JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 42.201.192.90

42.201.192.90 was found in our database!

This IP was reported 66 times. Confidence of Abuse is 30%: ?

30%

ISP	Huawei-Cloud-HK
Usage Type	Data Center/Web Hosting/Transit
ASN	AS136907
Domain Name	huawei.com
Country	🇭🇰 Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 42.201.192.90

Whois 42.201.192.90

IP Abuse Reports for 42.201.192.90:

This IP address has been reported a total of 66 times from 8 distinct sources. 42.201.192.90 was first reported on April 12th 2026, and the most recent report was 19 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-08-16 22:38:36 (19 hours ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.90 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 16 18:38:28.270859 2026] [security2:error] [pid 30739:tid 30739] [client 42.201.192.90:22249] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|thepotteriesmesilla.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "thepotteriesmesilla.com"] [uri "/"] [unique_id "aoI75IpKL-iA3x_i5bbVnwAAAB4"], referer: https://thepotteriesmesilla.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-16 20:20:58 (21 hours ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.90 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 16 16:20:50.847616 2026] [security2:error] [pid 6729:tid 6729] [client 42.201.192.90:49179] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|mattslivinski.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "mattslivinski.com"] [uri "/"] [unique_id "aoIborbWl3Dfw1BNRCBwaQAAABQ"], referer: https://mattslivinski.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-16 18:16:26 (23 hours ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.90 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 16 14:16:22.411257 2026] [security2:error] [pid 30096:tid 30096] [client 42.201.192.90:57260] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|dunbeggan.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dunbeggan.com"] [uri "/"] [unique_id "aoH-dgomV81Duv1NVxhErAAAAAA"], referer: https://dunbeggan.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-16 06:25:35 (1 day ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.90 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 16 02:25:30.599805 2026] [security2:error] [pid 24005:tid 24005] [client 42.201.192.90:37005] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|susanoneill.us\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "susanoneill.us"] [uri "/"] [unique_id "aoFX2rP96OQ8cAwaqjs9bgAAAAU"], referer: https://susanoneill.us/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-16 06:07:19 (1 day ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.90 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 16 02:07:12.716571 2026] [security2:error] [pid 5750:tid 5792] [client 42.201.192.90:10017] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|chilltech.info\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "chilltech.info"] [uri "/"] [unique_id "aoFTkIypSngcMbiTTTy2NwAAAMI"], referer: https://chilltech.info/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-15 19:55:14 (1 day ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.90 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 15 15:55:07.556043 2026] [security2:error] [pid 31157:tid 31157] [client 42.201.192.90:57330] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|usaangelinvestors.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "usaangelinvestors.com"] [uri "/angel-money-lenders"] [unique_id "aoDEG0XfFn-fLSZZp_CrGwAAAB4"], referer: https://usaangelinvestors.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-15 19:21:12 (1 day ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.90 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 15 15:21:05.771213 2026] [security2:error] [pid 17428:tid 17428] [client 42.201.192.90:28793] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.sigridsnaturalfoods.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.sigridsnaturalfoods.com"] [uri "/discount-programs/"] [unique_id "aoC8IVm6dXSzWENjfxC9zQAAAB8"], referer: https://sigridsnaturalfoods.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-14 22:36:49 (2 days ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.90 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 14 18:36:45.099475 2026] [security2:error] [pid 31077:tid 31077] [client 42.201.192.90:33809] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|segeln-in-phuket.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "segeln-in-phuket.com"] [uri "/"] [unique_id "an-YfWcrZMR697mMHbxmvAAAAB4"], referer: https://segeln-in-phuket.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-14 14:43:39 (3 days ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.90 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 14 10:43:32.444816 2026] [security2:error] [pid 257199:tid 257199] [client 42.201.192.90:11718] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|tlo-afghanistan.org\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "tlo-afghanistan.org"] [uri "/"] [unique_id "an8plPTmxxAVCzmyUqw4hQAAAAA"], referer: https://tlo-afghanistan.org/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-09 15:44:44 (1 week ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.90 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 09 11:44:36.847542 2026] [security2:error] [pid 2402693:tid 2402693] [client 42.201.192.90:11823] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|chatgptfrance.net\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "chatgptfrance.net"] [uri "/index.php"] [unique_id "anigZAfdY-QOZeFvhtMHBQAAAAg"], referer: https://chatgptfrance.net/ show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 conseilgouz	2026-08-08 08:05:24 (1 week ago)	vew-Joomla User : try to access forms...	Hacking
🇺🇸 TPI-Abuse	2026-08-06 22:40:26 (1 week ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.90 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 06 18:40:21.820802 2026] [security2:error] [pid 1724731:tid 1724737] [client 42.201.192.90:40613] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|certifiedebusinessconsultant.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "certifiedebusinessconsultant.com"] [uri "/column/core/responsive/files"] [unique_id "anUNVV7FvQAh_vYXEVxzlgAAAEQ"], referer: https://certifiedebusinessconsultant.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇦 1gz	2026-08-06 20:04:53 (1 week ago)	Triggered Cloudflare WAF (firewallCustom) from HK. Action taken: BLOCK Protocol: HTTP/2 (GET method) ... show more Triggered Cloudflare WAF (firewallCustom) from HK. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: /sport/arsenali-synon-yllin-e-psg-se-nese-nuk-arrin-transferimin-e-viniciusit/960726 UA: Mozilla/5.0 (X11; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-08-03 06:25:55 (2 weeks ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.90 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 03 02:25:49.370153 2026] [security2:error] [pid 2849630:tid 2849630] [client 42.201.192.90:18522] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|koidivision.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "koidivision.com"] [uri "/"] [unique_id "anA0bYhkDUaLH7978FHSFQAAAAo"], referer: https://koidivision.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇦 1gz	2026-08-02 15:44:14 (2 weeks ago)	Triggered Cloudflare WAF (firewallCustom) from HK. Action taken: BLOCK Protocol: HTTP/2 (GET method) ... show more Triggered Cloudflare WAF (firewallCustom) from HK. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: /english/alabbar-admits-he-made-a-mistake-in-albania-auron-tare-seeks-answers-from-government-over-port-of-durres/954620 UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.6533.73 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot

Showing 1 to 15 of 66 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇷 185.7.172.105

🇬🇧 81.92.206.141

🇳🇱 45.148.10.151

🇻🇳 27.72.244.199

🇺🇸 2604:a880:400:d1:0:4:d40e:5001

🇫🇷 185.177.72.12

🇳🇱 176.65.148.173

🇺🇸 154.83.197.148

🇺🇸 147.182.175.10

🇻🇳 113.184.116.255

🇩🇪 47.254.154.160

🇰🇪 41.90.145.145

🇺🇸 34.158.240.168

🇨🇦 20.151.128.234

🇰🇷 211.178.165.251

🇲🇽 201.119.108.93

🇳🇱 195.178.110.26

🇦🇷 186.60.217.129

🇨🇳 182.92.92.149

🇻🇪 181.225.32.48