JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 92.53.25.122

92.53.25.122 was found in our database!

This IP was reported 18 times. Confidence of Abuse is 84%: ?

84%

ISP	Company for communications services A1 Makedonija DOOEL Skopje
Usage Type	Fixed Line ISP
ASN	AS43612
Hostname(s)	ctel-92-53-25-122.cabletel.com.mk
Domain Name	a1.mk
Country	🇲🇰 North Macedonia
City	Skopje, Grad Skopje

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 92.53.25.122

Whois 92.53.25.122

IP Abuse Reports for 92.53.25.122:

This IP address has been reported a total of 18 times from 15 distinct sources. 92.53.25.122 was first reported on June 18th 2026, and the most recent report was 8 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 ghostwarriors	2026-07-18 23:20:07 (8 hours ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-18 23:01:19 (8 hours ago)	Fail2Ban: WordPress XML-RPC brute-force attack detected.	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-18 21:50:42 (9 hours ago)	(mod_security) mod_security (id:240335) triggered by 92.53.25.122 (ctel-92-53-25-122.cabletel.com.mk ... show more (mod_security) mod_security (id:240335) triggered by 92.53.25.122 (ctel-92-53-25-122.cabletel.com.mk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 17:50:38.244945 2026] [security2:error] [pid 23039:tid 23043] [client 92.53.25.122:8123] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 92.53.25.122 (+1 hits since last alert)\|dbestcarting.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "dbestcarting.com"] [uri "/xmlrpc.php"] [unique_id "alv1LoDYRljKKJl6WPJt4AAAAMI"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 screwlooseit.com.au	2026-07-18 20:47:58 (10 hours ago)	Blocked by CSF 13 firewall - Rule: XMLRPC MK/North Macedonia/ctel-92-53-25-122.cabletel.com.mk	Web App Attack
🇺🇸 TPI-Abuse	2026-07-18 18:46:34 (12 hours ago)	(mod_security) mod_security (id:240335) triggered by 92.53.25.122 (ctel-92-53-25-122.cabletel.com.mk ... show more (mod_security) mod_security (id:240335) triggered by 92.53.25.122 (ctel-92-53-25-122.cabletel.com.mk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 14:46:28.744165 2026] [security2:error] [pid 15673:tid 15673] [client 92.53.25.122:7499] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 92.53.25.122 (+1 hits since last alert)\|zeetec.nl\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "zeetec.nl"] [uri "/xmlrpc.php"] [unique_id "alvKBHtdcqpfgWSDYL0UywAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-18 14:58:41 (16 hours ago)	2026-07-18T16:58:40.182641+02:00 aion wordpress[176175]: Blocked authentication attempt for admin fr ... show more 2026-07-18T16:58:40.182641+02:00 aion wordpress[176175]: Blocked authentication attempt for admin from 92.53.25.122 ... show less	Hacking Brute-Force
🇬🇧 gigatech	2026-07-18 14:30:03 (16 hours ago)	Webserver Probing	Web App Attack
🇺🇸 WeekendWeb	2026-07-18 12:14:57 (19 hours ago)	Wordpress Vunerability attack	Web App Attack
🇫🇷 Kenshin869	2026-07-18 01:21:05 (1 day ago)	Wordpress unauthorized access attempt	Brute-Force
🇺🇸 TPI-Abuse	2026-07-17 20:47:05 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 92.53.25.122 (ctel-92-53-25-122.cabletel.com.mk ... show more (mod_security) mod_security (id:240335) triggered by 92.53.25.122 (ctel-92-53-25-122.cabletel.com.mk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 16:46:57.671036 2026] [security2:error] [pid 5749:tid 5749] [client 92.53.25.122:7918] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 92.53.25.122 (+1 hits since last alert)\|stlouisdave.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "stlouisdave.com"] [uri "/xmlrpc.php"] [unique_id "alqUwV8LEm-Zl5ZBYG8bnwAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-17 18:52:04 (1 day ago)	Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/1.1	Hacking Web App Attack
🇫🇮 KnightIndustries	2026-07-17 18:40:55 (1 day ago)	2026-07-17T20:40:34.007570+02:00 milkyway wordpress(learncryptography.pw)[3813831]: XML-RPC authenti ... show more 2026-07-17T20:40:34.007570+02:00 milkyway wordpress(learncryptography.pw)[3813831]: XML-RPC authentication failure for macminty from 92.53.25.122 2026-07-17T20:40:44.301373+02:00 milkyway wordpress(learncryptography.pw)[3813823]: XML-RPC authentication failure for macminty from 92.53.25.122 2026-07-17T20:40:54.845008+02:00 milkyway wordpress(learncryptography.pw)[3783662]: XML-RPC authentication failure for macminty from 92.53.25.122 ... show less	Brute-Force Web App Attack
Anonymous	2026-07-17 17:40:36 (1 day ago)		Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-07-17 17:09:07 (1 day ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 16:09:02 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 92.53.25.122 (ctel-92-53-25-122.cabletel.com.mk ... show more (mod_security) mod_security (id:240335) triggered by 92.53.25.122 (ctel-92-53-25-122.cabletel.com.mk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 12:08:56.580471 2026] [security2:error] [pid 1260421:tid 1260436] [client 92.53.25.122:7185] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 92.53.25.122 (+1 hits since last alert)\|supercyprus.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "supercyprus.com"] [uri "/xmlrpc.php"] [unique_id "alpTmFfLMgTprAFYQtKJSwAAAU0"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 18 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇦 178.159.213.128

🇫🇷 91.196.152.196

🇮🇷 5.239.156.123

🇧🇷 200.199.32.174

🇷🇴 193.46.255.86

🇺🇸 173.255.223.89

🇨🇳 124.225.4.88

🇩🇪 109.91.4.177

🇺🇸 74.82.47.13

🇩🇪 69.5.169.195

🇸🇬 2a04:4e40:1700:0:2bf:3270:510d:45fd

🇦🇴 193.163.125.42

🇲🇾 183.171.7.171

🇮🇳 182.76.43.24

🇺🇸 162.216.149.125

🇳🇱 160.119.71.92

🇺🇸 147.185.132.13

🇺🇸 143.110.224.55

🇨🇳 119.53.253.2

🇯🇵 118.153.249.185