JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 125.62.196.144

125.62.196.144 was found in our database!

This IP was reported 27 times. Confidence of Abuse is 93%: ?

93%

ISP	VIZAG BROADCASTING COMPANY PVT. LTD
Usage Type	Fixed Line ISP
ASN	AS133593
Domain Name	vbctv.in
Country	🇮🇳 India
City	Mandapeta, Andhra Pradesh

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 125.62.196.144

Whois 125.62.196.144

IP Abuse Reports for 125.62.196.144:

This IP address has been reported a total of 27 times from 16 distinct sources. 125.62.196.144 was first reported on August 22nd 2026, and the most recent report was 21 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-08-24 18:05:28 (21 hours ago)	(mod_security) mod_security (id:240335) triggered by 125.62.196.144 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 125.62.196.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 14:05:16.889220 2026] [security2:error] [pid 30546:tid 30546] [client 125.62.196.144:52879] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 125.62.196.144 (+1 hits since last alert)\|oliverhardy.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "oliverhardy.com"] [uri "/xmlrpc.php"] [unique_id "aoyH3G5hTVJnr06KqvOEJAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-08-24 17:02:49 (22 hours ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
Anonymous	2026-08-24 13:28:38 (1 day ago)	(wordpress) Failed wordpress login from 125.62.196.144 (IN/India/-)	Brute-Force
🇺🇸 TPI-Abuse	2026-08-24 12:50:51 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 125.62.196.144 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 125.62.196.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 08:50:41.318710 2026] [security2:error] [pid 3911835:tid 3911955] [client 125.62.196.144:64788] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 125.62.196.144 (+1 hits since last alert)\|pwihatah.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "pwihatah.com"] [uri "/xmlrpc.php"] [unique_id "aow-IauOfmkwGdKAIe0vHAAAAUk"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 ConsulHosting	2026-08-24 07:42:22 (1 day ago)	Excessive failed CAPTCHA attempts (CAPTCHA DoS)	Web App Attack
🇺🇸 TPI-Abuse	2026-08-24 07:20:56 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 125.62.196.144 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 125.62.196.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 03:20:43.393376 2026] [security2:error] [pid 21428:tid 21428] [client 125.62.196.144:50795] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 125.62.196.144 (+1 hits since last alert)\|stoughtonpipeandwelding.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "stoughtonpipeandwelding.net"] [uri "/xmlrpc.php"] [unique_id "aovwy4d-LML3diRiHtkjswAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 nationaleventpros.com	2026-08-24 01:26:21 (1 day ago)	WordPress login attempt	Brute-Force
Anonymous	2026-08-24 00:26:03 (1 day ago)	Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/1.1	Hacking Web App Attack
🇫🇷 SpaceHost-Server	2026-08-23 19:37:44 (1 day ago)	125.62.196.144 - - [23/Aug/2026:21:37:23 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6355 "-" "WordPress. ... show more 125.62.196.144 - - [23/Aug/2026:21:37:23 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6355 "-" "WordPress.com; https://wordpress.com" 125.62.196.144 - - [23/Aug/2026:21:37:32 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6355 "-" "WordPress.com; https://wordpress.com" 125.62.196.144 - - [23/Aug/2026:21:37:43 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6355 "-" "Jetpack/12.1; WordPress/6.1; http://site48968224.com" show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-08-23 18:37:04 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 125.62.196.144 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 125.62.196.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 23 14:36:54.988511 2026] [security2:error] [pid 3964:tid 3964] [client 125.62.196.144:62768] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 125.62.196.144 (+1 hits since last alert)\|sarrisbilliards.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "sarrisbilliards.com"] [uri "/xmlrpc.php"] [unique_id "aos9xgOGo0eWmd4XCRdAzQAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-23 11:59:59 (2 days ago)	(mod_security) mod_security (id:240335) triggered by 125.62.196.144 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 125.62.196.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 23 07:59:45.852826 2026] [security2:error] [pid 17615:tid 17615] [client 125.62.196.144:50836] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 125.62.196.144 (+1 hits since last alert)\|greenlight.us\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "greenlight.us"] [uri "/xmlrpc.php"] [unique_id "aorgsdh0puZD68Wm9CgNOgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-08-23 11:27:13 (2 days ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇺🇸 TPI-Abuse	2026-08-23 07:54:12 (2 days ago)	(mod_security) mod_security (id:240335) triggered by 125.62.196.144 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 125.62.196.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 23 03:54:01.160037 2026] [security2:error] [pid 23861:tid 23861] [client 125.62.196.144:54737] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 125.62.196.144 (+1 hits since last alert)\|amywoodruff.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "amywoodruff.com"] [uri "/xmlrpc.php"] [unique_id "aoqnGb8_STzhEG4U6nXjvgAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ghostwarriors	2026-08-23 07:20:40 (2 days ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-08-23 07:09:39 (2 days ago)	Fail2Ban: WordPress XML-RPC brute-force attack detected.	Bad Web Bot Web App Attack

Showing 1 to 15 of 27 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇾 201.217.12.57

🇪🇹 196.188.161.62

🇷🇺 193.233.48.169

🇧🇷 189.37.76.139

🇩🇪 178.27.90.142

🇫🇮 147.185.133.238

🇺🇸 107.174.137.235

🇸🇬 84.75.150.168

🇺🇸 82.26.238.39

🇨🇳 58.242.147.50

🇮🇶 37.239.69.8

🇬🇧 178.128.32.226

🇮🇩 163.7.3.154

🇧🇩 161.248.241.33

🇨🇦 148.113.231.166

🇩🇪 147.90.209.229

🇻🇳 116.110.42.231

🇺🇸 107.150.105.153

100.71.86.254

🇦🇪 94.59.21.1