JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 125.122.194.99

125.122.194.99 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 25%: ?

25%

ISP	CHINANET-ZJ Hangzhou node network
Usage Type	Fixed Line ISP
ASN	AS4134
Domain Name	hz.zj.cn
Country	🇨🇳 China
City	Hangzhou, Zhejiang

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 125.122.194.99

Whois 125.122.194.99

IP Abuse Reports for 125.122.194.99:

This IP address has been reported a total of 15 times from 6 distinct sources. 125.122.194.99 was first reported on August 4th 2026, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 afleventoffice.com.au	2026-08-07 07:16:58 (3 weeks ago)	GET /users/sign_in HTTP/1.1	Web App Attack
🇺🇸 TPI-Abuse	2026-08-07 02:06:22 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 125.122.194.99 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 125.122.194.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 06 22:06:15.668240 2026] [security2:error] [pid 3787295:tid 3787295] [client 125.122.194.99:59610] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.steamheat.tech"] [uri "/.env"] [unique_id "anU9l6tfwo3Ndjm112SH5gAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-05 20:52:27 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 125.122.194.99 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 125.122.194.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 05 16:52:21.423684 2026] [security2:error] [pid 3381270:tid 3381270] [client 125.122.194.99:50676] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "whm.micanopy.us"] [uri "/.env"] [unique_id "anOihYzB2M9xwmzjdlwSYgAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-05 20:02:38 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 125.122.194.99 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 125.122.194.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 05 16:02:29.008006 2026] [security2:error] [pid 4018909:tid 4018937] [client 125.122.194.99:47422] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "whm.meeker.us"] [uri "/.env"] [unique_id "anOW1VDe4MIDOIzJ5mMw8QAAARc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-05 17:05:16 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 125.122.194.99 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 125.122.194.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 05 13:05:08.033050 2026] [security2:error] [pid 1093401:tid 1093401] [client 125.122.194.99:45384] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "whm.winformation.us"] [uri "/.env"] [unique_id "anNtRPtmMsMh_zJ3tLaClgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-05 16:28:28 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 125.122.194.99 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 125.122.194.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 05 12:28:22.308745 2026] [security2:error] [pid 2609317:tid 2609317] [client 125.122.194.99:54210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "whm.vtmooses.us"] [uri "/.env"] [unique_id "anNkpnCIzrWTXi2gYJrLmQAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-05 12:33:14 (4 weeks ago)	(mod_security) mod_security (id:210492) triggered by 125.122.194.99 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 125.122.194.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 05 08:33:09.523128 2026] [security2:error] [pid 3155632:tid 3155632] [client 125.122.194.99:46316] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "marv.us"] [uri "/.env"] [unique_id "anMthb7-Xz7XBOP3pBcGTQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-05 12:17:18 (4 weeks ago)	(mod_security) mod_security (id:210492) triggered by 125.122.194.99 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 125.122.194.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 05 08:17:10.711291 2026] [security2:error] [pid 2138851:tid 2138867] [client 125.122.194.99:37724] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "marinkovich.us"] [uri "/.env"] [unique_id "anMpxoSBO6pjJtAE1RkDxAAAAMw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-05 11:54:05 (4 weeks ago)	(mod_security) mod_security (id:210492) triggered by 125.122.194.99 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 125.122.194.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 05 07:53:58.241734 2026] [security2:error] [pid 1825253:tid 1825253] [client 125.122.194.99:57226] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "malinka.us"] [uri "/.env"] [unique_id "anMkVoh5KYo3mswVTD_zUgAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-05 11:38:24 (4 weeks ago)	(mod_security) mod_security (id:210492) triggered by 125.122.194.99 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 125.122.194.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 05 07:38:19.212327 2026] [security2:error] [pid 12895:tid 12895] [client 125.122.194.99:42968] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.xpd.us"] [uri "/.env"] [unique_id "anMgq0H2CtABcMUfxVdFJwAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-05 11:15:04 (4 weeks ago)	(mod_security) mod_security (id:210492) triggered by 125.122.194.99 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 125.122.194.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 05 07:14:54.490288 2026] [security2:error] [pid 2418492:tid 2418492] [client 125.122.194.99:51070] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.understory.us"] [uri "/.env"] [unique_id "anMbLr7Mplz6sa8C9BNxAgAAAB0"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 screwlooseit.com.au	2026-08-05 01:33:33 (4 weeks ago)	Blocked by CSF 13 firewall - Rule: config-dotfile CN/China/-	Web App Attack
🇦🇺 artful	2026-08-05 00:43:00 (4 weeks ago)	Excessive errors, high load and multiple hits per second	Web App Attack
🇦🇺 2000cn.com.au	2026-08-04 23:51:40 (4 weeks ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
🇦🇺 paulshipley.com.au	2026-08-04 23:15:33 (4 weeks ago)	[Wed Aug 05 09:15:32.056881 2026] [security2:error] [pid 303418] [client 125.122.194.99:45598] [clie ... show more [Wed Aug 05 09:15:32.056881 2026] [security2:error] [pid 303418] [client 125.122.194.99:45598] [client 125.122.194.99] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "shotbysuzanne.com.au"] [uri "/.env"] [unique_id "anJylNkW5nLbL6dvV73hPgAAAAA"], referer: https://www.shotbysuzanne.com.au/.env ... show less	Web App Attack

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.178.110.22

🇬🇧 193.163.125.210

🇧🇷 143.202.6.48

🇨🇳 101.71.209.29

🇬🇧 5.68.23.151

🇲🇽 187.192.86.212

🇭🇰 172.71.218.28

🇧🇩 103.217.111.111

🇰🇼 94.129.90.205

🇱🇹 62.60.130.201

🇮🇳 59.185.230.105

🇲🇾 27.125.249.169

🇮🇪 18.201.140.199

🇧🇷 189.36.134.83

🇲🇽 187.184.102.11

🇺🇦 176.122.112.248

🇻🇳 103.161.16.196

🇫🇷 85.217.140.8

🇹🇷 45.8.196.216

🇲🇾 27.125.249.31