JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 125.162.213.139

125.162.213.139 was found in our database!

This IP was reported 37 times. Confidence of Abuse is 100%: ?

100%

ISP	PT TELKOM INDONESIA
Usage Type	Fixed Line ISP
ASN	AS7713
Domain Name	telkom.co.id
Country	🇮🇩 Indonesia
City	Makassar, South Sulawesi

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 125.162.213.139

Whois 125.162.213.139

IP Abuse Reports for 125.162.213.139:

This IP address has been reported a total of 37 times from 23 distinct sources. 125.162.213.139 was first reported on May 18th 2021, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 ghostwarriors	2026-07-11 17:20:17 (1 day ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-11 16:53:26 (1 day ago)	Fail2Ban: WordPress XML-RPC brute-force attack detected.	Bad Web Bot Web App Attack
🇧🇪 cmbplf	2026-07-11 11:03:19 (1 day ago)	2.097 requests from abuseipdb.com blacklisted IP (11mos2w4d)	Brute-Force Bad Web Bot
🇳🇱 Site.eu	2026-07-11 10:36:18 (1 day ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇯🇵 rafale2k	2026-07-10 19:33:47 (1 day ago)	WordPress Brute Force	Brute-Force Web App Attack
🇦🇺 screwlooseit.com.au	2026-07-10 00:53:45 (2 days ago)	Blocked by CSF 13 firewall - Rule: XMLRPC ID/Indonesia/-	Web App Attack
Anonymous	2026-07-09 13:28:54 (3 days ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇺🇸 TPI-Abuse	2026-07-09 03:33:00 (3 days ago)	(mod_security) mod_security (id:240335) triggered by 125.162.213.139 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 125.162.213.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 23:32:53.150222 2026] [security2:error] [pid 7009:tid 7009] [client 125.162.213.139:19369] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 125.162.213.139 (+1 hits since last alert)\|hotpay.co\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "hotpay.co"] [uri "/xmlrpc.php"] [unique_id "ak8WZVwAGkdv0MTbYv-TyAAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Lunix	2026-07-08 23:54:33 (3 days ago)		Brute-Force Web App Attack
🇸🇪 vaia.cloud	2026-07-08 23:44:05 (3 days ago)	trying wp-login.php/xmlrpc.php 43 times in 1 minutes	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-08 20:53:38 (3 days ago)	(mod_security) mod_security (id:240335) triggered by 125.162.213.139 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 125.162.213.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 16:53:35.026279 2026] [security2:error] [pid 16504:tid 16504] [client 125.162.213.139:3851] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 125.162.213.139 (+1 hits since last alert)\|billwegener.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "billwegener.net"] [uri "/xmlrpc.php"] [unique_id "ak64z3cp8HXtnFvKcsuN2wAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 LRob	2026-07-08 20:50:23 (3 days ago)	CrowdSec: crowdsecurity/http-bf-wordpress_bf_xmlrpc \| req: ["/xmlrpc.php"] \| UA: ["Jetpack by WordPr ... show more CrowdSec: crowdsecurity/http-bf-wordpress_bf_xmlrpc \| req: ["/xmlrpc.php"] \| UA: ["Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.2)","WordPress.com; https://wordpress.com","Jetpack/12.1; WordPress/6.3; http://site47203466.com show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-08 18:51:49 (3 days ago)	(mod_security) mod_security (id:240335) triggered by 125.162.213.139 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 125.162.213.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 14:51:44.417376 2026] [security2:error] [pid 20823:tid 20823] [client 125.162.213.139:40835] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 125.162.213.139 (+1 hits since last alert)\|blaslandsporthorses.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "blaslandsporthorses.com"] [uri "/xmlrpc.php"] [unique_id "ak6cQGR80JvrJjYLZ5U1mAAAAB4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-08 18:18:25 (3 days ago)	(mod_security) mod_security (id:240335) triggered by 125.162.213.139 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 125.162.213.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 14:18:17.670261 2026] [security2:error] [pid 10707:tid 10707] [client 125.162.213.139:6664] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 125.162.213.139 (+1 hits since last alert)\|kmindonesia.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "kmindonesia.com"] [uri "/xmlrpc.php"] [unique_id "ak6UaRILKhvr26GTnt9atgAAACI"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 QT	2026-07-08 15:42:17 (4 days ago)	Unauthorised WordPress admin login attempted at 2026-07-09 01:42:16 +1000	Web App Attack

Showing 1 to 15 of 37 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇿🇦 102.39.240.94

🇳🇱 45.148.10.152

🇨🇴 38.252.236.40

🇮🇳 223.228.176.77

🇻🇪 201.249.205.94

🇧🇴 190.129.122.185

🇸🇪 171.25.158.47

🇺🇸 170.246.54.82

🇺🇸 165.154.135.73

🇲🇽 149.88.22.139

🇪🇬 105.196.183.3

🇵🇹 77.54.103.39

🇸🇬 43.159.38.3

🇸🇦 37.217.109.253

🇮🇳 223.181.25.117

🇺🇿 213.230.112.26

🇸🇨 196.251.121.106

🇺🇸 194.146.134.109

🇧🇷 187.120.73.217

🇹🇷 176.236.199.166