JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 42.201.192.5

42.201.192.5 was found in our database!

This IP was reported 29 times. Confidence of Abuse is 28%: ?

28%

ISP	Huawei-Cloud-HK
Usage Type	Data Center/Web Hosting/Transit
ASN	AS136907
Domain Name	huawei.com
Country	🇭🇰 Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 42.201.192.5

Whois 42.201.192.5

IP Abuse Reports for 42.201.192.5:

This IP address has been reported a total of 29 times from 6 distinct sources. 42.201.192.5 was first reported on March 21st 2026, and the most recent report was 6 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-14 06:04:45 (6 hours ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.5 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.5 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 14 02:04:37.519256 2026] [security2:error] [pid 26472:tid 26472] [client 42.201.192.5:58921] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|renjunews.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "renjunews.com"] [uri "/about"] [unique_id "alXRdefFPm2Hgqxu0StY8gAAAAo"], referer: https://renjunews.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-14 02:24:16 (10 hours ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.5 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.5 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 13 22:24:10.716333 2026] [security2:error] [pid 23450:tid 23450] [client 42.201.192.5:22132] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.allafricaadventures.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.allafricaadventures.com"] [uri "/403.shtml"] [unique_id "alWdyq1187dnn8cn2sgkhQAAAAY"], referer: https://allafricaadventures.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-13 04:11:07 (1 day ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.5 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.5 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 13 00:11:00.146518 2026] [security2:error] [pid 13111:tid 13111] [client 42.201.192.5:37119] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.recetabook.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.recetabook.com"] [uri "/403.shtml"] [unique_id "alRlVC00sYF2ML3zQpe2vwAAABI"], referer: https://recetabook.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-07-06 06:40:34 (1 week ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-07-03 02:10:36 (1 week ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-01 12:20:46 (1 week ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.5 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.5 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 08:20:40.471710 2026] [security2:error] [pid 12573:tid 12573] [client 42.201.192.5:18632] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|laecovillage.org\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "laecovillage.org"] [uri "/tag/rvnc/"] [unique_id "akUGGGMJzoq5y3ybkAg0yQAAAAI"], referer: https://laecovillage.org/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-06-29 14:47:10 (2 weeks ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-06-29 04:40:52 (2 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-06-26 09:06:05 (2 weeks ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.5 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.5 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 05:06:01.262252 2026] [security2:error] [pid 19141:tid 19141] [client 42.201.192.5:60470] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.abcollie.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.abcollie.com"] [uri "/"] [unique_id "aj5A-e_R_7wbVXPcXvByRQAAAAI"], referer: https://abcollie.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-06-25 21:00:12 (2 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-06-25 09:20:45 (2 weeks ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-06-25 09:16:54 (2 weeks ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.5 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.5 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 05:16:50.611427 2026] [security2:error] [pid 31093:tid 31093] [client 42.201.192.5:12070] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|agingworkforcenews.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "agingworkforcenews.com"] [uri "/feeds/2083732731721879685/comments/default"] [unique_id "ajzyAqqxjjTuctSUGHIIWwAAACI"], referer: https://agingworkforcenews.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 backslash	2026-06-25 07:18:01 (2 weeks ago)	block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8	Bad Web Bot
🇺🇸 TPI-Abuse	2026-06-25 06:06:05 (2 weeks ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.5 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.5 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 02:06:00.828829 2026] [security2:error] [pid 15054:tid 15054] [client 42.201.192.5:42436] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|mavikalem.org\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "mavikalem.org"] [uri "/en/2023/02/15/mavi-kalem-is-in-the-earthquake-region"] [unique_id "ajzFSNk2VaOGp2pL2lg8tQAAAAg"], referer: https://mavikalem.org/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-22 22:49:39 (3 weeks ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.5 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.5 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 22 18:49:34.604637 2026] [security2:error] [pid 27753:tid 27753] [client 42.201.192.5:57172] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.bitcoinsubscribers.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.bitcoinsubscribers.com"] [uri "/"] [unique_id "ajm7_s7krtxE1NEx4CA-6wAAACU"], referer: https://www.bitcoinsubscribers.com/ show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 29 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 162.216.149.93

🇺🇸 103.203.57.21

🇯🇴 92.241.36.159

🇫🇷 91.231.89.228

🇺🇸 44.143.208.54

🇮🇳 35.207.202.141

🇨🇦 16.54.229.29

🇭🇰 183.179.164.210

🇷🇺 176.99.164.5

🇺🇸 162.216.150.247

🇩🇪 162.55.213.58

🇳🇱 91.92.40.66

🇪🇨 45.224.97.244

🇨🇴 45.173.69.4

🇺🇸 44.225.164.133

🇺🇸 34.82.14.155

🇺🇸 2a06:98c0:3600::103

🇩🇪 185.242.3.191

🇰🇿 176.124.88.29

🇵🇱 176.53.159.197