JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 42.240.130.22

42.240.130.22 was found in our database!

This IP was reported 53 times. Confidence of Abuse is 2%: ?

ISP	Shanghai UCloud Information Technology Company Limited
Usage Type	Fixed Line ISP
ASN	AS58466
Domain Name	ucloud.cn
Country	🇨🇳 China
City	Guangzhou, Guangdong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 42.240.130.22

Whois 42.240.130.22

IP Abuse Reports for 42.240.130.22:

This IP address has been reported a total of 53 times from 31 distinct sources. 42.240.130.22 was first reported on January 18th 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇦 st-secure-team	2026-10-07 15:20:00 (1 week ago)	Плохой бот	Bad Web Bot
🇨🇦 polycoda	2026-07-03 10:14:01 (3 months ago)	AutoBlock: 📡 Port Scan (Non Decay-Based)	Port Scan
🇷🇺 Mga Admin	2026-07-03 10:07:26 (3 months ago)	[Fri Jul 03 17:07:25.788278 2026] [authz_core:error] [pid 2213763:tid 2213794] [client 42.240.130.22 ... show more [Fri Jul 03 17:07:25.788278 2026] [authz_core:error] [pid 2213763:tid 2213794] [client 42.240.130.22:62164] AH01630: client denied by server configuration: /etc/httpd/htdocs ... show less	Web App Attack
🇨🇭 4server	2026-07-03 09:34:18 (3 months ago)	[FriJul0311:34:14.4593982026][security2:error][pid1435709:tid1436011][client42.240.130.22:0]ModSecur ... show more [FriJul0311:34:14.4593982026][security2:error][pid1435709:tid1436011][client42.240.130.22:0]ModSecurity:Accessdeniedwithcode403$phase2$.OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded$TotalScore:5$\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"www.aid-web.com\"][uri\"/\"][unique_id\"akeCFseeAXhVlc7Tn0ig-QAAAQQ\"] show less	Hacking Web App Attack
Anonymous	2026-07-03 08:55:03 (3 months ago)	IP banned by Fail2Ban in jail nginx-abusive-ips	Web App Attack Brute-Force Bad Web Bot
🇭🇺 kranem	2026-07-03 06:00:15 (3 months ago)	Triggered Cloudflare WAF from CN. Action taken: BLOCK ASN: 58466 (CHINANET Guangdong province networ ... show more Triggered Cloudflare WAF from CN. Action taken: BLOCK ASN: 58466 (CHINANET Guangdong province network) Protocol: HTTP/2 (GET method) Endpoint: / Timestamp: 2026-07-03T04:48:15Z User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36 show less	Bad Web Bot
🇩🇪 Darki1962	2026-07-03 03:20:02 (3 months ago)	10 hits, proto=tcp, ports=443,80	Port Scan Hacking Brute-Force SSH
Anonymous	2026-07-02 12:53:47 (3 months ago)		DNS Compromise DDoS Attack
🇨🇿 huginet	2026-07-02 12:26:55 (3 months ago)	42.240.130.22 - - [02/Jul/2026:14:26:50 +0200] "GET / HTTP/1.1" 403 32175 "-" "Mozilla/5.0 (Windows ... show more 42.240.130.22 - - [02/Jul/2026:14:26:50 +0200] "GET / HTTP/1.1" 403 32175 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36" 42.240.130.22 - - [02/Jul/2026:14:26:53 +0200] "GET /favicon.ico HTTP/1.1" 403 32175 "http://autodiscover.centrum-eko-likvidace.org" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36" ... show less	Web Spam Web App Attack
🇬🇧 poundawebsiteltd	2026-07-02 08:06:16 (3 months ago)	Web App Attack (ModSecurity Block). Evidence: [REDACTED_DOMAIN]:80 42.240.130.22 - - [02/Jul/2026:09 ... show more Web App Attack (ModSecurity Block). Evidence: [REDACTED_DOMAIN]:80 42.240.130.22 - - [02/Jul/2026:09:06:14 +0100] GET / HTTP/1.1 403 177 - Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36 show less	Web App Attack
🇷🇺 Mga Admin	2026-07-02 06:36:20 (3 months ago)	[Thu Jul 02 13:36:19.470148 2026] [authz_core:error] [pid 604372:tid 604417] [client 42.240.130.22:5 ... show more [Thu Jul 02 13:36:19.470148 2026] [authz_core:error] [pid 604372:tid 604417] [client 42.240.130.22:56472] AH01630: client denied by server configuration: /etc/httpd/htdocs ... show less	Web App Attack
🇨🇭 flaus	2026-07-02 00:56:35 (3 months ago)	$f2bV_matches	Hacking Bad Web Bot Web App Attack
🇩🇪 4server	2026-07-01 21:53:44 (3 months ago)	[WedJul0123:53:37.5068522026][security2:error][pid2069168:tid2069232][client42.240.130.22:0]ModSecur ... show more [WedJul0123:53:37.5068522026][security2:error][pid2069168:tid2069232][client42.240.130.22:0]ModSecurity:Accessdeniedwithcode403$phase2$.OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded$TotalScore:5$\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"www.flyingberber-finale.artisteer-italia.org\"][uri\"/\"][unique_id\"akWMYSANrRUFdCllCgjohQAAAIM\"] show less	Port Scan Brute-Force Web App Attack
🇺🇸 xmission.com	2026-07-01 08:56:47 (3 months ago)	Blocked by UFW (TCP on 443) Source port: 50688 TTL: 43 Packet length: 60 TOS: 0x08 This report (for ... show more Blocked by UFW (TCP on 443) Source port: 50688 TTL: 43 Packet length: 60 TOS: 0x08 This report (for 42.240.130.22) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
Anonymous	2026-07-01 01:47:23 (3 months ago)	42.240.130.22 - - [01/Jul/2026:03:47:20 +0200] "GET / HTTP/1.1" 403 5768 "http://xvm-127-186.dc2.ghs ... show more 42.240.130.22 - - [01/Jul/2026:03:47:20 +0200] "GET / HTTP/1.1" 403 5768 "http://xvm-127-186.dc2.ghst.net" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36" ... show less	Web App Attack

Showing 1 to 15 of 53 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 130.12.180.32

🇷🇺 109.184.231.114

🇺🇸 66.132.186.185

🇺🇸 66.132.172.125

🇮🇳 49.47.70.238

🇺🇦 31.42.57.206

🇺🇸 8.230.127.57

🇧🇷 179.61.154.156

🇺🇦 176.36.114.108

🇨🇴 161.10.0.52

🇺🇸 134.209.51.221

🇮🇩 114.12.11.82

🇳🇱 93.123.109.53

🇷🇺 92.39.223.210

🇺🇿 84.54.71.136

🇺🇸 76.79.213.70

🇺🇸 66.240.192.82

🇮🇳 49.43.92.215

🇳🇱 45.148.10.152

🇵🇰 39.53.201.86