JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 42.201.192.79

42.201.192.79 was found in our database!

This IP was reported 24 times. Confidence of Abuse is 34%: ?

34%

ISP	Huawei-Cloud-HK
Usage Type	Data Center/Web Hosting/Transit
ASN	AS136907
Domain Name	huawei.com
Country	🇭🇰 Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 42.201.192.79

Whois 42.201.192.79

IP Abuse Reports for 42.201.192.79:

This IP address has been reported a total of 24 times from 6 distinct sources. 42.201.192.79 was first reported on May 9th 2026, and the most recent report was 23 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-13 17:39:15 (23 hours ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.79 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 13 13:39:12.185610 2026] [security2:error] [pid 30515:tid 30515] [client 42.201.192.79:45708] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|farsipraiseclub.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "farsipraiseclub.com"] [uri "/"] [unique_id "alUiwMb3dRVbvDn_iXu8fAAAAAI"], referer: https://farsipraiseclub.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-07-06 13:25:51 (1 week ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇫🇷 bigorre.org	2026-07-06 06:22:33 (1 week ago)	unidentified crawl, no bot reference in user agent	Bad Web Bot
🇺🇸 kosada.com	2026-07-06 06:10:40 (1 week ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-07-03 03:25:45 (1 week ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-07-02 23:25:48 (1 week ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
Anonymous	2026-06-30 08:25:35 (2 weeks ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇺🇸 kosada.com	2026-06-29 14:20:33 (2 weeks ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-06-29 06:55:52 (2 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-06-25 15:07:10 (2 weeks ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.79 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 11:07:07.780244 2026] [security2:error] [pid 14827:tid 14827] [client 42.201.192.79:52053] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|socialstudiesforkids.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "socialstudiesforkids.com"] [uri "/articles/worldhistory/hundreddaysoffensive.htm"] [unique_id "aj1EG0V8iZIgA-D_I9ADgAAAABo"], referer: https://socialstudiesforkids.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-06-25 09:20:19 (2 weeks ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-06-25 04:24:25 (2 weeks ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.79 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 00:24:17.861513 2026] [security2:error] [pid 7837:tid 7837] [client 42.201.192.79:18726] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|arsenalfordemocracy.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/2015/05/07/the-economist-on-technocracy-in-democracies"] [unique_id "ajytcSpuuZyvGABveF0E5QAAAAU"], referer: https://arsenalfordemocracy.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-25 03:16:26 (2 weeks ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.79 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 23:16:18.746612 2026] [security2:error] [pid 10536:tid 10536] [client 42.201.192.79:55880] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|thenursingsite.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "thenursingsite.com"] [uri "/category/nurse-life-coach"] [unique_id "ajydgvE_K4BK2tXB0uiKXQAAAAg"], referer: https://thenursingsite.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-22 22:51:49 (3 weeks ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.79 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 22 18:51:42.874005 2026] [security2:error] [pid 25542:tid 25542] [client 42.201.192.79:48764] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.bitcoinsubscribers.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.bitcoinsubscribers.com"] [uri "/"] [unique_id "ajm8frhVF-ajxcIvwqgd3wAAAAA"], referer: https://www.bitcoinsubscribers.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-22 09:29:54 (3 weeks ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.79 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 22 05:29:49.907640 2026] [security2:error] [pid 31059:tid 31059] [client 42.201.192.79:17096] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|eileensharaga.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "eileensharaga.com"] [uri "/"] [unique_id "ajkAjcJe6jLINSxLH37_NQAAAAA"], referer: https://eileensharaga.net/ show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 24 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇪 195.7.40.149

🇵🇱 176.53.159.197

🇨🇳 120.48.24.187

🇷🇴 92.118.39.49

🇷🇴 80.94.92.179

🇺🇸 45.66.211.50

🇫🇷 5.49.25.95

🇨🇳 222.244.170.207

🇰🇷 211.223.107.86

🇧🇷 179.185.18.67

🇰🇿 95.58.255.251

🇳🇱 91.92.40.24

🇺🇸 66.229.15.123

🇱🇹 62.60.130.219

🇳🇱 45.148.10.67

🇺🇸 44.182.189.62

🇧🇷 20.206.146.230

🇷🇴 2.57.122.209

🇺🇸 2602:80d:1008::79

🇻🇳 2001:ee0:5594:58a0:384c:f10e:5617:a3d5