JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 42.201.192.85

42.201.192.85 was found in our database!

This IP was reported 86 times. Confidence of Abuse is 40%: ?

40%

ISP	Huawei-Cloud-HK
Usage Type	Data Center/Web Hosting/Transit
ASN	AS136907
Domain Name	huawei.com
Country	🇭🇰 Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 42.201.192.85

Whois 42.201.192.85

IP Abuse Reports for 42.201.192.85:

This IP address has been reported a total of 86 times from 11 distinct sources. 42.201.192.85 was first reported on April 29th 2021, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-08-28 15:32:25 (3 hours ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.85 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.85 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 11:32:19.094540 2026] [security2:error] [pid 16028:tid 16028] [client 42.201.192.85:30400] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|seskalee.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "seskalee.com"] [uri "/contact"] [unique_id "apGqA6PBCLRAnN-Smd3eLwAAADE"], referer: https://seskalee.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-28 09:50:23 (9 hours ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.85 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.85 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 05:50:15.760706 2026] [security2:error] [pid 22882:tid 22882] [client 42.201.192.85:54186] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|spacebooger.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "spacebooger.com"] [uri "/"] [unique_id "apFZ13UT4--3lZuE0aLEGAAAAA0"], referer: https://slaymonstrobot.blogspot.com/2012/07/friday-night-filosophy-tell-us-how-you.html show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 Progetto1	2026-08-27 17:10:08 (1 day ago)	Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-08-27 13:41:30 (1 day ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.85 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.85 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 09:41:22.422884 2026] [security2:error] [pid 4105:tid 4105] [client 42.201.192.85:23485] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.a1laha.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.a1laha.com"] [uri "/"] [unique_id "apA-gjKQIfwa80QtbrLmrwAAAA4"], referer: https://wecelebrities.com/all/119/26.html show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-27 00:44:47 (1 day ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.85 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.85 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 20:44:43.833152 2026] [security2:error] [pid 3649:tid 3649] [client 42.201.192.85:60599] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|huntingforebears.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "huntingforebears.com"] [uri "/"] [unique_id "ao-Ie1XxUxTE4-1oU0ENZgAAAAk"], referer: https://wecelebrities.com/all/1388/17.html show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-26 22:27:37 (1 day ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.85 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.85 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 18:27:28.860079 2026] [security2:error] [pid 24026:tid 24040] [client 42.201.192.85:50705] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|accrediteddegree.org\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "accrediteddegree.org"] [uri "/"] [unique_id "ao9oUEXTD11a20kHmjQNigAAAEo"], referer: https://advertisingfirm.org/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-26 14:00:29 (2 days ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.85 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.85 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 10:00:12.192355 2026] [security2:error] [pid 12283:tid 12283] [client 42.201.192.85:15195] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|broneksuchanek.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "broneksuchanek.com"] [uri "/"] [unique_id "ao7xa3hGsAgl-RGuhr7bbwAAABg"], referer: https://ussthresher.net/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-26 13:19:52 (2 days ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.85 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.85 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 09:19:44.913043 2026] [security2:error] [pid 19973:tid 19973] [client 42.201.192.85:62339] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|atlanticcitypartybuses.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "atlanticcitypartybuses.com"] [uri "/"] [unique_id "ao7n8M6IUWaPTeLURIY0TgAAAB8"], referer: https://kalamazoopartybus.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Jochen Pretli	2026-08-26 09:42:56 (2 days ago)	connection to honeypot	Email Spam Port Scan
🇺🇸 TPI-Abuse	2026-08-26 07:52:05 (2 days ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.85 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.85 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 03:51:58.384405 2026] [security2:error] [pid 16570:tid 16570] [client 42.201.192.85:52168] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|agupgrade.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "agupgrade.com"] [uri "/"] [unique_id "ao6bHiucA1zw-MZas8TS9AAAACs"], referer: https://wecelebrities.com/all/172/10.html show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-26 02:29:50 (2 days ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.85 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.85 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 22:29:42.298230 2026] [security2:error] [pid 795:tid 795] [client 42.201.192.85:62264] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|thepotteriesmesilla.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "thepotteriesmesilla.com"] [uri "/bell-lamp"] [unique_id "ao5Plp9FaAW0VgUXvzWIkwAAABg"], referer: https://thepotteriesmesilla.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-25 13:36:41 (3 days ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.85 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.85 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 09:36:34.881456 2026] [security2:error] [pid 28569:tid 28569] [client 42.201.192.85:22160] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.proprocessor.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.proprocessor.com"] [uri "/sausage-stuffers.htm"] [unique_id "ao2aYv-QChOkz3ij-dw7kgAAAAw"], referer: https://commercialsausagestuffers.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-25 08:25:11 (3 days ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.85 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.85 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 04:25:04.462726 2026] [security2:error] [pid 17630:tid 17630] [client 42.201.192.85:59211] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|10bestcountryclubs.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "10bestcountryclubs.com"] [uri "/country-club-directory"] [unique_id "ao1RYExBi-sX1i0-3A4D7gAAAAk"], referer: https://10bestcountryclubs.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-25 07:14:51 (3 days ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.85 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.85 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 03:14:47.382024 2026] [security2:error] [pid 19549:tid 19549] [client 42.201.192.85:34051] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|saudigreenrecycling.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "saudigreenrecycling.com"] [uri "/"] [unique_id "ao1A50aeisafn_ANS56Q_AAAAA4"], referer: https://saudigreenrecycling.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-23 20:33:08 (4 days ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.85 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.85 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 23 16:33:02.165926 2026] [security2:error] [pid 14023:tid 14023] [client 42.201.192.85:52153] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|1214productions.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "1214productions.com"] [uri "/"] [unique_id "aotY_tqN7RKmcJh_n1pR9gAAABI"], referer: https://1214productions.com/ show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 86 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 220.192.103.118

🇳🇱 193.176.31.227

🇳🇱 185.223.235.47

🇧🇷 177.53.39.39

🇫🇷 169.58.184.188

🇹🇷 93.89.225.85

🇬🇧 89.37.172.134

🇧🇷 45.205.1.241

🇦🇲 37.186.122.154

🇫🇷 37.65.46.175

🇺🇦 213.174.1.216

🇭🇰 199.45.155.17

🇳🇱 195.178.110.30

🇩🇪 192.248.188.184

🇮🇳 182.70.255.242

🇧🇷 131.72.201.157

🇹🇼 122.116.238.67

🇵🇭 112.206.71.77

🇦🇷 45.225.212.145

🇨🇳 36.103.243.179