇪 197.248.8.33

🇧🇴 190.129.122.185

🇲🇽 187.190.153.108

🇷🇺 93.171.181.175

🇳🇱 81.19.216.90

🇮🇳 20.40.44.6

🇧🇷 187.78.175.11

🇺🇸 174.138.44.8

🇱🇾 156.38.49.200

🇨🇳 116.179.37.148

🇺🇸 96.126.139.103

🇺🇸 96.126.139.2

🇺🇸 85.89.212.201

🇷🇴 80.94.92.179

🇩🇪 69.5.169.110

🇺🇸 24.127.127.9

🇩🇪 20.113.142.140

🇮🇹 4.232.151.198

🇧🇷 187.94.33.183