JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.125.146.58

103.125.146.58 was found in our database!

This IP was reported 157 times. Confidence of Abuse is 100%: ?

100%

ISP	IPXO-103-125-146-0-24
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	ipxo.com
Country	🇯🇵 Japan
City	Yokohama, Kanagawa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.125.146.58

Whois 103.125.146.58

IP Abuse Reports for 103.125.146.58:

This IP address has been reported a total of 157 times from 72 distinct sources. 103.125.146.58 was first reported on March 18th 2023, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2024-11-30 21:39:29 (1 year ago)	Detected denied connection attempts from IP 103.125.146.58 on 2024-11-30T21:39:29Z UTC targeting por ... show more Detected denied connection attempts from IP 103.125.146.58 on 2024-11-30T21:39:29Z UTC targeting port(s) 61639. Action taken: deny. Categories: Hacking. ASN: AS206092, Proxy/VPN: yes show less	Hacking
Anonymous	2024-11-30 19:42:08 (1 year ago)	Le 2024-11-30T19:42:07Z UTC, l'IP 103.125.146.58 a effectué plusieurs tentatives de connexion infruc ... show more Le 2024-11-30T19:42:07Z UTC, l'IP 103.125.146.58 a effectué plusieurs tentatives de connexion infructueuses vers le(s) port(s) 61639. Réponse : deny. Classifié sous les catégories : Hacking. ASN: AS206092, Proxy/VPN: yes show less	Hacking
Anonymous	2024-11-30 19:21:32 (1 year ago)	El 2024-11-30T19:21:32Z UTC, la IP 103.125.146.58 realizó múltiples intentos fallidos de conexión al ... show more El 2024-11-30T19:21:32Z UTC, la IP 103.125.146.58 realizó múltiples intentos fallidos de conexión al/los puerto(s) 61639. Respuesta: deny. Clasificado en categorías: Hacking. ASN: AS206092, Proxy/VPN: yes show less	Hacking
Anonymous	2024-09-08 12:57:59 (1 year ago)	Infected user bad webscan	Exploited Host
🇺🇸 TPI-Abuse	2024-08-30 18:04:12 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 103.125.146.58 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 103.125.146.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 30 14:04:05.129432 2024] [security2:error] [pid 9165:tid 9165] [client 103.125.146.58:51811] [client 103.125.146.58] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|transparentforest.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "transparentforest.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZtIJlX9MYe06vWa1j7K1jQAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇷 leolemos	2024-08-22 13:22:56 (1 year ago)	[Thu Aug 22 10:22:54.870480 2024] [proxy_fcgi:error] [pid 1395834:tid 271397741654208] [client 103.1 ... show more [Thu Aug 22 10:22:54.870480 2024] [proxy_fcgi:error] [pid 1395834:tid 271397741654208] [client 103.125.146.58:18935] AH01071: Got error 'Primary script unknown' [Thu Aug 22 10:22:55.256092 2024] [proxy_fcgi:error] [pid 1395834:tid 271396802130112] [client 103.125.146.58:18935] AH01071: Got error 'Primary script unknown' [Thu Aug 22 10:22:56.033126 2024] [proxy_fcgi:error] [pid 1395834:tid 271396793675968] [client 103.125.146.58:18935] AH01071: Got error 'Primary script unknown' show less	Brute-Force Web App Attack
Anonymous	2024-08-22 03:14:15 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇨🇭 zynex	2024-08-22 01:24:45 (1 year ago)	URL Probing: /sx.php	Web App Attack
Anonymous	2024-08-21 02:01:14 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇺🇸 mnsf	2024-08-21 01:09:28 (1 year ago)	Request Overload (106)	Brute-Force Web App Attack
🇧🇪 cmbplf	2024-07-03 06:33:56 (1 year ago)	2.668 requests to */xmlrpc.php	Brute-Force Bad Web Bot
Anonymous	2024-07-03 04:36:46 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇺🇸 TPI-Abuse	2024-06-15 09:18:50 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 103.125.146.58 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 103.125.146.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 15 05:18:46.547089 2024] [security2:error] [pid 17144] [client 103.125.146.58:50395] [client 103.125.146.58] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "krakowski.org"] [uri "/wp-config.php"] [unique_id "Zm1cdr-LqqjWkjjqN4c2FwAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-06-15 04:15:54 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2024-06-13 05:44:37 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH

Showing 121 to 135 of 157 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 91.196.152.216

🇸🇪 89.253.90.113

🇩🇪 217.154.229.122

🇹🇼 198.235.24.53

🇯🇵 156.227.235.173

🇬🇧 143.110.165.73

🇨🇳 120.48.39.73

🇮🇳 117.210.185.196

🇿🇦 102.64.46.227

🇳🇱 51.15.59.186

🇬🇧 35.203.210.83

🇫🇷 31.220.90.20

🇳🇱 31.220.43.63

🇷🇺 31.41.152.180

🇺🇸 173.255.223.149

🇺🇸 165.227.26.35

🇵🇰 103.191.123.103

🇧🇩 103.59.39.58

🇹🇼 101.13.5.26

🇺🇸 72.10.32.138