JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 203.175.125.146

203.175.125.146 was found in our database!

This IP was reported 40 times. Confidence of Abuse is 46%: ?

46%

ISP	PT Radio Dutacakrawala Serasi
Usage Type	Fixed Line ISP
ASN	AS139952
Domain Name	radiodutacakrawalaserasi.co.id
Country	🇮🇩 Indonesia
City	Madiun, East Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 203.175.125.146

Whois 203.175.125.146

IP Abuse Reports for 203.175.125.146:

This IP address has been reported a total of 40 times from 26 distinct sources. 203.175.125.146 was first reported on April 6th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 cmbplf	2026-06-27 14:36:14 (1 day ago)	178 requests with url.path sftp.json 167 requests with url.path config.json	Brute-Force Bad Web Bot
🇫🇷 conseilgouz	2026-06-25 04:19:47 (3 days ago)	sae-17 : Block hidden directories=>/.vscode/sftp.json(/)	Hacking
🇩🇪 conseilgouz	2026-06-24 21:19:32 (3 days ago)	ece-17 : Block hidden directories=>/.vscode/sftp.json(/)	Hacking
🇳🇿 Tripwire	2026-06-16 12:29:02 (1 week ago)	Scanning for exploits - /.vscode/sftp.json	Web App Attack
🇺🇸 nyt	2026-06-14 05:07:01 (2 weeks ago)	Deploy Config Probe	Web App Attack
🇫🇷 Baking333	2026-06-13 19:49:08 (2 weeks ago)	[redacted] 203.175.125.146 - - [13/Jun/2026:20:48:56 +0100] "GET /[redacted] HTTP/1.1" 302 5268 0/29 ... show more [redacted] 203.175.125.146 - - [13/Jun/2026:20:48:56 +0100] "GET /[redacted] HTTP/1.1" 302 5268 0/29313 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" [redacted] 203.175.125.146 - - [13/Jun/2026:20:49:07 +0100] "GET /.vscode/[redacted] HTTP/1.1" 302 5268 0/41132 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" show less	Bad Web Bot Web App Attack
🇺🇸 Penny Packer	2026-06-13 16:03:35 (2 weeks ago)	Fail2Ban apache-tripwires	Web App Attack
🇺🇸 TPI-Abuse	2026-06-13 01:42:35 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 203.175.125.146 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 203.175.125.146 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 21:42:32.616031 2026] [security2:error] [pid 10422:tid 10422] [client 203.175.125.146:53122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gruponovak.com"] [uri "/sftp-config.json"] [unique_id "aiy1iPVDexLbZeCJSLBJsgAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Baking333	2026-06-12 22:42:05 (2 weeks ago)	[redacted] 203.175.125.146 - - [12/Jun/2026:23:41:40 +0100] "GET /[redacted] HTTP/1.1" 302 5258 0/70 ... show more [redacted] 203.175.125.146 - - [12/Jun/2026:23:41:40 +0100] "GET /[redacted] HTTP/1.1" 302 5258 0/70153 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" [redacted] 203.175.125.146 - - [12/Jun/2026:23:42:03 +0100] "GET /.vscode/[redacted] HTTP/1.1" 302 5258 0/96029 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" show less	Bad Web Bot Web App Attack
🇺🇸 Epimetheus	2026-06-11 16:02:43 (2 weeks ago)	Unauthorized access attempts: [GET] /.vscode/sftp.json [GET] /sftp-config.json UA: Mozilla/5.0 (Ma ... show more Unauthorized access attempts: [GET] /.vscode/sftp.json [GET] /sftp-config.json UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0 show less	Web App Attack
🇺🇸 TPI-Abuse	2026-06-11 11:37:43 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 203.175.125.146 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 203.175.125.146 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 07:37:37.767634 2026] [security2:error] [pid 12585:tid 12585] [client 203.175.125.146:52487] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "getitenglish.com"] [uri "/sftp-config.json"] [unique_id "aiqeAed9TMDybHux8i6CVQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇩 Burayot	2026-05-06 06:23:46 (1 month ago)	LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 203.175.125.146 (ID/Indonesia/-): 1 ... show more LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 203.175.125.146 (ID/Indonesia/-): 1 in the last 3600 secs show less	Web App Attack
🇩🇪 FeG Deutschland	2026-05-02 13:36:46 (1 month ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
🇩🇪 LRob.fr	2026-04-28 04:00:03 (2 months ago)	Repeated 404 errors, blocked by Fail2ban in custom-404 jail	Bad Web Bot
🇩🇪 LRob.fr	2026-04-26 22:30:03 (2 months ago)	Repeated 404 errors, blocked by Fail2ban in custom-404 jail	Bad Web Bot

Showing 1 to 15 of 40 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 103.111.6.121

🇳🇱 89.21.67.149

🇺🇸 74.82.47.11

🇳🇱 45.148.10.200

🇳🇱 45.148.10.141

🇭🇰 20.24.71.195

🇺🇸 8.235.66.222

🇬🇧 2a05:d01c:8c7:6800:18e8:5074:b222:9a56

🇺🇸 216.25.89.90

🇵🇭 210.23.166.20

🇩🇪 185.30.32.114

🇮🇩 8.215.89.194

🇨🇳 8.134.111.31

🇺🇸 146.88.241.161

🇩🇪 144.76.91.155

🇮🇩 128.14.233.253

🇮🇪 86.40.119.77

🇧🇬 79.124.56.210

🇳🇱 45.148.10.147

🇨🇳 14.220.189.24