JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 202.125.67.155

202.125.67.155 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 34%: ?

34%

ISP	Grameen CyberNet
Usage Type	Fixed Line ISP
ASN	AS138004
Domain Name	grameencybernet.net
Country	🇧🇩 Bangladesh
City	Rajshahi, Rajshahi Division

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 202.125.67.155

Whois 202.125.67.155

IP Abuse Reports for 202.125.67.155:

This IP address has been reported a total of 11 times from 6 distinct sources. 202.125.67.155 was first reported on May 30th 2026, and the most recent report was 8 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 kosada.com	2026-07-31 05:52:12 (8 hours ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇫🇷 dynamix	2026-07-31 05:29:37 (9 hours ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇫🇷 bigorre.org	2026-07-25 09:58:44 (6 days ago)	Unidentified crawling: not a self-announced bot in user-agent	Bad Web Bot
🇺🇸 kosada.com	2026-07-12 01:04:01 (2 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-10 10:27:16 (3 weeks ago)	(mod_security) mod_security (id:240335) triggered by 202.125.67.155 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 202.125.67.155 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 10 06:27:10.492590 2026] [security2:error] [pid 8373:tid 8373] [client 202.125.67.155:49221] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 202.125.67.155 (+1 hits since last alert)\|lajoze.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "lajoze.com"] [uri "/xmlrpc.php"] [unique_id "alDI_tXpYT-A9-tZQ-CluQAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-10 08:58:57 (3 weeks ago)	(mod_security) mod_security (id:240335) triggered by 202.125.67.155 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 202.125.67.155 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 10 04:58:52.597923 2026] [security2:error] [pid 25905:tid 25905] [client 202.125.67.155:54643] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 202.125.67.155 (+1 hits since last alert)\|swcbsa.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "swcbsa.org"] [uri "/xmlrpc.php"] [unique_id "alC0TJldtO3WzU32W1GHHQAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-06-29 09:38:35 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇩🇪 pscriptos	2026-06-26 14:09:06 (1 month ago)	{"ClientAddr":"202.125.67.155:50573","ClientHost":"202.125.67.155","ClientPort":"50573","ClientUsern ... show more {"ClientAddr":"202.125.67.155:50573","ClientHost":"202.125.67.155","ClientPort":"50573","ClientUsername":"-","DownstreamContentSize":418,"DownstreamStatus":403,"Duration":149126137,"OriginContentSize":418,"OriginDuration":145961685,"OriginStatus":403,"Overhead":3164452,"RequestAddr":"www.cleveradmin.de","RequestContentSize":708,"RequestCount":1513768,"RequestHost":"www.cleveradmin.de","RequestMethod":"POST","RequestPath":"/xmlrpc.php","RequestPort":"-","RequestProtocol":"HTTP/1.1","RequestScheme":"https","RetryAttempts":0,"RouterName":"cleveradmin-www-websecure@file","ServiceAddr":"172.16.80.10:80","ServiceName":"cleveradmin-www@file","ServiceURL":"http://172.16.80.10:80","StartLocal":"2026-06-26T16:08:46.506980864+02:00","StartUTC":"2026-06-26T14:08:46.506980864Z","TLSCipher":"TLS_AES_128_GCM_SHA256","TLSVersion":"1.3","entryPointName":"websecure","level":"info","msg":"","time":"2026-06-26T16:08:46+02:00"} {"ClientAddr":"202.125.67.155:50573","ClientHost":"202.125.67.155","ClientPort" ... show less	Brute-Force Web App Attack
Anonymous	2026-06-24 12:10:13 (1 month ago)	Attac	Brute-Force
🇫🇷 dynamix	2026-06-18 04:02:51 (1 month ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
Anonymous	2026-05-30 06:30:42 (2 months ago)	Attac	Brute-Force

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 162.216.150.48

🇩🇪 193.27.14.243

🇺🇸 107.161.168.159

🇦🇹 83.218.162.176

🇺🇸 34.186.24.17

🇺🇸 17.22.245.42

🇳🇱 213.176.26.42

🇭🇳 181.115.62.113

🇭🇰 152.32.172.177

🇺🇿 94.158.61.84

🇺🇿 94.158.58.183

🇺🇸 57.141.0.43

🇲🇾 49.125.201.68

🇫🇮 45.148.101.101

🇺🇸 2620:18c:0:192::e0:191

🇬🇧 193.163.125.74

🇵🇪 190.12.83.134

🇺🇸 162.216.150.214

🇦🇷 148.227.69.42

🇧🇷 148.222.209.62