JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 202.125.68.40

202.125.68.40 was found in our database!

This IP was reported 33 times. Confidence of Abuse is 50%: ?

50%

ISP	Grameen CyberNet
Usage Type	Fixed Line ISP
ASN	AS138004
Domain Name	grameencybernet.net
Country	🇧🇩 Bangladesh
City	Dhaka, Dhaka Division

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 202.125.68.40

Whois 202.125.68.40

IP Abuse Reports for 202.125.68.40:

This IP address has been reported a total of 33 times from 19 distinct sources. 202.125.68.40 was first reported on February 10th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 kosada.com	2026-09-29 08:51:38 (1 day ago)	Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B0%5 ... show more Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B0%5D=43&topics%5B1%5D=32&topics%5B2%5D=29&topics%5B3%5D=27 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36") show less	DDoS Attack Bad Web Bot
🇫🇷 bigorre.org	2026-09-28 10:36:57 (2 days ago)	Unidentified crawling: not a self-announced bot in user-agent	Bad Web Bot
🇩🇪 LRob	2026-09-28 00:30:14 (2 days ago)	Shop search flood (L7 DDoS) \| path: /30-meilleur-velo-entre-2000-et-3000-euros \| query: order=produc ... show more Shop search flood (L7 DDoS) \| path: /30-meilleur-velo-entre-2000-et-3000-euros \| query: order=product.position.asc&productListView=grid&q=Taille-XXL/Famille-Grandurance \| 2026-09-28 00:30 UTC show less	DDoS Attack Web App Attack
🇩🇪 Inamin	2026-09-23 18:12:08 (6 days ago)	202.125.68.40 - - [24/Sep/2026:02:12:05 +0800] "GET /index.php?title=%E7%89%B9%E6%AE%8A:%E9%A9%97%E8 ... show more 202.125.68.40 - - [24/Sep/2026:02:12:05 +0800] "GET /index.php?title=%E7%89%B9%E6%AE%8A:%E9%A9%97%E8%AD%89%E7%A2%BC/image&wpCaptchaId=6945108224053176198 HTTP/2.0" 403 153 "-" "Mozilla/5.0 (Macintosh; U; PPC Mac OS X 10_10_1; rv:1.9.2.20) Gecko/6263-09-25 05:04:08.096756 Firefox/3.8" ... show less	Brute-Force
🇺🇸 TPI-Abuse	2026-09-23 05:41:56 (1 week ago)	(mod_security) mod_security (id:210350) triggered by 202.125.68.40 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 202.125.68.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 23 01:41:50.950120 2026] [security2:error] [pid 29634:tid 29634] [client 202.125.68.40:55894] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|knoxvillelimos.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "knoxvillelimos.com"] [uri "/"] [unique_id "arNmnpmmKYbcqoDMprwixgAAAAU"], referer: https://chocolatefestknoxville.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 鬼影233	2026-09-21 08:00:55 (1 week ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-20 17:44:34 (1 week ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 show less	Bad Web Bot
🇺🇸 kosada.com	2026-09-19 20:13:57 (1 week ago)	Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B0%5 ... show more Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B0%5D=52&topics%5B2%5D=79&topics%5B3%5D=60&topics%5B4%5D=47 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:147.0) Gecko/20100101 Firefox/147.0") show less	DDoS Attack Bad Web Bot
🇺🇸 鬼影233	2026-09-19 06:41:10 (1 week ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-18 03:32:50 (1 week ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-17 18:09:07 (1 week ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-09-17 13:59:07 (1 week ago)	(mod_security) mod_security (id:210350) triggered by 202.125.68.40 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 202.125.68.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 09:59:02.993507 2026] [security2:error] [pid 9287:tid 9287] [client 202.125.68.40:51270] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|bonegym.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "bonegym.com"] [uri "/"] [unique_id "aqvyJjiaTZzese3EaW9xeAAAABQ"], referer: https://dacheckerseo.space/dir/backlinks-for-websites-27143 show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 LRob	2026-09-17 12:29:14 (1 week ago)	Asking over plain http and never following the redirect served — a crawler that reads nothing it ask ... show more Asking over plain http and never following the redirect served — a crawler that reads nothing it asks for \| method: GET \| path: /sitemap.xml \| 2026-09-17 12:29 UTC show less	Bad Web Bot
🇫🇷 bigorre.org	2026-09-16 15:26:44 (1 week ago)	Unidentified crawling: not a self-announced bot in user-agent	Bad Web Bot
🇪🇸 el-brujo	2026-09-13 03:22:31 (2 weeks ago)	DDoS Attack Layer 7	DDoS Attack

Showing 1 to 15 of 33 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 223.197.146.164

🇭🇰 223.197.146.163

🇺🇸 198.44.81.240

🇺🇸 173.239.214.93

🇬🇧 161.35.46.137

🇩🇪 148.153.50.179

🇺🇸 65.49.1.237

🇺🇸 65.49.1.236

🇰🇷 210.123.87.158

🇨🇦 208.96.233.67

🇨🇦 207.219.221.101

🇨🇳 119.96.131.8

🇺🇸 76.120.30.106

🇺🇸 65.49.1.235

🇺🇸 65.49.1.232

🇧🇬 212.36.20.252

🇪🇸 207.188.158.216

🇵🇰 154.91.162.197

🇺🇸 134.33.67.109

🇨🇳 120.48.181.68