JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 42.201.192.80

42.201.192.80 was found in our database!

This IP was reported 102 times. Confidence of Abuse is 41%: ?

41%

ISP	Huawei-Cloud-HK
Usage Type	Data Center/Web Hosting/Transit
ASN	AS136907
Domain Name	huawei.com
Country	🇭🇰 Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 42.201.192.80

Whois 42.201.192.80

IP Abuse Reports for 42.201.192.80:

This IP address has been reported a total of 102 times from 12 distinct sources. 42.201.192.80 was first reported on May 4th 2026, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-14 06:18:57 (3 days ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.80 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 14 02:18:50.705787 2026] [security2:error] [pid 27570:tid 27570] [client 42.201.192.80:30506] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.eta-mct.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.eta-mct.com"] [uri "/shop/"] [unique_id "aqeRynfxfGTi-jrbODz-ZgAAACE"], referer: https://eta-mct.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-14 02:49:28 (3 days ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.80 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 13 22:49:21.080765 2026] [security2:error] [pid 3983:tid 3983] [client 42.201.192.80:11842] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|barkatthemoonpetsitting.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "barkatthemoonpetsitting.com"] [uri "/faqs"] [unique_id "aqdgsZbL-FqfBGXDE0tcYgAAAA8"], referer: https://barkatthemoonpetsitting.com/ show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-13 23:03:19 (3 days ago)	42.201.192.80 - sliver85.eu - [14/Sep/2026:01:02:58 +0200] "GET / HTTP/2.0" 444 "Mozilla/5.0 (Macint ... show more 42.201.192.80 - sliver85.eu - [14/Sep/2026:01:02:58 +0200] "GET / HTTP/2.0" 444 "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15" 42.201.192.80 - sliver85.eu - [14/Sep/2026:01:03:00 +0200] "GET / HTTP/2.0" 444 "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15" 42.201.192.80 - sliver85.eu - [14/Sep/2026:01:03:10 +0200] "GET / HTTP/2.0" 444 "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15" ... show less	Brute-Force Web App Attack
🇫🇷 LRob	2026-09-13 15:16:54 (3 days ago)	Asking over plain http and never following the redirect served — a crawler that reads nothing it ask ... show more Asking over plain http and never following the redirect served — a crawler that reads nothing it asks for \| method: GET \| path: /blog/actu-lrob/nouvelles-normes-serveur-lrob-2026-100-etapes-mises-a-jour \| 2026-09-13 15:16 UTC show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-09-13 05:47:41 (4 days ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.80 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 13 01:47:35.122139 2026] [security2:error] [pid 3481:tid 3481] [client 42.201.192.80:20571] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.konahawaii.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.konahawaii.com"] [uri "/"] [unique_id "aqY49zNpEblzJD9jTx7k1gAAAAU"], referer: https://five.co.in/redirect.php?ref_host=xxxyhq.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-13 02:26:37 (4 days ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.80 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 12 22:26:31.224182 2026] [security2:error] [pid 17437:tid 17437] [client 42.201.192.80:47268] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|dictionaryoffish.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dictionaryoffish.com"] [uri "/"] [unique_id "aqYJ10zoQtea_8bwyMKmRgAAAAQ"], referer: https://five.co.in/redirect.php?ref_host=ssspeech.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-12 13:48:23 (5 days ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.80 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 12 09:48:19.688837 2026] [security2:error] [pid 9661:tid 9661] [client 42.201.192.80:25152] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|howtosellmorepizza.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "howtosellmorepizza.com"] [uri "/"] [unique_id "aqVYIwyFrVW39bzuZzaalwAAAA4"], referer: https://quero.party/report/79522 show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-12 08:59:07 (5 days ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.80 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 12 04:58:59.765875 2026] [security2:error] [pid 25887:tid 25887] [client 42.201.192.80:39053] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|n3fjp.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "n3fjp.com"] [uri "/"] [unique_id "aqUUU-1v5oAXwm3wfPl9UwAAAA0"], referer: https://wb4aej.com/hamdomain show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-12 05:08:53 (5 days ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.80 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 12 01:08:50.280479 2026] [security2:error] [pid 1205921:tid 1205921] [client 42.201.192.80:11790] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.raumschach.org\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.raumschach.org"] [uri "/404"] [unique_id "aqTeYkzAQ2gsHFytisjMmAAAAAY"], referer: https://raumschach.org/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-12 01:17:36 (5 days ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.80 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 11 21:17:31.640450 2026] [security2:error] [pid 8521:tid 8540] [client 42.201.192.80:45558] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|flapjacktoys.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "flapjacktoys.com"] [uri "/"] [unique_id "aqSoKxhrCTUMD522hIeHcwAAANE"], referer: https://dketoys.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-11 19:52:30 (5 days ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.80 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 11 15:52:23.362791 2026] [security2:error] [pid 13150:tid 13150] [client 42.201.192.80:44039] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|spacebooger.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "spacebooger.com"] [uri "/"] [unique_id "aqRb903KD7H895cYofoNaQAAAAc"], referer: https://slaymonstrobot.blogspot.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 LRob	2026-09-11 19:36:38 (5 days ago)	Asking over plain http and never following the redirect served — a crawler that reads nothing it ask ... show more Asking over plain http and never following the redirect served — a crawler that reads nothing it asks for \| method: GET \| path: /es/solutions/outbound-call-center-software-for-sales/ \| 2026-09-11 19:36 UTC show less	Bad Web Bot
🇩🇪 LRob	2026-09-11 07:32:39 (6 days ago)	Asking over plain http and never following the redirect served — a crawler that reads nothing it ask ... show more Asking over plain http and never following the redirect served — a crawler that reads nothing it asks for \| method: GET \| path: /declaration-daccessibilite-rgaa-4-de-comexposium \| 2026-09-11 07:32 UTC show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-09-02 07:23:54 (2 weeks ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.80 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 03:23:49.748563 2026] [security2:error] [pid 1066:tid 1066] [client 42.201.192.80:22122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|karenbernsteinlaw.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "karenbernsteinlaw.com"] [uri "/html/2658447.html"] [unique_id "apfPBVMx737L2I1sNlOO9AAAAAU"], referer: https://karenbernsteinlaw.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇦 URAN Publishing Service	2026-09-01 08:36:14 (2 weeks ago)	[01/Sep/2026:11:36:13 +0300] -- 42.201.192.80 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /wp-c ... show more [01/Sep/2026:11:36:13 +0300] -- 42.201.192.80 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /wp-content/uploads/sites/58/2017/05/21-4.pdf HTTP/1.1 show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 102 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 115.91.48.140

🇨🇱 190.114.39.99

🇦🇷 190.2.22.129

🇺🇸 162.216.150.184

🇺🇸 136.117.69.10

🇹🇼 123.58.196.28

🇱🇰 122.255.14.70

🇮🇷 94.182.168.149

🇪🇨 190.110.213.26

🇺🇸 173.12.0.166

🇮🇳 122.168.123.73

🇬🇧 35.203.211.119

🇺🇸 20.42.59.55

🇫🇷 2a13:f47:a36d:81a1:57df:3bca:f062:bac2

🇫🇷 2a13:f41:dafa:826:bf0a:b8:e19f:d853

🇭🇰 223.197.153.138

🇮🇩 182.10.161.196

🇬🇧 62.60.130.142

🇺🇸 57.141.14.27

🇳🇱 45.148.10.141