JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 125.26.147.218

125.26.147.218 was found in our database!

This IP was reported 2 times. Confidence of Abuse is 4%: ?

ISP	TOT Public Company Limited Bangkok
Usage Type	Fixed Line ISP
ASN	AS23969
Hostname(s)	node-t7e.pool-125-26.dynamic.nt-isp.net
Domain Name	totisp.net
Country	🇹🇭 Thailand
City	Lop Buri, Lopburi

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 125.26.147.218

Whois 125.26.147.218

IP Abuse Reports for 125.26.147.218:

This IP address has been reported a total of 2 times from 2 distinct sources. 125.26.147.218 was first reported on May 18th 2021, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-15 17:04:06 (1 day ago)	(mod_security) mod_security (id:217210) triggered by 125.26.147.218 (node-t7e.pool-125-26.dynamic.nt ... show more (mod_security) mod_security (id:217210) triggered by 125.26.147.218 (node-t7e.pool-125-26.dynamic.nt-isp.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 15 13:03:58.698813 2026] [security2:error] [pid 20071:tid 20071] [client 125.26.147.218:51982] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?i:(?:[a-z]{3,10}\\\\s+(?:\\\\w{3,7}?://[\\\\w\\\\-\\\\./](?::\\\\d+)?)?/[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S])?\|connect (?:\\\\d{1,3}\\\\.){3}\\\\d{1,3}\\\\.?(?::\\\\d+)?\|options \\\\)\\\\s+[\\\\w\\\\./]+\|get /[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "114"] [id "217210"] [rev "1"] [msg "COMODO WAF: Invalid HTTP Request Line\|\|galaxyretro.com\|F\|4"] [data "GET http://galaxyretro.com HTTP/1.1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "galaxyretro.com"] [uri "/"] [unique_id "ale9fpPYIQmc8QWLyryxVwAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇿🇦 IrisFlower	2021-05-18 02:52:07 (5 years ago)	Unauthorized connection attempt detected from IP address 125.26.147.218 to port 4899 [J]	Port Scan Hacking

Showing 1 to 2 of 2 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.73.216.142

🇰🇷 211.223.107.86

🇺🇸 192.169.213.186

🇺🇸 86.38.42.49

🇷🇺 77.37.162.117

🇳🇱 45.148.10.152

🇨🇦 20.63.63.128

🇧🇷 179.180.49.3

🇵🇹 89.153.52.22

🇨🇦 20.220.62.78

🇰🇷 221.153.227.12

🇸🇬 167.99.66.42

🇬🇧 154.16.44.110

🇮🇳 150.241.244.100

🇺🇸 142.147.182.220

🇨🇳 118.195.130.218

🇬🇧 88.215.1.201

🇺🇸 52.0.41.164

🇨🇳 42.123.126.29

🇨🇳 14.103.127.234