JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 42.201.192.89

42.201.192.89 was found in our database!

This IP was reported 27 times. Confidence of Abuse is 27%: ?

27%

ISP	Huawei-Cloud-HK
Usage Type	Data Center/Web Hosting/Transit
ASN	AS136907
Domain Name	huawei.com
Country	🇭🇰 Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 42.201.192.89

Whois 42.201.192.89

IP Abuse Reports for 42.201.192.89:

This IP address has been reported a total of 27 times from 4 distinct sources. 42.201.192.89 was first reported on May 4th 2026, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-15 03:16:07 (5 hours ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.89 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 14 23:16:01.912772 2026] [security2:error] [pid 26011:tid 26011] [client 42.201.192.89:40632] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|tpdtuberental.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "tpdtuberental.com"] [uri "/"] [unique_id "alb7cYxOcUtX7yptNqKBlwAAAAg"], referer: https://tpdtuberental.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-14 11:13:44 (21 hours ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.89 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 14 07:13:37.770904 2026] [security2:error] [pid 4922:tid 4922] [client 42.201.192.89:30616] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|midwayisland.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "midwayisland.com"] [uri "/midway-blog/gooney-bird-laysan-albatross-phoebastria-immutabilis-at-midway-island"] [unique_id "alYZ4U0i5UEttoEfRzv3AQAAAAw"], referer: https://midwayisland.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-14 00:53:56 (1 day ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.89 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 13 20:53:51.454839 2026] [security2:error] [pid 6724:tid 6724] [client 42.201.192.89:47036] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|al-bukhari.org\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "al-bukhari.org"] [uri "/"] [unique_id "alWInySEI3oDUcZ1iojbQgAAAAw"], referer: https://al-bukhari.org/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-13 20:29:04 (1 day ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.89 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 13 16:29:00.674215 2026] [security2:error] [pid 9007:tid 9007] [client 42.201.192.89:27268] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|infojeffreysbay.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "infojeffreysbay.com"] [uri "/"] [unique_id "alVKjPl5MDT0AKgFBJzgZAAAABM"], referer: https://infojeffreysbay.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-13 19:50:23 (1 day ago)	(mod_security) mod_security (id:210350) triggered by 42.201.192.89 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 42.201.192.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 13 15:50:15.904672 2026] [security2:error] [pid 22848:tid 22848] [client 42.201.192.89:32158] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|bickleton.org\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "bickleton.org"] [uri "/bickleton-area-photos/attachment/old_barn_winter"] [unique_id "alVBd8Gs7mQKzm0zfXxjgQAAABA"], referer: https://bickleton.org/ show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-07 06:10:26 (1 week ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇺🇸 kosada.com	2026-07-06 19:40:43 (1 week ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-07-06 05:25:46 (1 week ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-07-03 12:55:43 (1 week ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-07-02 23:10:31 (1 week ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
Anonymous	2026-06-30 08:06:40 (2 weeks ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇺🇸 kosada.com	2026-06-29 15:08:19 (2 weeks ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-06-29 06:55:54 (2 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-06-25 21:00:13 (2 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-06-25 09:21:59 (2 weeks ago)	Web bot: DDoS	DDoS Attack Bad Web Bot

Showing 1 to 15 of 27 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 115.209.246.233

🇬🇧 163.5.138.10

🇫🇷 85.217.140.11

🇸🇬 43.156.36.169

🇨🇳 42.88.103.10

🇺🇸 20.124.88.78

🇹🇼 1.162.231.16

🇰🇭 175.100.52.140

🇫🇷 169.155.251.43

🇸🇬 167.172.87.96

🇺🇸 162.216.150.9

🇺🇸 161.115.235.6

🇺🇸 136.116.189.132

🇷🇴 92.118.39.50

🇷🇺 87.229.254.207

🇺🇸 18.190.15.50

🇳🇱 5.61.209.43

🇺🇸 192.169.249.148

🇺🇸 161.115.234.198

🇨🇳 116.147.110.30