JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 43.242.119.225

43.242.119.225 was found in our database!

This IP was reported 53 times. Confidence of Abuse is 65%: ?

65%

ISP	Gtpl Broadband Pvt. Ltd.
Usage Type	Fixed Line ISP
ASN	AS45916
Domain Name	gtpl.net
Country	🇮🇳 India
City	Jaipur, Rajasthan

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 43.242.119.225

Whois 43.242.119.225

IP Abuse Reports for 43.242.119.225:

This IP address has been reported a total of 53 times from 29 distinct sources. 43.242.119.225 was first reported on May 22nd 2024, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 masterguru	2026-06-24 10:59:36 (6 days ago)	(xmlrpc) Failed xmlrpc access from 43.242.119.225 (IN/India/-): 5 in the last 3600 secs (0-122)	Hacking
Anonymous	2026-06-24 07:16:17 (1 week ago)	Attac	Brute-Force
🇫🇷 dynamix	2026-06-24 01:27:53 (1 week ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇦🇺 screwlooseit.com.au	2026-06-24 01:27:16 (1 week ago)	Blocked by CSF 13 firewall - Rule: XMLRPC IN/India/-	Web App Attack
🇳🇱 Site.eu	2026-06-23 22:30:15 (1 week ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇺🇸 TPI-Abuse	2026-06-23 18:24:42 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 43.242.119.225 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 43.242.119.225 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 14:24:36.743574 2026] [security2:error] [pid 32384:tid 32384] [client 43.242.119.225:48911] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 43.242.119.225 (+1 hits since last alert)\|takeapawsboston.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "takeapawsboston.com"] [uri "/xmlrpc.php"] [unique_id "ajrPZDRunlr1ME850d57lQAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-23 17:48:38 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 43.242.119.225 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 43.242.119.225 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 13:48:31.732925 2026] [security2:error] [pid 8670:tid 8670] [client 43.242.119.225:48734] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 43.242.119.225 (+1 hits since last alert)\|lysedzija.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "lysedzija.com"] [uri "/xmlrpc.php"] [unique_id "ajrG7_ik-GPAsV2Pu4r-wwAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-23 06:01:10 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 43.242.119.225 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 43.242.119.225 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 02:01:04.072585 2026] [security2:error] [pid 19008:tid 19008] [client 43.242.119.225:48876] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 43.242.119.225 (+1 hits since last alert)\|intrinsicdiscovery.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "intrinsicdiscovery.com"] [uri "/xmlrpc.php"] [unique_id "ajohINjDHhOaDWOp5ZU2HgAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-23 00:37:16 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 43.242.119.225 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 43.242.119.225 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 22 20:37:11.433427 2026] [security2:error] [pid 5306:tid 5306] [client 43.242.119.225:48604] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 43.242.119.225 (+1 hits since last alert)\|j3pr.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "j3pr.com"] [uri "/xmlrpc.php"] [unique_id "ajnVN-zbjqmUTnUqU36CgwAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-23 00:28:12 (1 week ago)	Attac	Brute-Force
🇺🇸 TPI-Abuse	2026-06-22 23:32:56 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 43.242.119.225 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 43.242.119.225 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 22 19:32:48.955227 2026] [security2:error] [pid 9368:tid 9368] [client 43.242.119.225:48737] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 43.242.119.225 (+1 hits since last alert)\|bonesband.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "bonesband.com"] [uri "/xmlrpc.php"] [unique_id "ajnGIKUlpS71NmbYMCMZTwAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 integrantservices.com	2026-06-22 23:31:22 (1 week ago)	(wordpress) Failed wordpress login from 43.242.119.225 (IN/India/-)	Brute-Force
🇺🇸 TPI-Abuse	2026-06-22 22:30:11 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 43.242.119.225 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 43.242.119.225 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 22 18:30:03.823365 2026] [security2:error] [pid 16721:tid 16755] [client 43.242.119.225:48958] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 43.242.119.225 (+1 hits since last alert)\|davidholls.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "davidholls.com"] [uri "/xmlrpc.php"] [unique_id "ajm3azMjNhnORFvIshKG6wAAAJc"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-06-22 16:38:43 (1 week ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇫🇷 applemooz	2026-06-22 10:58:53 (1 week ago)	WordPress XMLRPC Brute Force Attacks ...	Brute-Force Web App Attack

Showing 1 to 15 of 53 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 208.87.242.185

🇺🇸 162.216.150.3

🇸🇪 158.174.210.161

🇩🇪 139.59.132.8

🇨🇳 112.231.24.247

🇮🇳 98.70.127.17

🇰🇷 58.226.255.240

🇲🇾 51.162.194.94

🇯🇵 8.216.3.102

🇮🇹 172.253.12.221

🇺🇸 172.237.156.206

🇧🇷 167.250.142.103

🇷🇺 91.194.149.228

🇨🇳 47.97.66.208

🇧🇷 45.178.227.0

🇺🇸 3.142.170.60

🇬🇧 216.226.76.30

🇧🇷 189.84.180.50

🇳🇱 172.94.9.215

🇮🇳 112.133.244.244