JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 42.201.192.15

42.201.192.15 was found in our database!

This IP was reported 41 times. Confidence of Abuse is 41%: ?

41%

ISP	Huawei-Cloud-HK
Usage Type	Data Center/Web Hosting/Transit
ASN	AS136907
Domain Name	huawei.com
Country	🇭🇰 Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 42.201.192.15

Whois 42.201.192.15

IP Abuse Reports for 42.201.192.15:

This IP address has been reported a total of 41 times from 10 distinct sources. 42.201.192.15 was first reported on March 26th 2026, and the most recent report was 10 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-22 00:10:21 (10 hours ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.15 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 21 20:10:13.168480 2026] [security2:error] [pid 3612797:tid 3612797] [client 42.201.192.15:13565] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|anthonyanimalclinic.net\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "anthonyanimalclinic.net"] [uri "/payment-plans"] [unique_id "amAKZT5cTJpvb7m-1y7PkQAAAAY"], referer: https://anthonyanimalclinic.net/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-20 11:35:47 (1 day ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.15 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 20 07:35:40.686756 2026] [security2:error] [pid 15752:tid 15752] [client 42.201.192.15:28972] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|tulsatvmemories.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "tulsatvmemories.com"] [uri "/"] [unique_id "al4IDJw6kPHIYwX80b4vDAAAAAM"], referer: https://tulsatvmemories.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-20 08:51:26 (2 days ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.15 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 20 04:51:22.533823 2026] [security2:error] [pid 1866:tid 1866] [client 42.201.192.15:28991] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|canadianwildlifemuseum.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "canadianwildlifemuseum.com"] [uri "/"] [unique_id "al3hik3Jmn9WRWxgc1J-rgAAAAQ"], referer: https://canadianwildlifemuseum.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-19 09:22:08 (3 days ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.15 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 05:22:04.424506 2026] [security2:error] [pid 30140:tid 30140] [client 42.201.192.15:23619] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|flatchestedmama.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "flatchestedmama.com"] [uri "/apocalypse-clown"] [unique_id "alyXPH6dZEscusC3BlpPiAAAAAs"], referer: https://flatchestedmama.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 IRISIO	2026-07-18 15:31:24 (3 days ago)	scans/SQL injection/spam posts : 87 queries	Web App Attack SQL Injection
🇺🇸 TPI-Abuse	2026-07-18 13:39:44 (3 days ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.15 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 09:39:38.286446 2026] [security2:error] [pid 31410:tid 31419] [client 42.201.192.15:35372] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|alexlogic.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "alexlogic.com"] [uri "/"] [unique_id "aluCGrXB8uY9LaO-4jHeDgAAAIQ"], referer: https://alexlogic.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-18 06:24:11 (4 days ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.15 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 02:24:06.199945 2026] [security2:error] [pid 25205:tid 25205] [client 42.201.192.15:45396] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|opennatura.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "opennatura.com"] [uri "/"] [unique_id "alscBrZVusLq0DNsDGWuWQAAAAg"], referer: https://opennatura.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-16 20:51:40 (5 days ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.15 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 16:51:36.544031 2026] [security2:error] [pid 18583:tid 18617] [client 42.201.192.15:21910] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|aafm.org\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "aafm.org"] [uri "/"] [unique_id "allEWMTwxEshJy0GgvUIWQAAARI"], referer: https://aafm.org/ show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 thetomtaylor.co.uk	2026-07-16 08:07:01 (6 days ago)	Fail2Ban - [NGINX]Malicious request blocked on nginx-444 ... [wa01,wa02]	Hacking Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-16 06:18:18 (6 days ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.15 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 02:18:11.464938 2026] [security2:error] [pid 16781:tid 16781] [client 42.201.192.15:15454] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|justicehoward.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "justicehoward.com"] [uri "/"] [unique_id "alh3o_BidcfVTbJs2TLXYgAAACY"], referer: https://justicehoward.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-15 12:40:52 (6 days ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.15 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 15 08:40:48.455229 2026] [security2:error] [pid 2924:tid 2924] [client 42.201.192.15:39075] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|renjunews.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "renjunews.com"] [uri "/"] [unique_id "ald_0I4nyZLINczgf5VRXQAAABA"], referer: https://renjunews.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-15 02:07:43 (1 week ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.15 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 14 22:07:37.522376 2026] [security2:error] [pid 11313:tid 11313] [client 42.201.192.15:57400] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|wackywipeouts.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "wackywipeouts.com"] [uri "/"] [unique_id "albracHLvH2U94n8mlqWOQAAAAI"], referer: https://wackywipeouts.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-14 15:50:07 (1 week ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.15 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 14 11:50:01.736459 2026] [security2:error] [pid 14268:tid 14268] [client 42.201.192.15:32302] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|tijuana-bibles.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "tijuana-bibles.com"] [uri "/index.html"] [unique_id "alZaqZCvljXgJzwsTRc_0gAAAA4"], referer: https://tijuana-bibles.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-14 11:14:05 (1 week ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.15 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 14 07:13:58.175531 2026] [security2:error] [pid 15977:tid 15977] [client 42.201.192.15:55497] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|blackballprojects.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "blackballprojects.com"] [uri "/"] [unique_id "alYZ9t53cfOdMizrXphJMQAAAB4"], referer: https://blackballprojects.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-14 06:08:24 (1 week ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.15 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 14 02:08:19.095309 2026] [security2:error] [pid 11172:tid 11172] [client 42.201.192.15:52428] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|jerusalem-korczak-home.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "jerusalem-korczak-home.com"] [uri "/ant/bra.html"] [unique_id "alXSU8EX7EcC_pscKCwgUAAAAAE"], referer: https://jerusalem-korczak-home.com/ show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 41 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇱 176.53.159.198

🇧🇪 172.253.215.29

🇵🇭 113.19.183.184

🇸🇬 47.128.44.122

🇸🇬 47.128.29.76

🇺🇸 45.194.67.28

🇮🇳 2001:4490:4e95:5b0e:41f7:7f7c:817e:8634

🇫🇷 2001:41d0:303:422d::1

🇺🇸 172.245.43.227

🇧🇷 168.90.7.240

🇩🇪 141.11.45.76

🇰🇷 112.162.111.205

🇷🇺 109.173.107.163

🇧🇪 104.155.46.105

🇺🇸 64.23.218.208

🇳🇱 45.148.10.239

🇿🇦 4.221.162.168

🇨🇭 208.69.78.36

🇩🇪 194.187.176.244

🇳🇱 86.54.31.36