JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.125.233.60

103.125.233.60 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 52%: ?

52%

ISP	Owl Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS9312
Domain Name	owl.net
Country	🇭🇰 Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.125.233.60

Whois 103.125.233.60

IP Abuse Reports for 103.125.233.60:

This IP address has been reported a total of 20 times from 11 distinct sources. 103.125.233.60 was first reported on May 22nd 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 SpaceHost-Server	2026-10-09 22:14:07 (1 week ago)		Brute-Force Web App Attack
🇫🇷 SpaceHost-Server	2026-10-08 22:14:06 (1 week ago)		Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-10-08 18:23:50 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 103.125.233.60 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 103.125.233.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 14:23:45.156197 2026] [security2:error] [pid 16491:tid 16491] [client 103.125.233.60:51494] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|pinetreedistrict.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "pinetreedistrict.org"] [uri "/wp-json/wp/v2/users"] [unique_id "asffsYrKNgiZarcwoPTG-gAAAAU"], referer: https://www.google.com/search?q=wordpress show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 maxxsense	2026-10-08 18:16:42 (1 week ago)	(wordpress) Failed wordpress login from 103.125.233.60 (HK/Hong Kong/-)	Brute-Force
🇺🇸 bigwavedave	2026-10-08 17:13:37 (1 week ago)	Wordpress Attack	Web App Attack
🇧🇪 cmbplf	2026-10-08 17:01:08 (1 week ago)	40.778 requests in 1 hour (1w21h59m)	Brute-Force Bad Web Bot
🇺🇸 jormaster3k	2026-10-08 16:28:08 (1 week ago)	Attack against WordPress	Web App Attack
🇺🇸 TPI-Abuse	2026-10-08 16:25:22 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 103.125.233.60 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 103.125.233.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 12:25:17.242894 2026] [security2:error] [pid 8047:tid 8047] [client 103.125.233.60:60394] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|neconebooks.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "neconebooks.com"] [uri "/wp-json/wp/v2/users"] [unique_id "asfD7fmYCR0RE968kArKigAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-08 16:02:00 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 103.125.233.60 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 103.125.233.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 12:01:56.822583 2026] [security2:error] [pid 14915:tid 14938] [client 103.125.233.60:55576] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|inal.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "inal.org"] [uri "/wp-json/wp/v2/users"] [unique_id "ase-dCqAGvWGuuEfEJS6NwAAAVI"], referer: https://duckduckgo.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-08 15:33:44 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 103.125.233.60 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 103.125.233.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 11:33:38.445783 2026] [security2:error] [pid 2719:tid 2719] [client 103.125.233.60:63272] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.nancyscafeandcatering.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.nancyscafeandcatering.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ase30kW2_YRZ2ObQ3Jv9uAAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Séfora Srl	2026-10-08 15:32:27 (1 week ago)	crowdsecurity/http-bf-wordpress_bf detected by CrowdSec	Brute-Force Web App Attack
🇩🇪 FeG Deutschland	2026-10-08 15:04:14 (1 week ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247	Exploited Host Web App Attack
🇩🇪 LRob	2026-10-08 15:04:11 (1 week ago)	Web exploit attempt \| method: GET \| path: / \| query: author=1, author=2, author=3 (+1 more) \| ua: Mo ... show more Web exploit attempt \| method: GET \| path: / \| query: author=1, author=2, author=3 (+1 more) \| ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36, Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36, Mozilla/5.0 (Windows NT 11.0; Win64; x64; rv:118.0) Gecko/20100101 Firefox/118.0 (+1 more) show less	Hacking Web App Attack
🇨🇳 ThreatBook.io	2025-06-06 23:02:31 (1 year ago)	2025-06-06 02:57:13 /3fOu 2025-06-06 02:47:58 /Ez6h	Web App Attack
🇨🇳 ThreatBook.io	2025-06-05 22:56:03 (1 year ago)	2025-06-05 02:05:12 /3fOu 2025-06-05 03:17:39 /3fOu 2025-06-05 03:00:21 /Ez6h	Web App Attack

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 223.181.81.167

🇺🇸 162.216.149.238

🇸🇬 159.223.34.81

🇺🇸 147.185.132.120

🇺🇸 129.121.101.179

🇮🇳 122.169.97.132

🇨🇳 112.90.220.246

🇮🇳 49.206.196.18

🇯🇵 43.153.135.208

🇺🇸 35.175.227.78

🇯🇵 34.104.177.34

🇰🇷 222.118.59.16

🇮🇳 203.145.143.163

🇺🇸 199.165.159.46

🇺🇸 136.87.27.246

🇨🇳 118.196.16.16

🇳🇱 109.160.32.104

🇧🇩 103.206.231.139

🇸🇪 90.230.212.29

🇮🇹 82.89.57.170