JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 125.22.169.110

125.22.169.110 was found in our database!

This IP was reported 86 times. Confidence of Abuse is 74%: ?

74%

ISP	BHARTI INFOTEL LTD.
Usage Type	Mobile ISP
ASN	AS9498
Hostname(s)	aes-static-110.169.22.125.airtel.in
Domain Name	bharti.com
Country	🇮🇳 India
City	Delhi, Delhi

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 125.22.169.110

Whois 125.22.169.110

IP Abuse Reports for 125.22.169.110:

This IP address has been reported a total of 86 times from 43 distinct sources. 125.22.169.110 was first reported on March 6th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 masterguru	2026-07-14 13:47:05 (2 days ago)	(xmlrpc) Failed xmlrpc access from 125.22.169.110 (IN/India/aes-static-110.169.22.125.airtel.in): 5 ... show more (xmlrpc) Failed xmlrpc access from 125.22.169.110 (IN/India/aes-static-110.169.22.125.airtel.in): 5 in the last 3600 secs (0-122) show less	Hacking
🇺🇸 TPI-Abuse	2026-07-14 12:14:43 (2 days ago)	(mod_security) mod_security (id:240335) triggered by 125.22.169.110 (aes-static-110.169.22.125.airte ... show more (mod_security) mod_security (id:240335) triggered by 125.22.169.110 (aes-static-110.169.22.125.airtel.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 14 08:14:35.574973 2026] [security2:error] [pid 19953:tid 19953] [client 125.22.169.110:50415] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 125.22.169.110 (+1 hits since last alert)\|frogdesignmexico.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "frogdesignmexico.com"] [uri "/xmlrpc.php"] [unique_id "alYoK3QpEV0ipAD-OxUeTQAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-14 06:29:19 (2 days ago)	(mod_security) mod_security (id:240335) triggered by 125.22.169.110 (aes-static-110.169.22.125.airte ... show more (mod_security) mod_security (id:240335) triggered by 125.22.169.110 (aes-static-110.169.22.125.airtel.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 14 02:29:13.325513 2026] [security2:error] [pid 20087:tid 20087] [client 125.22.169.110:56044] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 125.22.169.110 (+1 hits since last alert)\|high5-vr.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "high5-vr.com"] [uri "/xmlrpc.php"] [unique_id "alXXOS4NWHSvGvtjoSXq9QAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-07-14 03:30:20 (2 days ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇺🇸 TPI-Abuse	2026-07-14 02:33:05 (3 days ago)	(mod_security) mod_security (id:240335) triggered by 125.22.169.110 (aes-static-110.169.22.125.airte ... show more (mod_security) mod_security (id:240335) triggered by 125.22.169.110 (aes-static-110.169.22.125.airtel.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 13 22:33:00.355116 2026] [security2:error] [pid 14652:tid 14652] [client 125.22.169.110:58730] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 125.22.169.110 (+1 hits since last alert)\|aandbnaturalfoods.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "aandbnaturalfoods.com"] [uri "/xmlrpc.php"] [unique_id "alWf3E-WM5cWV9cxHNMEUwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 tecnicorioja	2026-07-13 22:00:49 (3 days ago)	POST /xmlrpc.php [13/Jul/2026:06:08:30	Brute-Force Web App Attack
Anonymous	2026-07-13 18:37:21 (3 days ago)	[server.tmg.gr] httpd-xmlrpc-post: sites=www.aidshep2019.gr; logs=/var/log/httpd/domains/aidshep2019 ... show more [server.tmg.gr] httpd-xmlrpc-post: sites=www.aidshep2019.gr; logs=/var/log/httpd/domains/aidshep2019.gr.log; samples=/xmlrpc.php show less	Brute-Force Web App Attack
🇫🇷 bazter.pro	2026-07-13 16:24:24 (3 days ago)	Fail2Ban: plesk-bot-aggressive - 15 failures	Port Scan Bad Web Bot Web App Attack
🇩🇪 rh24	2026-07-13 16:22:59 (3 days ago)	(wordpress) Failed wordpress login from 125.22.169.110 (IN/India/aes-static-110.169.22.125.airtel.in ... show more (wordpress) Failed wordpress login from 125.22.169.110 (IN/India/aes-static-110.169.22.125.airtel.in): (CF_ENABLE) show less	Brute-Force
🇺🇸 TPI-Abuse	2026-07-13 13:01:17 (3 days ago)	(mod_security) mod_security (id:240335) triggered by 125.22.169.110 (aes-static-110.169.22.125.airte ... show more (mod_security) mod_security (id:240335) triggered by 125.22.169.110 (aes-static-110.169.22.125.airtel.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 13 09:01:08.899672 2026] [security2:error] [pid 2032:tid 2032] [client 125.22.169.110:62067] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 125.22.169.110 (+1 hits since last alert)\|truthsabouthealthcare.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "truthsabouthealthcare.com"] [uri "/xmlrpc.php"] [unique_id "alThlNroij1-sa_ys6YCdQAAABw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-13 11:26:25 (3 days ago)	(mod_security) mod_security (id:240335) triggered by 125.22.169.110 (aes-static-110.169.22.125.airte ... show more (mod_security) mod_security (id:240335) triggered by 125.22.169.110 (aes-static-110.169.22.125.airtel.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 13 07:26:21.128918 2026] [security2:error] [pid 29281:tid 29281] [client 125.22.169.110:60009] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 125.22.169.110 (+1 hits since last alert)\|arsenalfordemocracy.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "arsenalfordemocracy.com"] [uri "/xmlrpc.php"] [unique_id "alTLXanhrM7f6YQ5zPrucgAAABo"] show less	Brute-Force Bad Web Bot Web App Attack
🇱🇻 garmtech.com	2026-07-13 11:07:38 (3 days ago)	IM360 WAF: Rate limit exceeded for XMLRPC DoS (fault code)	Web App Attack
🇺🇸 TPI-Abuse	2026-06-30 18:04:34 (2 weeks ago)	(mod_security) mod_security (id:240335) triggered by 125.22.169.110 (aes-static-110.169.22.125.airte ... show more (mod_security) mod_security (id:240335) triggered by 125.22.169.110 (aes-static-110.169.22.125.airtel.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 30 14:04:27.532989 2026] [security2:error] [pid 29788:tid 29788] [client 125.22.169.110:63336] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 125.22.169.110 (+1 hits since last alert)\|localpetsitters.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "localpetsitters.com"] [uri "/xmlrpc.php"] [unique_id "akQFK_N-GlI3ElG88ltN8AAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇷 ICS Labs	2026-06-23 19:59:46 (3 weeks ago)	ICS Labs identified 125.22.169.110 as a malicious indicator from threat intelligence.	DDoS Attack Port Scan Hacking Brute-Force Exploited Host
🇺🇸 TPI-Abuse	2026-06-19 18:16:11 (3 weeks ago)	(mod_security) mod_security (id:240335) triggered by 125.22.169.110 (aes-static-110.169.22.125.airte ... show more (mod_security) mod_security (id:240335) triggered by 125.22.169.110 (aes-static-110.169.22.125.airtel.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 14:16:06.684513 2026] [security2:error] [pid 31288:tid 31288] [client 125.22.169.110:56034] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 125.22.169.110 (+1 hits since last alert)\|naominixon.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "naominixon.com"] [uri "/xmlrpc.php"] [unique_id "ajWHZimTWEz5qGoXX-J5SgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 86 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇱 176.53.159.197

🇧🇬 78.128.113.74

🇨🇳 220.197.85.215

🇧🇷 177.0.238.190

🇩🇪 167.94.146.72

🇺🇸 152.32.183.22

🇺🇸 147.185.132.93

🇩🇪 130.12.180.128

🇹🇼 123.58.196.28

🇿🇦 105.22.47.146

🇮🇩 103.165.222.189

🇩🇪 69.5.169.188

🇲🇾 47.254.243.91

🇺🇸 47.251.173.60

🇺🇸 45.33.16.32

🇨🇦 35.183.130.182

🇿🇦 2c0f:f850:156:471f::1

🇩🇪 213.209.159.236

🇧🇪 207.175.49.184

🇹🇷 195.85.207.202