JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 125.128.12.24

125.128.12.24 was found in our database!

This IP was reported 4 times. Confidence of Abuse is 0%: ?

ISP	Korea Telecom
Usage Type	Fixed Line ISP
ASN	AS4766
Domain Name	kt.com
Country	🇰🇷 Korea (the Republic of)
City	Seoul, Seoul

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 125.128.12.24

Whois 125.128.12.24

IP Abuse Reports for 125.128.12.24:

This IP address has been reported a total of 4 times from 4 distinct sources. 125.128.12.24 was first reported on February 20th 2026, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇬 cheatmaster.store	2026-02-26 05:39:12 (3 months ago)	Automated report: This IP address has been identified as an active public open proxy. Classification ... show more Automated report: This IP address has been identified as an active public open proxy. Classification: Open Proxy \| Spoofing \| VPN/Anonymizer \| Bad Web Bot. Country: South Korea Threat level: High. This host is listed across multiple public proxy databases and poses a risk of abuse, credential stuffing, scraping, and spoofed traffic. Reported by automated threat intelligence pipeline. Do not whitelist without manual verification. show less	Web Spam Port Scan Web App Attack
🇺🇸 TPI-Abuse	2026-02-24 19:51:21 (3 months ago)	(mod_security) mod_security (id:217200) triggered by 125.128.12.24 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:217200) triggered by 125.128.12.24 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 24 14:51:13.614694 2026] [security2:error] [pid 15123:tid 15123] [client 125.128.12.24:42469] ModSecurity: Access denied with code 403 (phase 1). Match of "endsWith /wp-cron.php" against "REQUEST_FILENAME" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "103"] [id "217200"] [rev "2"] [msg "COMODO WAF: HTTP/1.1 POST request missing Content-Length Header\|\|aquatech-ind.com\|F\|2"] [data "/send.php"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "aquatech-ind.com"] [uri "/send.php"] [unique_id "aZ4BMRTPvM8PQ30uWihpuQAAAAY"], referer: https://aquatech-ind.com/contact_us.html show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 grassau.com	2026-02-24 18:23:54 (3 months ago)	(mod_security) mod_security triggered on hostname [redacted] 125.128.12.24 (KR/South Korea/Seoul/Son ... show more (mod_security) mod_security triggered on hostname [redacted] 125.128.12.24 (KR/South Korea/Seoul/Songpa-gu/-) show less	SQL Injection
🇨🇦 1gz	2026-02-20 13:05:14 (3 months ago)	Triggered Cloudflare WAF (l7ddos) from KR. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoin ... show more Triggered Cloudflare WAF (l7ddos) from KR. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: / UA: Mozilla/5.0 (iPhone; CPU iPhone OS 17_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/138.0 Mobile/15E148 Safari/605.1.15 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	DDoS Attack Bad Web Bot

Showing 1 to 4 of 4 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 205.210.31.34

🇨🇳 182.90.219.141

🇺🇸 104.152.52.236

🇺🇸 104.152.52.100

🇺🇸 104.152.52.70

🇺🇸 104.152.52.69

🇺🇸 104.152.52.64

🇺🇸 104.152.52.61

🇺🇸 104.152.52.60

🇺🇸 104.152.52.59

🇳🇱 91.92.40.27

🇦🇪 80.227.147.94

🇩🇪 69.5.169.7

🇬🇧 31.14.254.27

🇮🇹 4.232.80.255

🇺🇸 216.25.89.117

🇩🇪 213.209.159.113

🇪🇬 197.57.173.212

🇨🇳 120.48.75.127

🇮🇩 103.51.205.156