JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 42.201.192.78

42.201.192.78 was found in our database!

This IP was reported 46 times. Confidence of Abuse is 41%: ?

41%

ISP	Huawei-Cloud-HK
Usage Type	Data Center/Web Hosting/Transit
ASN	AS136907
Domain Name	huawei.com
Country	🇭🇰 Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 42.201.192.78

Whois 42.201.192.78

IP Abuse Reports for 42.201.192.78:

This IP address has been reported a total of 46 times from 8 distinct sources. 42.201.192.78 was first reported on April 15th 2026, and the most recent report was 7 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Reinhard	2026-07-29 20:49:00 (7 hours ago)	Harvesting non-existent pages or unknown malicious BOT.	Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-29 09:26:16 (19 hours ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.78 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.78 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 29 05:25:57.664198 2026] [security2:error] [pid 23002:tid 23002] [client 42.201.192.78:33988] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|ofertasdetrabajosyempleos.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "ofertasdetrabajosyempleos.com"] [uri "/"] [unique_id "amnHJfHaHe0eKZqOkdzNKgAAAGI"], referer: https://ofertasdetrabajosyempleos.com/ show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-27 21:56:05 (2 days ago)	ModSecurity rejected a query	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 09:21:45 (2 days ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.78 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.78 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 05:21:38.208477 2026] [security2:error] [pid 299314:tid 299314] [client 42.201.192.78:38668] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|katharinanitzpon.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "katharinanitzpon.com"] [uri "/"] [unique_id "amcjIqBcTV1uSBsbMiI4egAAABA"], referer: https://katharinanitzpon.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 22:09:51 (5 days ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.78 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.78 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 18:09:45.824945 2026] [security2:error] [pid 984690:tid 984690] [client 42.201.192.78:37285] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|carolinafootprints.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "carolinafootprints.com"] [uri "/category/history-landmarks"] [unique_id "amPiqWq3xHMjP3VQXJFh1AAAAAs"], referer: https://carolinafootprints.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 06:44:00 (5 days ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.78 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.78 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 02:43:57.303966 2026] [security2:error] [pid 892064:tid 892064] [client 42.201.192.78:30269] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.kerrywood.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.kerrywood.com"] [uri "/books-fake-news/"] [unique_id "amMJrcz4z85VFFp-pyQBbgAAABk"], referer: https://kerrywood.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-23 11:41:13 (6 days ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.78 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.78 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 23 07:41:08.517262 2026] [security2:error] [pid 1998915:tid 1998915] [client 42.201.192.78:31994] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|intra.es\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "intra.es"] [uri "/"] [unique_id "amH91B3RwoW9oR_ZAQNWfQAAAA8"], referer: https://intra.es/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-23 08:40:03 (6 days ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.78 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.78 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 23 04:39:57.616885 2026] [security2:error] [pid 2706657:tid 2706657] [client 42.201.192.78:20331] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|deborahbein.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "deborahbein.com"] [uri "/artblog"] [unique_id "amHTXUsAaamfhgFFyiJuawAAAAM"], referer: https://deborahbein.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-23 08:08:09 (6 days ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.78 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.78 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 23 04:08:06.235229 2026] [security2:error] [pid 2100657:tid 2100657] [client 42.201.192.78:42273] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|acarsubscription.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "acarsubscription.com"] [uri "/car-subscription-los-angeles"] [unique_id "amHL5vuLLA5lvhIRE8wROgAAAAA"], referer: https://acarsubscription.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-21 07:03:56 (1 week ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.78 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.78 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 21 03:03:51.706099 2026] [security2:error] [pid 3446:tid 3446] [client 42.201.192.78:40587] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|transcapitalsolutions.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "transcapitalsolutions.com"] [uri "/"] [unique_id "al8Z14_3jrLOqoML63rOeQAAABQ"], referer: https://transcapitalsolutions.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-19 23:04:09 (1 week ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.78 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.78 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 19:04:02.377266 2026] [security2:error] [pid 19713:tid 19713] [client 42.201.192.78:22067] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|oximoron.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "oximoron.com"] [uri "/"] [unique_id "al1X4twjQ2Azo7vCKa8jFAAAAAo"], referer: https://oximoron.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-19 06:28:59 (1 week ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.78 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.78 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 02:28:54.613985 2026] [security2:error] [pid 21349:tid 21349] [client 42.201.192.78:26844] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|encoremtmorris.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "encoremtmorris.com"] [uri "/"] [unique_id "alxupulGc3rLzjWqo-7TiwAAAAk"], referer: https://encoremtmorris.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-19 06:08:19 (1 week ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.78 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.78 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 02:08:12.515142 2026] [security2:error] [pid 7860:tid 7860] [client 42.201.192.78:59112] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|greensealusa.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "greensealusa.com"] [uri "/"] [unique_id "alxpzPwvlu_raUmYmnkKewAAAAQ"], referer: https://greensealusa.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-18 13:42:51 (1 week ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.78 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.78 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 09:42:46.397613 2026] [security2:error] [pid 2118168:tid 2118168] [client 42.201.192.78:35340] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|bitcoinsubscribers.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "bitcoinsubscribers.com"] [uri "/"] [unique_id "aluC1v2kOmzSwHZgI-eOSgAAAAQ"], referer: https://bitcoinsubscribers.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-18 12:10:53 (1 week ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.78 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.78 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 08:10:46.270619 2026] [security2:error] [pid 31410:tid 31431] [client 42.201.192.78:33548] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|slingshotpro.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "slingshotpro.com"] [uri "/"] [unique_id "alttRrXB8uY9LaO-4jHSOAAAAJA"], referer: https://slingshotpro.com/ show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 46 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 212.87.219.172

🇭🇰 199.45.154.186

🇲🇽 187.170.224.116

🇺🇦 176.103.3.47

🇺🇸 152.32.205.184

🇭🇰 119.246.15.94

🇨🇳 119.184.23.172

🇰🇪 102.208.234.6

🇧🇫 102.179.209.120

🇺🇸 66.240.236.119

🇺🇸 51.81.37.150

🇺🇸 45.79.8.221

🇭🇰 43.242.203.160

🇵🇰 43.230.94.182

🇳🇱 34.158.1.133

🇧🇪 34.38.252.133

🇨🇿 31.222.12.180

🇸🇪 31.134.6.162

🇳🇴 20.100.173.28

🇫🇷 5.196.97.25