JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.125.179.29

103.125.179.29 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 67%: ?

67%

ISP	KK Networks
Usage Type	Fixed Line ISP
ASN	AS136969
Hostname(s)	103.125.179-29.kkn.com.pk
Domain Name	kknetworks.com.pk
Country	🇵🇰 Pakistan
City	Lahore, Punjab

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.125.179.29

Whois 103.125.179.29

IP Abuse Reports for 103.125.179.29:

This IP address has been reported a total of 20 times from 16 distinct sources. 103.125.179.29 was first reported on May 7th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-23 16:37:10 (2 days ago)	(mod_security) mod_security (id:240335) triggered by 103.125.179.29 (103.125.179-29.kkn.com.pk): 1 i ... show more (mod_security) mod_security (id:240335) triggered by 103.125.179.29 (103.125.179-29.kkn.com.pk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 12:37:04.585808 2026] [security2:error] [pid 8215:tid 8215] [client 103.125.179.29:53010] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.125.179.29 (+1 hits since last alert)\|67ronin.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "67ronin.com"] [uri "/xmlrpc.php"] [unique_id "ajq2MIvF4VKPL5ncsth2rgAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 MatStef132	2026-06-21 21:24:19 (4 days ago)	MatShield L7: blocked on mathost.eu (ua-quarantined)	Bad Web Bot
🇺🇸 factor1	2026-06-17 12:58:33 (1 week ago)	Fail2ban at saturn Reports Abuse.	Brute-Force Web App Attack
🇫🇷 masterguru	2026-06-17 02:25:18 (1 week ago)	xmlrpc request blocked, no referer. Pattern match "xmlrpc.php" at REQUEST_URI. (88010-201)	Hacking
🇩🇪 netclix.gr	2026-06-17 00:52:26 (1 week ago)	(wordpress) Failed wordpress login from 103.125.179.29 (PK/Pakistan/103.125.179-29.kkn.com.pk): (CF ... show more (wordpress) Failed wordpress login from 103.125.179.29 (PK/Pakistan/103.125.179-29.kkn.com.pk): (CF_ENABLE) show less	Brute-Force
🇫🇷 dynamix	2026-06-17 00:21:48 (1 week ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
Anonymous	2026-06-16 23:10:24 (1 week ago)	[ssd5.kdns.gr] httpd-xmlrpc-post: sites=parthenios.org; logs=/var/log/httpd/domains/parthenios.org.l ... show more [ssd5.kdns.gr] httpd-xmlrpc-post: sites=parthenios.org; logs=/var/log/httpd/domains/parthenios.org.log; samples=/xmlrpc.php show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-16 15:23:44 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 103.125.179.29 (103.125.179-29.kkn.com.pk): 1 i ... show more (mod_security) mod_security (id:240335) triggered by 103.125.179.29 (103.125.179-29.kkn.com.pk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 11:23:38.790685 2026] [security2:error] [pid 3936:tid 3936] [client 103.125.179.29:13117] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.125.179.29 (+1 hits since last alert)\|calvarycavaliers.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "calvarycavaliers.org"] [uri "/xmlrpc.php"] [unique_id "ajFqemUDioIQkHXfxCysPQAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇰🇷 zlhIcd	2026-06-16 00:28:59 (1 week ago)	103.125.179.29 - - [15/Jun/2026:19:36:30 +0900] "GET /pcwiki/index.php?days=30&from=20251114134202&h ... show more 103.125.179.29 - - [15/Jun/2026:19:36:30 +0900] "GET /pcwiki/index.php?days=30&from=20251114134202&hideanons=1&hideliu=1&limit=250&title=%ED%8A%B9%EC%88%98%EA%B8%B0%EB%8A%A5:%EB%A7%81%ED%81%AC%EC%B5%9C%EA%B7%BC%EB%B0%94%EB%80%9C HTTP/1.1" 404 460 "-" "Mozilla/5.0 (Macintosh; U; PPC Mac OS X; fr-fr) AppleWebKit/85.8.5 (KHTML, like Gecko) Safari/85.8.1" ... show less	Web Spam SQL Injection Bad Web Bot Web App Attack
🇺🇸 integrantservices.com	2026-06-14 18:41:35 (1 week ago)	(wordpress) Failed wordpress login from 103.125.179.29 (PK/Pakistan/103.125.179-29.kkn.com.pk)	Brute-Force
🇺🇸 TPI-Abuse	2026-06-13 22:50:44 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 103.125.179.29 (103.125.179-29.kkn.com.pk): 1 i ... show more (mod_security) mod_security (id:240335) triggered by 103.125.179.29 (103.125.179-29.kkn.com.pk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 18:50:38.278419 2026] [security2:error] [pid 13278:tid 13278] [client 103.125.179.29:63608] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.125.179.29 (+1 hits since last alert)\|churchbehindthewalls.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "churchbehindthewalls.com"] [uri "/xmlrpc.php"] [unique_id "ai3evm40qaEuXp3uZVvApgAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-13 12:35:05 (1 week ago)	Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/1.1	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-06-12 19:30:12 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 103.125.179.29 (103.125.179-29.kkn.com.pk): 1 i ... show more (mod_security) mod_security (id:240335) triggered by 103.125.179.29 (103.125.179-29.kkn.com.pk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 15:30:02.148938 2026] [security2:error] [pid 17718:tid 17718] [client 103.125.179.29:59814] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 103.125.179.29 (+1 hits since last alert)\|equipoperu.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "equipoperu.org"] [uri "/xmlrpc.php"] [unique_id "aixeOsrVHaF2WGpSkfZABwAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-07 18:45:38 (2 weeks ago)	Botnet activity. Attribution: Angara Technologies Group / mikhail-smirnov-79830322 \| Attack Signatur ... show more Botnet activity. Attribution: Angara Technologies Group / mikhail-smirnov-79830322 \| Attack Signature Blocked: /wishlist/index/add/product/11339/form_key/Ef4ckjhxyFnekXbU/ \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, ... show less	Hacking Bad Web Bot Web App Attack
🇫🇷 tilellit.pro	2026-06-07 15:21:10 (2 weeks ago)	Fail2Ban banned 103.125.179.29 for security violations in jail wp-armour. Log: 2026/06/07 15:21:10 [ ... show more Fail2Ban banned 103.125.179.29 for security violations in jail wp-armour. Log: 2026/06/07 15:21:10 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 103.125.179.29 \| Target: wplogin" , client: 103.125.179.29, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php" ... show less	Web Spam

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇱 136.248.247.188

🇺🇸 66.132.195.46

🇷🇺 178.252.127.171

🇩🇪 172.217.34.27

🇮🇩 103.129.23.252

🇳🇬 102.88.137.213

🇺🇸 66.132.195.76

🇵🇭 61.245.28.115

🇨🇦 52.138.3.29

🇺🇸 37.123.192.41

🇨🇳 36.104.147.6

🇧🇷 35.247.216.131

🇬🇧 35.203.210.227

🇮🇳 34.131.81.20

🇺🇸 3.129.187.38

🇹🇼 198.235.24.126

🇹🇼 198.235.24.104

🇳🇱 195.178.110.30

🇧🇷 187.62.241.81

🇸🇬 152.32.218.30