JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 120.60.25.120

120.60.25.120 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 65%: ?

65%

ISP	Mahanagar Telephone Nigam Limited
Usage Type	Fixed Line ISP
ASN	AS9829
Hostname(s)	triband-mum-120.60.25.120.mtnl.net.in
Domain Name	mtnl.net.in
Country	🇮🇳 India
City	Turaiyur, Tamil Nadu

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 120.60.25.120

Whois 120.60.25.120

IP Abuse Reports for 120.60.25.120:

This IP address has been reported a total of 14 times from 12 distinct sources. 120.60.25.120 was first reported on January 26th 2025, and the most recent report was 15 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-30 21:12:52 (15 hours ago)	(mod_security) mod_security (id:240335) triggered by 120.60.25.120 (triband-mum-120.60.25.120.mtnl.n ... show more (mod_security) mod_security (id:240335) triggered by 120.60.25.120 (triband-mum-120.60.25.120.mtnl.net.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 30 17:12:46.311149 2026] [security2:error] [pid 2831420:tid 2831420] [client 120.60.25.120:50077] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 120.60.25.120 (+1 hits since last alert)\|gellertdealers.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "gellertdealers.com"] [uri "/xmlrpc.php"] [unique_id "amu-Tn83dtFOsmHwBTW8IwAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-30 20:42:36 (16 hours ago)	(mod_security) mod_security (id:240335) triggered by 120.60.25.120 (triband-mum-120.60.25.120.mtnl.n ... show more (mod_security) mod_security (id:240335) triggered by 120.60.25.120 (triband-mum-120.60.25.120.mtnl.net.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 30 16:42:29.152223 2026] [security2:error] [pid 1844587:tid 1844587] [client 120.60.25.120:52560] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 120.60.25.120 (+1 hits since last alert)\|feministvoice.blog\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "feministvoice.blog"] [uri "/xmlrpc.php"] [unique_id "amu3NZDrLKSqCIQL9P3jtAAAAB8"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-07-30 18:36:49 (18 hours ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-30 11:50:35 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 120.60.25.120 (triband-mum-120.60.25.120.mtnl.n ... show more (mod_security) mod_security (id:240335) triggered by 120.60.25.120 (triband-mum-120.60.25.120.mtnl.net.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 30 07:50:29.991879 2026] [security2:error] [pid 1094351:tid 1094351] [client 120.60.25.120:56018] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 120.60.25.120 (+1 hits since last alert)\|forefrontmusic.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "forefrontmusic.com"] [uri "/xmlrpc.php"] [unique_id "ams6hUawJ-qlrYOfcSNhJAAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 rh24	2026-07-30 10:35:05 (1 day ago)	(wordpress) Failed wordpress login from 120.60.25.120 (IN/India/triband-mum-120.60.25.120.mtnl.net.i ... show more (wordpress) Failed wordpress login from 120.60.25.120 (IN/India/triband-mum-120.60.25.120.mtnl.net.in): (CF_ENABLE) show less	Brute-Force
🇪🇸 alferez	2026-07-30 09:11:17 (1 day ago)	xmlrpc.php attack DOS	Hacking Exploited Host Web App Attack
Anonymous	2026-07-30 08:50:05 (1 day ago)	Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/1.1	Hacking Web App Attack
🇩🇪 ghostwarriors	2026-07-30 05:20:56 (1 day ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-30 05:15:11 (1 day ago)	Fail2Ban: WordPress XML-RPC brute-force attack detected.	Bad Web Bot Web App Attack
🇬🇧 Apache	2026-07-30 03:05:57 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 120.60.25.120 (IN/India/triband-mum-120.60.25.1 ... show more (mod_security) mod_security (id:240335) triggered by 120.60.25.120 (IN/India/triband-mum-120.60.25.120.mtnl.net.in): 5 in the last 300 secs show less	Brute-Force Web App Attack
🇩🇪 grassau.com	2026-07-30 02:01:13 (1 day ago)	(wordpress) Failed wordpress login from 120.60.25.120 (IN/India/Tamil Nadu/Tiruchirappalli/triband-m ... show more (wordpress) Failed wordpress login from 120.60.25.120 (IN/India/Tamil Nadu/Tiruchirappalli/triband-mum-120.60.25.120.mtnl.net.in) show less	Brute-Force
🇪🇸 masterguru	2026-07-30 01:32:37 (1 day ago)	(xmlrpc) Failed xmlrpc access from 120.60.25.120 (IN/India/triband-mum-120.60.25.120.mtnl.net.in): 5 ... show more (xmlrpc) Failed xmlrpc access from 120.60.25.120 (IN/India/triband-mum-120.60.25.120.mtnl.net.in): 5 in the last 3600 secs (0-122) show less	Hacking
🇨🇳 ThreatBook.io	2025-01-27 22:42:22 (1 year ago)	ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/120.60.25.120	SSH
🇫🇷 security.rdmc.fr	2025-01-26 13:57:15 (1 year ago)	Port Scan Attack proto:TCP src:35435 dst:23	Port Scan

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 213.176.26.194

🇨🇳 123.138.24.113

🇫🇷 91.196.152.233

🇨🇳 171.216.138.229

🇺🇸 162.216.149.228

🇭🇰 152.32.134.89

🇨🇦 147.182.149.75

🇩🇪 141.76.94.41

🇨🇭 51.103.143.138

🇰🇷 39.115.195.164

🇸🇬 8.222.186.232

🇦🇪 2a00:1636:409:93:9999::200

🇺🇸 2600:3c03::2000:4bff:fe9b:60ec

🇨🇦 172.217.44.27

🇵🇭 136.158.62.63

🇫🇷 91.231.89.170

🇺🇸 91.230.168.139

🇱🇹 91.224.92.127

🇺🇸 71.90.30.53

🇺🇸 65.49.1.182