AbuseIPDB » 114.10.47.125
114.10.47.125
This IP was reported 8 times. Confidence of
Abuse
is 23% : ?
ISP
IOH B2B
Usage Type
Fixed Line ISP
ASN
AS4761
Domain Name
ioh.co.id
Country
🇮🇩
Indonesia
City
Surabaya, East Java
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 114.10.47.125 :
This IP address has been reported a total of
8
times from
5 distinct
sources.
114.10.47.125 was first reported on
September 5th 2025 , and the most recent report was
1 day ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
TPI-Abuse
2026-06-21 03:09:06
(1 day ago)
(mod_security) mod_security (id:240335) triggered by 114.10.47.125 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240335) triggered by 114.10.47.125 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 20 23:08:55.509810 2026] [security2:error] [pid 8214:tid 8214] [client 114.10.47.125:20034] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 114.10.47.125 (+1 hits since last alert)|lspfest.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "lspfest.com"] [uri "/xmlrpc.php"] [unique_id "ajdVx6DQVDWEBjQzRV2XBgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-21 02:37:37
(1 day ago)
(mod_security) mod_security (id:240335) triggered by 114.10.47.125 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240335) triggered by 114.10.47.125 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 20 22:37:25.588618 2026] [security2:error] [pid 4840:tid 4840] [client 114.10.47.125:63691] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 114.10.47.125 (+1 hits since last alert)|oowoah.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "oowoah.com"] [uri "/xmlrpc.php"] [unique_id "ajdOZcFnjtiXKcIcmfKGNwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-20 15:02:29
(1 day ago)
(mod_security) mod_security (id:240335) triggered by 114.10.47.125 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240335) triggered by 114.10.47.125 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 20 11:02:18.511254 2026] [security2:error] [pid 19851:tid 19851] [client 114.10.47.125:5717] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 114.10.47.125 (+1 hits since last alert)|kaylamaclaincounseling.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "kaylamaclaincounseling.com"] [uri "/xmlrpc.php"] [unique_id "ajareoQeR1oV-Z5pjoe2SwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-06-19 12:19:56
(2 days ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-19 11:52:47
(2 days ago)
(mod_security) mod_security (id:240335) triggered by 114.10.47.125 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240335) triggered by 114.10.47.125 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 07:52:38.305944 2026] [security2:error] [pid 21515:tid 21515] [client 114.10.47.125:58115] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 114.10.47.125 (+1 hits since last alert)|brainstormer.soy|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "brainstormer.soy"] [uri "/xmlrpc.php"] [unique_id "ajUthncuYgYKhXn3R4HAWgAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
pltcldvlpr
2026-05-09 02:41:49
(1 month ago)
Unidentified crawler ignoring robots.txt: 114.10.47.125 - - [09/May/2026:04:28:47 +0200] "GET /proto ...
show more
Unidentified crawler ignoring robots.txt: 114.10.47.125 - - [09/May/2026:04:28:47 +0200] "GET /protocol?id=th_3_105¶graph=15180219&seq=631 HTTP/1.1" 302 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" asn=4761 org="PT. INDOSAT Tbk"
114.10.47.125 - - [09/May/2026:04:41:47 +0200] "GET /protocol?id=be_15_84&offset=700&seq=742 HTTP/1.1" 200 345518 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" asn=4761 org="PT. INDOSAT Tbk"
...
show less
Bad Web Bot
🇫🇷
Sklurk
2026-05-05 05:29:33
(1 month ago)
Web App Attack
Web App Attack
🇮🇩
hermawan
2025-09-05 15:30:30
(9 months ago)
[Fri Sep 05 22:29:24.368625 2025] [security2:error] [pid 875596:tid 140016807208640] [client 114.10. ...
show more
[Fri Sep 05 22:29:24.368625 2025] [security2:error] [pid 875596:tid 140016807208640] [client 114.10.47.125:58698] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "utf-8" at REQUEST_HEADERS:Accept-Charset. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "333"] [id "440015"] [msg "Bot Accept-Charset utf-8"] [data "Matched Data: utf-8 found within REQUEST_HEADERS:Accept-Charset: UTF-8 request_line = GET /images/Klimatologi/Analisis/Peta_Zona_Musim/Peta_Zona_Musim_ZOM_di_Provinsi_Jawa_Timur_Tahun_1991-2020-v1.webp HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/images/Klimatologi/Analisis/Peta_Zona_Musim/Peta_Zona_Musim_ZOM_di_Provinsi_Jawa_Timur_Tahun_1991-2020-v1.webp"] [unique_id "aLsB1EcZyeC_FFWDncvK9QADBxg"] [staklim-malang.info] [staklim-malang.info] top=[875621] [++yggE+BAlc] [aLsB1EcZyeC_FFWDncvK9QADBxg] keep_alive=[1] [2025-09-05 22:29:24.368643] [R:aLsB1EcZyeC_FFWDncvK9QADBxg] UA:'ChatGPT/1.2
...
show less
Hacking
Web App Attack
Showing 1 to
8
of 8 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: