JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.125.146.90

103.125.146.90 was found in our database!

This IP was reported 168 times. Confidence of Abuse is 99%: ?

99%

ISP	IPXO-103-125-146-0-24
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	ipxo.com
Country	🇯🇵 Japan
City	Yokohama, Kanagawa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.125.146.90

Whois 103.125.146.90

IP Abuse Reports for 103.125.146.90:

This IP address has been reported a total of 168 times from 71 distinct sources. 103.125.146.90 was first reported on April 5th 2023, and the most recent report was 14 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇳 ThreatBook.io	2026-01-13 01:53:21 (4 months ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/103.125.146.90 2026-01 ... show more ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/103.125.146.90 2026-01-12 08:29:26 /caizhoujie/mediaserver/merge_requests/env;%2f.. 2026-01-12 05:19:42 /theme/api/..;/env 2026-01-12 05:19:41 /theme/env;.. show less	Web App Attack
🇨🇳 ThreatBook.io	2026-01-12 02:16:53 (4 months ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/103.125.146.90 2026-01 ... show more ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/103.125.146.90 2026-01-11 00:16:02 /ied-software/it/file?url=http://browserkernel.baidu.com/newpac31/videoproxy.conf.txt 2026-01-11 00:16:05 /ied-software/ai/actuator;%2f.. 2026-01-11 00:15:35 /ied-software/gitlab/laravel_post_debug 2026-01-11 00:15:42 /ied-software/actuator;%2f.. 2026-01-11 00:16:07 /ied-software/gitlab/.vscode/sftp.json 2026-01-11 00:15:17 /ied-software/it/api/env 2026-01-11 00:15:19 /ied-software/ai/aglwir.txt 2026-01-11 00:16:11 /ied-software 2026-01-11 00:15:51 /ied-software/i/.travis.yml 2026-01-11 00:15:19 /ied-software/a/api/actuator show less	Web App Attack
🇨🇳 ThreatBook.io	2026-01-09 02:03:55 (4 months ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/103.125.146.90 2026-01 ... show more ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/103.125.146.90 2026-01-08 00:45:34 /web-gateway/ 2026-01-08 13:57:01 /d/actuator/env 2026-01-08 13:56:42 /d/config.php.bak 2026-01-08 00:25:50 /search/env; 2026-01-08 13:56:42 /dmc/download?url=http://browserkernel.baidu.com/newpac31/videoproxy.conf.txt 2026-01-08 03:33:45 /prd-api/ 2026-01-08 00:25:49 /search/%2e%2e%3b/env 2026-01-08 00:45:33 /application/ 2026-01-08 00:45:35 /activity/ 2026-01-08 07:17:35 /api/dashboards/home show less	Web App Attack
🇺🇸 WeekendWeb	2026-01-09 01:20:35 (4 months ago)	Wordpress Vunerability attack	Web App Attack
🇺🇸 xmission.com	2026-01-08 21:48:33 (4 months ago)	103.125.146.90 - - [08/Jan/2026:14:48:33 -0700] "POST /xmlrpc.php HTTP/1.1" 200 415 "-" "Mozilla/5.0 ... show more 103.125.146.90 - - [08/Jan/2026:14:48:33 -0700] "POST /xmlrpc.php HTTP/1.1" 200 415 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" ... show less	Web App Attack
🇩🇪 LRob.fr	2026-01-08 20:49:13 (4 months ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack
🇳🇿 Antinson	2026-01-07 19:26:01 (4 months ago)	Scraping with a high error ratio and request rate	Bad Web Bot
🇨🇳 ThreatBook.io	2025-12-16 01:36:29 (5 months ago)	ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/103.125.146.90 2025 ... show more ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/103.125.146.90 2025-12-15 22:47:08 /manager/html 2025-12-15 22:47:11 /manager/html 2025-12-15 22:48:57 /manager/html show less	Web App Attack
🇺🇦 URAN Publishing Service	2025-12-05 18:13:58 (5 months ago)	103.125.146.90 - - [05/Dec/2025:20:13:58 +0200] "GET /wp-includes/customize/wp-conflg.php HTTP/1.1" ... show more 103.125.146.90 - - [05/Dec/2025:20:13:58 +0200] "GET /wp-includes/customize/wp-conflg.php HTTP/1.1" 404 276 "-" "Go-http-client/1.1" ... show less	Web App Attack
🇺🇦 URAN Publishing Service	2025-12-05 12:33:26 (5 months ago)	103.125.146.90 - - [05/Dec/2025:14:33:25 +0200] "GET /wp-content/plugins/ioxi/ioxi/dropdown.php HTTP ... show more 103.125.146.90 - - [05/Dec/2025:14:33:25 +0200] "GET /wp-content/plugins/ioxi/ioxi/dropdown.php HTTP/1.1" 404 280 "-" "Go-http-client/1.1" ... show less	Web App Attack
🇺🇦 URAN Publishing Service	2025-12-05 06:30:17 (5 months ago)	103.125.146.90 - - [05/Dec/2025:08:30:17 +0200] "GET /wp-includes/block-bindings/ HTTP/1.1" 404 276 ... show more 103.125.146.90 - - [05/Dec/2025:08:30:17 +0200] "GET /wp-includes/block-bindings/ HTTP/1.1" 404 276 "-" "Go-http-client/1.1" ... show less	Web App Attack
🇺🇦 URAN Publishing Service	2025-12-05 04:59:23 (5 months ago)	103.125.146.90 - - [05/Dec/2025:06:59:12 +0200] "GET /wp-includes/admin.php HTTP/1.1" 404 288 "-" "G ... show more 103.125.146.90 - - [05/Dec/2025:06:59:12 +0200] "GET /wp-includes/admin.php HTTP/1.1" 404 288 "-" "Go-http-client/1.1" 103.125.146.90 - - [05/Dec/2025:06:59:22 +0200] "GET /wp-admin/css/ HTTP/1.1" 404 288 "-" "Go-http-client/1.1" ... show less	Web App Attack
🇩🇪 london2038.com	2025-11-22 14:15:51 (6 months ago)	Probing for exploits 103.125.146.90 - - [22/Nov/2025:15:15:44 +0100] "GET //about.php HTTP/1.1" 301 ... show more Probing for exploits 103.125.146.90 - - [22/Nov/2025:15:15:44 +0100] "GET //about.php HTTP/1.1" 301 169 "-" "Go-http-client/1.1" 103.125.146.90 - - [22/Nov/2025:15:15:49 +0100] "GET //autoload_classmap.php HTTP/1.1" 301 169 "-" "Go-http-client/1.1" show less	Hacking Web App Attack
🇨🇭 backslash	2025-11-22 12:40:05 (6 months ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇦🇺 MAGIC	2025-11-14 02:33:24 (6 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot

Showing 61 to 75 of 168 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇰 110.36.86.83

🇹🇼 198.235.24.103

🇬🇧 193.163.125.157

🇸🇬 134.185.85.99

🇰🇷 118.45.63.114

🇸🇬 94.231.206.1

🇸🇬 47.237.167.49

🇷🇺 46.161.50.109

🇳🇱 45.198.224.5

🇭🇰 45.142.154.10

🇺🇸 212.85.28.210

🇷🇼 197.243.14.52

🇪🇬 196.148.37.229

🇲🇽 186.96.145.241

🇺🇸 172.239.62.109

🇯🇵 156.227.233.245

🇮🇳 106.198.1.211

🇫🇷 91.231.89.199

🇳🇱 45.148.10.151

🇺🇸 216.180.246.29