JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 42.201.192.72

42.201.192.72 was found in our database!

This IP was reported 75 times. Confidence of Abuse is 40%: ?

40%

ISP	Huawei-Cloud-HK
Usage Type	Data Center/Web Hosting/Transit
ASN	AS136907
Domain Name	huawei.com
Country	🇭🇰 Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 42.201.192.72

Whois 42.201.192.72

IP Abuse Reports for 42.201.192.72:

This IP address has been reported a total of 75 times from 11 distinct sources. 42.201.192.72 was first reported on April 18th 2026, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-08-20 13:53:27 (3 hours ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.72 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 20 09:53:24.281696 2026] [security2:error] [pid 29572:tid 29572] [client 42.201.192.72:40537] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|fundingworkingcapital.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "fundingworkingcapital.com"] [uri "/business-startup-loans-no-credit-check"] [unique_id "aocG1MLNh9g8YaU-TJAOiwAAAAE"], referer: https://fundingworkingcapital.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-20 10:36:24 (6 hours ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.72 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 20 06:36:19.845081 2026] [security2:error] [pid 31270:tid 31270] [client 42.201.192.72:49112] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|ironsightsarmory.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "ironsightsarmory.com"] [uri "/class-iii"] [unique_id "aobYo7lDrF_MZpuEXz0YtgAAABI"], referer: https://ironsightsarmory.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-20 02:58:57 (14 hours ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.72 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 19 22:58:54.092056 2026] [security2:error] [pid 29525:tid 29525] [client 42.201.192.72:26914] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|97201.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "97201.com"] [uri "/"] [unique_id "aoZtbt004Bi8C0Z2HvEI7gAAAB4"], referer: https://97201.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Jochen Pretli	2026-08-19 23:25:44 (17 hours ago)	connection to honeypot	Email Spam Port Scan
🇺🇸 TPI-Abuse	2026-08-18 20:33:52 (1 day ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.72 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 18 16:33:47.367245 2026] [security2:error] [pid 30212:tid 30212] [client 42.201.192.72:22233] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|directoryofbikes.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "directoryofbikes.com"] [uri "/"] [unique_id "aoTBqyYzukdMdlOk6nsJPgAAABU"], referer: https://directoryofbikes.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-18 06:59:57 (2 days ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.72 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 18 02:59:51.241446 2026] [security2:error] [pid 12703:tid 12703] [client 42.201.192.72:21861] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|tgaguide.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "tgaguide.com"] [uri "/"] [unique_id "aoQC55qvYD9nuCWJWNIiKAAAAAQ"], referer: https://tgaguide.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-17 20:18:03 (2 days ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.72 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 16:17:55.986967 2026] [security2:error] [pid 6043:tid 6043] [client 42.201.192.72:32191] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|jackkerrart.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "jackkerrart.com"] [uri "/"] [unique_id "aoNscwi8N5Yv8n4XYmtt0QAAAAs"], referer: https://jackkerrart.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-17 17:51:17 (2 days ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.72 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 13:51:12.474154 2026] [security2:error] [pid 23105:tid 23202] [client 42.201.192.72:35302] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|australialifecoach.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "australialifecoach.com"] [uri "/"] [unique_id "aoNKEN1IIvrWVbVkr1ZjGQAAAgU"], referer: https://australialifecoach.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-17 17:04:31 (3 days ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.72 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 13:04:25.129310 2026] [security2:error] [pid 30694:tid 30914] [client 42.201.192.72:47155] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|rainbowbb.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "rainbowbb.com"] [uri "/"] [unique_id "aoM_GcULDaCXKWrl15xhwwAAANM"], referer: https://rainbowbb.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-17 15:09:07 (3 days ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.72 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 11:09:00.203253 2026] [security2:error] [pid 28741:tid 28741] [client 42.201.192.72:26892] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|voodooshop.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "voodooshop.com"] [uri "/"] [unique_id "aoMkDFxwXftYwh7icBP6BAAAABQ"], referer: https://voodooshop.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-16 21:29:10 (3 days ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.72 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 16 17:29:07.296331 2026] [security2:error] [pid 31244:tid 31256] [client 42.201.192.72:20572] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.gryphix.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gryphix.com"] [uri "/"] [unique_id "aoIro_B7poIng_3ymJ7HDAAAAAo"], referer: https://gryphix.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-16 16:41:18 (4 days ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.72 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 16 12:41:10.969422 2026] [security2:error] [pid 1061:tid 1061] [client 42.201.192.72:57157] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|celebrateadoption.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "celebrateadoption.com"] [uri "/"] [unique_id "aoHoJstDq86r86kWpeyXtQAAABY"], referer: https://celebrateadoption.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-16 12:29:49 (4 days ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.72 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 16 08:29:45.933027 2026] [security2:error] [pid 21469:tid 21469] [client 42.201.192.72:32132] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|ohioaci.org\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "ohioaci.org"] [uri "/faq"] [unique_id "aoGtOdpcENG2qL-Jy9ElWgAAAA8"], referer: https://ohioaci.org/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-16 08:26:15 (4 days ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.72 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 16 04:26:09.272781 2026] [security2:error] [pid 24820:tid 24820] [client 42.201.192.72:45442] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|greensborolimobus.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "greensborolimobus.com"] [uri "/"] [unique_id "aoF0Ia-bLVbf2CIJ0nL8KgAAAAs"], referer: https://greensborolimobus.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-15 06:11:37 (5 days ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.72 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 15 02:11:31.039054 2026] [security2:error] [pid 14301:tid 14301] [client 42.201.192.72:22114] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|uphillfarmvt.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "uphillfarmvt.com"] [uri "/"] [unique_id "aoADE3c7_WKBfgRJ8l9EowAAAAc"], referer: https://uphillfarmvt.com/ show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 75 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 185.242.226.71

🇺🇸 165.232.154.92

🇭🇰 118.193.32.119

🇧🇷 2a02:4780:13:1945:0:2d31:5460:1

🇺🇸 204.8.96.85

🇨🇳 203.189.221.17

🇫🇷 194.99.24.130

🇻🇳 160.250.246.185

🇪🇬 102.187.43.221

🇺🇸 91.230.168.62

🇩🇪 213.209.159.223

🇮🇷 185.159.153.2

🇺🇸 165.154.172.223

🇺🇸 155.2.215.19

🇳🇱 104.248.85.91

🇰🇪 102.210.221.22

🇩🇪 85.214.166.40

🇩🇪 68.183.72.234

🇸🇬 47.79.200.148

🇳🇱 204.76.203.43