JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 125.23.62.206

125.23.62.206 was found in our database!

This IP was reported 45 times. Confidence of Abuse is 100%: ?

100%

ISP	BHARTI INFOTEL LTD.
Usage Type	Fixed Line ISP
ASN	AS9498
Hostname(s)	dsl-ncr-dynamic-206.62.23.125.airtelbroadband.in
Domain Name	bharti.com
Country	🇮🇳 India
City	Kolkata, West Bengal

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 125.23.62.206

Whois 125.23.62.206

IP Abuse Reports for 125.23.62.206:

This IP address has been reported a total of 45 times from 25 distinct sources. 125.23.62.206 was first reported on July 23rd 2026, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 applemooz	2026-08-29 12:49:57 (4 days ago)	WordPress XMLRPC Brute Force Attacks ...	Brute-Force Web App Attack
🇨🇭 Mario Bretscher	2026-08-29 12:18:00 (4 days ago)	Aug 29 14:17:48 tubegrabe-stafel.ch Cerber(tubegrabe-stafel.ch)[3291123]: Authentication failure for ... show more Aug 29 14:17:48 tubegrabe-stafel.ch Cerber(tubegrabe-stafel.ch)[3291123]: Authentication failure for marbre! from 125.23.62.206 Aug 29 14:17:59 tubegrabe-stafel.ch Cerber(tubegrabe-stafel.ch)[3288736]: Authentication failure for marbre! from 125.23.62.206 ... show less	Web Spam
🇳🇱 Site.eu	2026-08-29 10:49:07 (4 days ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇲🇾 Rizzy	2026-08-29 04:09:15 (4 days ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇺🇸 integrantservices.com	2026-08-28 12:45:54 (5 days ago)	(wordpress) Failed wordpress login from 125.23.62.206 (IN/India/dsl-ncr-dynamic-206.62.23.125.airtel ... show more (wordpress) Failed wordpress login from 125.23.62.206 (IN/India/dsl-ncr-dynamic-206.62.23.125.airtelbroadband.in) show less	Brute-Force
🇳🇱 Site.eu	2026-08-28 09:10:40 (5 days ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇳🇱 maxxsense	2026-08-27 15:23:28 (5 days ago)	(PERMBLOCK) 125.23.62.206 (IN/India/dsl-ncr-dynamic-206.62.23.125.airtelbroadband.in) has had more t ... show more (PERMBLOCK) 125.23.62.206 (IN/India/dsl-ncr-dynamic-206.62.23.125.airtelbroadband.in) has had more than 4 temp blocks show less	Hacking
🇳🇱 maxxsense	2026-08-27 15:08:09 (5 days ago)	(wordpress) Failed wordpress login from 125.23.62.206 (IN/India/dsl-ncr-dynamic-206.62.23.125.airtel ... show more (wordpress) Failed wordpress login from 125.23.62.206 (IN/India/dsl-ncr-dynamic-206.62.23.125.airtelbroadband.in) show less	Brute-Force
🇦🇺 screwlooseit.com.au	2026-08-27 13:36:43 (5 days ago)	Blocked by CSF 13 firewall - Rule: XMLRPC IN/India/dsl-ncr-dynamic-206.62.23.125.airtelbroadband.in	Web App Attack
🇩🇪 konseptit	2026-08-27 13:32:15 (5 days ago)	(wordpress) Failed wordpress login from 125.23.62.206 (IN/India/dsl-ncr-dynamic-206.62.23.125.airtel ... show more (wordpress) Failed wordpress login from 125.23.62.206 (IN/India/dsl-ncr-dynamic-206.62.23.125.airtelbroadband.in) show less	Brute-Force
Anonymous	2026-08-25 19:03:41 (1 week ago)	(wordpress) Failed wordpress login from 125.23.62.206 (IN/India/dsl-ncr-dynamic-206.62.23.125.airtel ... show more (wordpress) Failed wordpress login from 125.23.62.206 (IN/India/dsl-ncr-dynamic-206.62.23.125.airtelbroadband.in) show less	Brute-Force
🇺🇸 TPI-Abuse	2026-08-25 08:37:00 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 125.23.62.206 (dsl-ncr-dynamic-206.62.23.125.ai ... show more (mod_security) mod_security (id:240335) triggered by 125.23.62.206 (dsl-ncr-dynamic-206.62.23.125.airtelbroadband.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 04:36:56.343082 2026] [security2:error] [pid 25010:tid 25010] [client 125.23.62.206:54884] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 125.23.62.206 (+1 hits since last alert)\|crittergetterpestcontrol.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "crittergetterpestcontrol.com"] [uri "/xmlrpc.php"] [unique_id "ao1UKGAmJo892dgsmr3TBgAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-25 07:34:12 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 125.23.62.206 (dsl-ncr-dynamic-206.62.23.125.ai ... show more (mod_security) mod_security (id:240335) triggered by 125.23.62.206 (dsl-ncr-dynamic-206.62.23.125.airtelbroadband.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 03:34:06.160077 2026] [security2:error] [pid 18705:tid 18705] [client 125.23.62.206:60156] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 125.23.62.206 (+1 hits since last alert)\|feiz.church\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "feiz.church"] [uri "/xmlrpc.php"] [unique_id "ao1Fblu3nBgJ4_4xhqMzhgAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-25 07:03:11 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 125.23.62.206 (dsl-ncr-dynamic-206.62.23.125.ai ... show more (mod_security) mod_security (id:240335) triggered by 125.23.62.206 (dsl-ncr-dynamic-206.62.23.125.airtelbroadband.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 03:03:03.392744 2026] [security2:error] [pid 13906:tid 13906] [client 125.23.62.206:63299] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 125.23.62.206 (+1 hits since last alert)\|richmondrents.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "richmondrents.com"] [uri "/xmlrpc.php"] [unique_id "ao0-J26ppU_smIc_vUXEgwAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 pscriptos	2026-08-24 10:43:10 (1 week ago)	{"ClientAddr":"125.23.62.206:56136","ClientHost":"125.23.62.206","ClientPort":"56136","ClientUsernam ... show more {"ClientAddr":"125.23.62.206:56136","ClientHost":"125.23.62.206","ClientPort":"56136","ClientUsername":"-","DownstreamContentSize":418,"DownstreamStatus":403,"Duration":166055708,"OriginContentSize":418,"OriginDuration":162408695,"OriginStatus":403,"Overhead":3647013,"RequestAddr":"www.cleveradmin.de","RequestContentSize":706,"RequestCount":4807559,"RequestHost":"www.cleveradmin.de","RequestMethod":"POST","RequestPath":"/xmlrpc.php","RequestPort":"-","RequestProtocol":"HTTP/1.1","RequestScheme":"https","RetryAttempts":0,"RouterName":"cleveradmin-www-websecure@file","ServiceAddr":"172.16.80.10:80","ServiceName":"cleveradmin-www@file","ServiceURL":"http://172.16.80.10:80","StartLocal":"2026-08-24T12:42:50.930098399+02:00","StartUTC":"2026-08-24T10:42:50.930098399Z","TLSCipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","TLSVersion":"1.2","entryPointName":"websecure","level":"info","msg":"","time":"2026-08-24T12:42:51+02:00"} {"ClientAddr":"125.23.62.206:56136","ClientHost":"125.23.62.206"," ... show less	Brute-Force Web App Attack

Showing 1 to 15 of 45 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 208.109.39.19

🇺🇸 195.184.76.34

🇧🇷 131.196.47.55

🇧🇷 131.196.45.253

🇧🇷 131.196.45.191

🇨🇳 119.100.37.43

🇹🇼 114.35.41.88

🇩🇪 43.228.157.10

🇻🇳 2402:800:61f7:d441:4ca7:6813:bfa6:5369

🇳🇱 193.47.62.69

🇵🇱 185.186.153.68

🇧🇷 131.196.46.172

🇧🇷 131.196.46.104

🇧🇷 131.196.44.235

🇷🇺 109.168.190.98

🇺🇸 109.105.210.83

🇺🇿 109.94.173.183

🇯🇵 160.251.101.169

🇧🇷 131.196.47.164

🇧🇷 131.196.47.37