JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 42.201.192.57

42.201.192.57 was found in our database!

This IP was reported 72 times. Confidence of Abuse is 40%: ?

40%

ISP	Huawei-Cloud-HK
Usage Type	Data Center/Web Hosting/Transit
ASN	AS136907
Domain Name	huawei.com
Country	🇭🇰 Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 42.201.192.57

Whois 42.201.192.57

IP Abuse Reports for 42.201.192.57:

This IP address has been reported a total of 72 times from 9 distinct sources. 42.201.192.57 was first reported on April 27th 2026, and the most recent report was 10 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-08-18 03:09:45 (10 hours ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.57 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 23:09:40.514361 2026] [security2:error] [pid 23185:tid 23185] [client 42.201.192.57:27062] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|livingminimal.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "livingminimal.com"] [uri "/"] [unique_id "aoPM9CQqRHLz6HnE4G3WHAAAAAk"], referer: https://livingminimal.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-17 23:13:14 (14 hours ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.57 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 19:13:07.723519 2026] [security2:error] [pid 24692:tid 24692] [client 42.201.192.57:45736] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|midwayisland.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "midwayisland.com"] [uri "/"] [unique_id "aoOVg7QdT8bJRWZ9O9NQXAAAAAM"], referer: https://midwayisland.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-17 22:39:29 (14 hours ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.57 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 18:39:22.374737 2026] [security2:error] [pid 9873:tid 9876] [client 42.201.192.57:57145] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|8mm-stockfootage.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "8mm-stockfootage.com"] [uri "/"] [unique_id "aoONmrvgdR1owrjrnzH2VAAAAME"], referer: https://8mm-stockfootage.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-17 15:37:09 (22 hours ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.57 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 11:37:02.346012 2026] [security2:error] [pid 6088:tid 6099] [client 42.201.192.57:42169] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|annybelle.org\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "annybelle.org"] [uri "/"] [unique_id "aoMqnsnU-V4_ly2mWgiASAAAAIk"], referer: https://annybelle.org/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-17 12:28:19 (1 day ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.57 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 08:28:15.005247 2026] [security2:error] [pid 16059:tid 16059] [client 42.201.192.57:20349] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.circleofsound.org\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.circleofsound.org"] [uri "/ceremonies/"] [unique_id "aoL-XzDgaESOJy0fg5e1HQAAABU"], referer: https://circleofsound.org/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-17 09:28:05 (1 day ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.57 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 05:28:00.344438 2026] [security2:error] [pid 27076:tid 27076] [client 42.201.192.57:17034] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|yogitunes.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "yogitunes.com"] [uri "/"] [unique_id "aoLUIEwiJJl7BTa3IPa-hwAAAAc"], referer: https://yogitunes.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-16 23:00:17 (1 day ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.57 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 16 19:00:13.879458 2026] [security2:error] [pid 32438:tid 32438] [client 42.201.192.57:52214] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|dceabronwilliams.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dceabronwilliams.com"] [uri "/"] [unique_id "aoJA_ZtJBXga_rbPXdeEqAAAAAo"], referer: https://dceabronwilliams.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-16 21:50:40 (1 day ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.57 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 16 17:50:35.316102 2026] [security2:error] [pid 17282:tid 17282] [client 42.201.192.57:35260] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|pointandshootfilm.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pointandshootfilm.com"] [uri "/"] [unique_id "aoIwq2udardaqximb7LL-gAAAAA"], referer: https://pointandshootfilm.com/ show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-08-16 16:01:37 (1 day ago)	Web application attack detected.	Web App Attack
🇫🇷 polido	2026-08-16 06:56:59 (2 days ago)	[instance-20240404-1611] Unauthorized connection attempt to port 443 from 42.201.192.57	Port Scan
🇺🇸 TPI-Abuse	2026-08-10 23:57:03 (1 week ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.57 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 10 19:56:56.733052 2026] [security2:error] [pid 3147931:tid 3147931] [client 42.201.192.57:30200] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|sullstars.org\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "sullstars.org"] [uri "/"] [unique_id "anplSDFahVY891SvVhS5BgAAAAQ"], referer: https://sullstars.org/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-09 18:02:36 (1 week ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.57 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 09 14:02:32.383574 2026] [security2:error] [pid 1609713:tid 1609713] [client 42.201.192.57:43908] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|toepferlab.org\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "toepferlab.org"] [uri "/"] [unique_id "anjAuATBUI27UcS1jnBRtwAAAA0"], referer: https://toepferlab.org/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-09 16:38:29 (1 week ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.57 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 09 12:38:23.825364 2026] [security2:error] [pid 3823786:tid 3823786] [client 42.201.192.57:49031] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|itre.org\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "itre.org"] [uri "/"] [unique_id "anis_1MdsIN6V7YTcLMBLwAAABA"], referer: https://itre.org/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-06 06:30:41 (1 week ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.57 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 06 02:30:33.935929 2026] [security2:error] [pid 660924:tid 660924] [client 42.201.192.57:55861] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|powerkiteforum.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "powerkiteforum.com"] [uri "/"] [unique_id "anQqCUx-BNlzk8qMXRutxQAAABQ"], referer: https://powerkiteforum.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇦 1gz	2026-08-05 10:30:58 (1 week ago)	Triggered Cloudflare WAF (firewallCustom) from HK. Action taken: BLOCK Protocol: HTTP/2 (GET method) ... show more Triggered Cloudflare WAF (firewallCustom) from HK. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: /sport/gianni-infantino-therret-takim-urgjent-pas-akuzave-per-shantazh/958458 UA: Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Mobile/15E148 Safari/604.1 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot

Showing 1 to 15 of 72 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇱🇹 213.176.26.52

🇦🇷 181.233.147.252

🇺🇸 162.241.91.148

🇱🇹 91.224.92.92

🇺🇸 64.62.156.127

🇨🇳 222.71.205.34

🇧🇷 191.253.2.59

🇬🇧 142.93.45.58

🇨🇳 125.124.183.254

🇨🇳 125.39.179.192

🇳🇱 46.129.5.66

🇺🇸 45.33.109.8

🇺🇸 45.18.255.202

🇸🇬 43.134.20.205

🇹🇿 41.59.31.247

🇺🇦 31.43.37.200

🇰🇷 14.42.49.70

🇷🇴 2.57.122.53

🇨🇳 221.229.220.180

🇺🇸 172.185.24.228