JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 42.201.192.23

42.201.192.23 was found in our database!

This IP was reported 45 times. Confidence of Abuse is 32%: ?

32%

ISP	Huawei-Cloud-HK
Usage Type	Data Center/Web Hosting/Transit
ASN	AS136907
Domain Name	huawei.com
Country	🇭🇰 Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 42.201.192.23

Whois 42.201.192.23

IP Abuse Reports for 42.201.192.23:

This IP address has been reported a total of 45 times from 6 distinct sources. 42.201.192.23 was first reported on March 26th 2026, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-23 05:24:05 (3 hours ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.23 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 23 01:24:00.526283 2026] [security2:error] [pid 3640441:tid 3640441] [client 42.201.192.23:50780] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|spirits66.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "spirits66.com"] [uri "/"] [unique_id "amGlcLLgZnHw8YCc1aNPCQAAAAs"], referer: https://spirits66.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-22 06:01:13 (1 day ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.23 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 22 02:01:09.328912 2026] [security2:error] [pid 399372:tid 399372] [client 42.201.192.23:26948] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|garantagroup.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "garantagroup.com"] [uri "/"] [unique_id "amBcpWzb34tngucjV7Ml8wAAAAs"], referer: https://garantagroup.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-22 04:52:41 (1 day ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.23 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 22 00:52:36.401961 2026] [security2:error] [pid 882633:tid 882633] [client 42.201.192.23:26827] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.mosheimlib.org\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.mosheimlib.org"] [uri "/"] [unique_id "amBMlHB1tDHb_zdM-gIn_AAAABY"], referer: https://mosheimlib.org/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-21 14:21:42 (1 day ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.23 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 21 10:21:37.683071 2026] [security2:error] [pid 3315:tid 3315] [client 42.201.192.23:18836] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.abcollie.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.abcollie.com"] [uri "/oldsite/articles/article 21.html"] [unique_id "al-AcZaeYvGhT46Otq7coAAAAAk"], referer: https://abcollie.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-21 08:52:47 (1 day ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.23 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 21 04:52:41.671064 2026] [security2:error] [pid 1463:tid 1463] [client 42.201.192.23:35536] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.creartest.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.creartest.com"] [uri "/403.shtml"] [unique_id "al8zWVS14o3D1BY6acEKHAAAAAU"], referer: https://creartest.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-21 03:04:36 (2 days ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.23 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 20 23:04:31.713963 2026] [security2:error] [pid 19922:tid 19922] [client 42.201.192.23:42128] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|circleofsound.org\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "circleofsound.org"] [uri "/photo-gallery/cosmic-clown-society"] [unique_id "al7hv7caPzBRbTGJfAGSZQAAAAQ"], referer: https://circleofsound.org/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-19 11:36:10 (3 days ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.23 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 07:36:03.813335 2026] [security2:error] [pid 4136828:tid 4136854] [client 42.201.192.23:55863] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|flapjacktoys.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "flapjacktoys.com"] [uri "/"] [unique_id "aly2o1vCA3oIK-F5fXfJUgAAARY"], referer: https://flapjacktoys.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-19 09:01:39 (3 days ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.23 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 05:01:33.495745 2026] [security2:error] [pid 29497:tid 29497] [client 42.201.192.23:25186] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|cygnetsilks.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cygnetsilks.com"] [uri "/"] [unique_id "alySbTVFvPN9JzjMVVSu3gAAAA8"], referer: https://cygnetsilks.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-18 17:12:03 (4 days ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.23 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 13:11:59.648307 2026] [security2:error] [pid 26013:tid 26013] [client 42.201.192.23:50505] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|stevenkloepfer.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "stevenkloepfer.com"] [uri "/"] [unique_id "aluz3xM26_R8V87htKK9kwAAAAk"], referer: https://stevenkloepfer.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-18 16:12:49 (4 days ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.23 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 12:12:43.630155 2026] [security2:error] [pid 2271511:tid 2271511] [client 42.201.192.23:50744] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|capitalswisscorp.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "capitalswisscorp.com"] [uri "/"] [unique_id "alul-2Xd1YfzYKBMamrmQAAAACI"], referer: https://capitalswisscorp.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 02:49:50 (6 days ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.23 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 22:49:44.568691 2026] [security2:error] [pid 19599:tid 19599] [client 42.201.192.23:62586] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|yerevanpress.am\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "yerevanpress.am"] [uri "/"] [unique_id "almYSNsXxX-L75Fayw_36AAAAAU"], referer: https://yerevanpress.am/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-16 16:19:27 (6 days ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.23 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 12:19:18.553737 2026] [security2:error] [pid 19929:tid 19929] [client 42.201.192.23:20141] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|wild-goose.net\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "wild-goose.net"] [uri "/articles/margaret-cavendish-and-the-blazing-world"] [unique_id "alkEhm2Ehh0r44p_Ukz-FAAAAB8"], referer: https://wild-goose.net/ show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 thetomtaylor.co.uk	2026-07-16 11:06:02 (6 days ago)	Fail2Ban - [NGINX]Malicious request blocked on nginx-444 ... [ice01]	Hacking Bad Web Bot
🇬🇧 thetomtaylor.co.uk	2026-07-16 10:08:02 (6 days ago)	Fail2Ban - [NGINX]Malicious request blocked on nginx-444 ... [ice02,wa01,wa02]	Hacking Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-16 07:13:12 (1 week ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.23 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 03:13:07.333194 2026] [security2:error] [pid 12123:tid 12181] [client 42.201.192.23:37053] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|tvpin.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "tvpin.com"] [uri "/index.cgi"] [unique_id "aliEg4U3Np-I53Rr0K7a-gAAANU"], referer: https://3dtours.net/ show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 45 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇮 147.185.133.165

🇺🇸 98.159.37.134

🇪🇸 84.246.215.8

🇫🇷 217.128.80.129

🇧🇷 201.32.221.226

🇲🇳 192.82.88.93

🇵🇱 176.53.159.197

🇨🇳 111.228.5.238

🇺🇸 104.131.19.25

🇬🇧 193.8.186.31

🇺🇸 156.232.13.161

🇵🇰 101.50.83.146

🇫🇷 91.231.89.1

🇩🇪 69.5.169.239

🇲🇾 47.250.186.207

🇸🇬 47.84.141.50

🇪🇬 41.238.239.231

🇨🇴 38.191.81.186

🇬🇧 35.203.210.157

🇺🇸 20.64.106.38