JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 42.201.192.7

42.201.192.7 was found in our database!

This IP was reported 65 times. Confidence of Abuse is 28%: ?

28%

ISP	Huawei-Cloud-HK
Usage Type	Data Center/Web Hosting/Transit
ASN	AS136907
Domain Name	huawei.com
Country	🇭🇰 Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 42.201.192.7

Whois 42.201.192.7

IP Abuse Reports for 42.201.192.7:

This IP address has been reported a total of 65 times from 6 distinct sources. 42.201.192.7 was first reported on March 26th 2026, and the most recent report was 16 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-08-12 08:40:22 (16 hours ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.7 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.7 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 12 04:40:17.137851 2026] [security2:error] [pid 291362:tid 291362] [client 42.201.192.7:35670] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|nhgrange.org\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "nhgrange.org"] [uri "/Documents/Wingold_supper_2019.pdf"] [unique_id "anwxcYB9aTmeSTOE3r91AwAAABM"], referer: http://nhgrange.org/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-10 10:41:02 (2 days ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.7 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.7 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 10 06:40:57.237526 2026] [security2:error] [pid 1754406:tid 1754406] [client 42.201.192.7:60523] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|kadinisi.org\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "kadinisi.org"] [uri "/"] [unique_id "anmquaWgqIpwPEaIk6oP6AAAAAg"], referer: https://kadinisi.org/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇦 1gz	2026-08-09 00:27:08 (4 days ago)	Triggered Cloudflare WAF (firewallCustom) from HK. Action taken: BLOCK Protocol: HTTP/2 (GET method) ... show more Triggered Cloudflare WAF (firewallCustom) from HK. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: /english/former-investigator-agim-rexhepi-warns-over-the-rise-in-killings-in-kosovo-a-coordinated-crackdown-on-the-illegal-weapons-market-is-needed/910274 UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇨🇦 1gz	2026-08-07 00:11:01 (6 days ago)	Triggered Cloudflare WAF (firewallCustom) from HK. Action taken: BLOCK Protocol: HTTP/2 (GET method) ... show more Triggered Cloudflare WAF (firewallCustom) from HK. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: /sport/vozinha-shkruan-historine-ne-kili-rregullorja-ndryshohet-posacerisht-per-te/960830 UA: Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Mobile/15E148 Safari/604.1 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-08-06 09:09:00 (6 days ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.7 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.7 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 06 05:08:54.112285 2026] [security2:error] [pid 2440989:tid 2440989] [client 42.201.192.7:40403] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|agingworkforcenews.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "agingworkforcenews.com"] [uri "/2006/01/manpower-inc-ceo-on-future-of-global.html"] [unique_id "anRPJgJkCaxIYeEcr5liZwAAAAs"], referer: https://agingworkforcenews.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-04 08:26:11 (1 week ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.7 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.7 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 04 04:26:04.203983 2026] [security2:error] [pid 3932826:tid 3932826] [client 42.201.192.7:60617] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|gracebaptisthartsville.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gracebaptisthartsville.com"] [uri "/sermons"] [unique_id "anGiHNd85m1YfM3RWcnRMgAAAAY"], referer: https://gracebaptisthartsville.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇦 1gz	2026-08-03 00:16:20 (1 week ago)	Triggered Cloudflare WAF (firewallCustom) from HK. Action taken: BLOCK Protocol: HTTP/2 (GET method) ... show more Triggered Cloudflare WAF (firewallCustom) from HK. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: /sport/sturm-graz-futet-ne-gare-per-nelson-weiper-sulmuesi-i-kerkuar-edhe-nga-shqiperia-mund-te-lere-mainz/921607 UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.216 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-08-02 17:51:29 (1 week ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.7 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.7 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 02 13:51:20.572029 2026] [security2:error] [pid 1581361:tid 1581361] [client 42.201.192.7:18515] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|mosheimlib.org\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "mosheimlib.org"] [uri "/about"] [unique_id "am-DmIOVjNouWYt_Ste85AAAAAk"], referer: https://mosheimlib.org/ show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 conseilgouz	2026-08-02 05:29:31 (1 week ago)	vew-Joomla User : try to access forms...	Hacking
🇺🇸 TPI-Abuse	2026-08-01 20:39:44 (1 week ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.7 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.7 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 16:39:39.837843 2026] [security2:error] [pid 2865366:tid 2865366] [client 42.201.192.7:30458] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|aimer.es\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "aimer.es"] [uri "/"] [unique_id "am5Zi82XgSY72ei6_8r8CQAAACE"], referer: https://aimer.es/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-31 19:32:59 (1 week ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.7 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.7 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 31 15:32:52.406624 2026] [security2:error] [pid 26286:tid 26286] [client 42.201.192.7:33825] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|akronpartybuses.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "akronpartybuses.com"] [uri "/"] [unique_id "amz4ZItwl8FdPwq_-DGI9AAAAAc"], referer: https://akronpartybuses.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇦 1gz	2026-07-31 04:55:34 (1 week ago)	Triggered Cloudflare WAF (firewallCustom) from HK. Action taken: BLOCK Protocol: HTTP/2 (GET method) ... show more Triggered Cloudflare WAF (firewallCustom) from HK. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: /lajme/selin UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 Edg/122.0.0.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-30 23:07:58 (1 week ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.7 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.7 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 30 19:07:55.173090 2026] [security2:error] [pid 1998124:tid 1998124] [client 42.201.192.7:47338] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|fusionrep.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "fusionrep.com"] [uri "/"] [unique_id "amvZSzsFNPjyqkQLwgNGEAAAAAY"], referer: https://fusionrep.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-30 11:21:07 (1 week ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.7 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.7 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 30 07:21:01.107524 2026] [security2:error] [pid 2976388:tid 2976413] [client 42.201.192.7:15161] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|spectresails.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "spectresails.com"] [uri "/spectre_sails_004.htm"] [unique_id "amszncqWTIhF_iP0-CN07gAAANc"], referer: https://spectresails.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-30 09:38:48 (1 week ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.7 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.7 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 30 05:38:42.409990 2026] [security2:error] [pid 1996360:tid 1996360] [client 42.201.192.7:37092] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|adrienberthaud.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "adrienberthaud.com"] [uri "/guy_durosier"] [unique_id "amsbokEO7hGxWR1VdkyH8wAAAA0"], referer: https://adrienberthaud.com/ show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 65 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇲 210.14.97.176

🇵🇱 176.53.159.197

🇧🇬 79.124.58.198

🇲🇽 189.204.230.91

🇭🇰 182.239.84.126

🇵🇾 181.126.224.165

🇨🇳 117.150.88.18

🇨🇳 115.190.213.206

🇻🇳 113.161.17.35

🇺🇸 104.42.41.109

🇺🇸 64.62.197.212

🇨🇳 39.186.131.172

🇺🇸 20.98.137.25

🇺🇸 3.86.188.120

🇷🇴 2.57.122.168

🇨🇳 222.186.180.126

🇳🇱 185.167.97.78

🇧🇷 179.158.178.133

🇺🇸 134.122.113.99

🇦🇺 115.70.67.247