JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 125.164.17.67

125.164.17.67 was found in our database!

This IP was reported 112 times. Confidence of Abuse is 14%: ?

14%

ISP	PT TELKOM INDONESIA
Usage Type	Fixed Line ISP
ASN	AS7713
Domain Name	telkom.co.id
Country	🇮🇩 Indonesia
City	Malang, East Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 125.164.17.67

Whois 125.164.17.67

IP Abuse Reports for 125.164.17.67:

This IP address has been reported a total of 112 times from 72 distinct sources. 125.164.17.67 was first reported on October 31st 2021, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 kosada.com	2026-08-19 16:12:01 (1 week ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
Anonymous	2026-08-15 02:30:18 (1 week ago)	Large-scale coordinated botnet (1.2M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a ... show more Large-scale coordinated botnet (1.2M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim\|LIS\|MOW]); Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]) employed by Angara Technologies Group \| Attack Signature Blocked: /catalog/product_compare/add/product/11025/uenc/aHR0cHM6Ly93d3cuZDJvZmZpY2UucnUvY2F0YWxvZ3NlYXJjaC9yZXN1bHQvP2NhdD00MiZhbXA7cT1uZWMrbnA0MDMmYW1wO3NjcmVlbnNpemU9MjImYW1wO3N0b2NrPTE,/form_key/kNzdcxU8BcYbaUMO/ \| UA: Opera/9.28.(X11; Linux x86_64; niu-NZ) Presto/2.9.164 Version/12.00 \| (Magento Site) show less	Hacking Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-08-01 00:22:39 (3 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-07-16 13:20:21 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇮🇩 hermawan	2026-06-27 07:57:00 (2 months ago)	06/27/2026-14:51:33.688325 [Drop] [*] [1:2210016:2] SURICATA STREAM CLOSEWAIT FIN out of window [ ... show more 06/27/2026-14:51:33.688325 [Drop] [] [1:2210016:2] SURICATA STREAM CLOSEWAIT FIN out of window [] [Classification: Generic Protocol Command Decode] [Priority: 3] {TCP} 125.164.17.67:21596 -> 103.166.156.58:443 ... show less	Email Spam Hacking
🇮🇩 hermawan	2026-06-05 16:54:32 (2 months ago)	[Fri Jun 05 23:54:28.307869 2026] [security2:error] [pid 1142650:tid 140021559441088] [client 125.16 ... show more [Fri Jun 05 23:54:28.307869 2026] [security2:error] [pid 1142650:tid 140021559441088] [client 125.164.17.67:26441] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:Referer: https://www.bmkg.go.id/ request_line = GET /index.php/informasi-iklim/buletin-1/buletin-informasi-iklim-dan-lingkungan HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/buletin-1/buletin-informasi-iklim-dan-lingkungan"] [unique_id "aiL_RB8qspnfalHSNBNuwAAAEwM"], referer https://www.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[1142654] [kt+Lg0SvaHk] [aiL_RB8qspnfalHSNBNuwAAAEwM] keep_alive=[1] [2026-06-05 23:54:28.307876] [R:aiL_RB8qspnfalHSNBNuwAAAEwM] UA:'Mozilla/5.0 (Linux; Andr ... show less	Email Spam Hacking
🇩🇪 Packets-Decreaser.NET	2025-09-05 20:39:45 (11 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇳🇱 exxos	2025-08-01 02:49:13 (1 year ago)	HTTP1.x attacks	DDoS Attack
🇳🇱 exxos	2025-07-31 03:16:02 (1 year ago)	http-no-verb	Hacking
🇳🇱 exxos	2025-07-31 01:58:52 (1 year ago)	HTTP1.x attacks	DDoS Attack
🇳🇱 exxos	2025-07-30 02:53:06 (1 year ago)	http-no-verb	Hacking
🇳🇱 exxos	2025-07-27 22:03:43 (1 year ago)	HTTP1.x attacks	DDoS Attack
🇳🇱 exxos	2025-07-24 17:28:46 (1 year ago)	http-no-verb	Hacking
🇩🇪 _ArminS_	2025-04-14 07:49:34 (1 year ago)	SP-Scan 31792:1433 detected 2025.04.14 09:49:34 blocked until 2025.06.03 02:52:21	Port Scan
🇮🇩 hermawan	2024-10-31 18:41:24 (1 year ago)	[Thu Oct 31 16:04:19.839164 2024] [security2:error] [pid 281991:tid 128998780700352] [client 125.164 ... show more [Thu Oct 31 16:04:19.839164 2024] [security2:error] [pid 281991:tid 128998780700352] [client 125.164.17.67:7207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "myactivity.google.com" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.7.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "257"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: myactivity.google.com found within REQUEST_HEADERS:Referer: https://myactivity.google.com/ request_line = GET /images/Klimatologi/Prakiraan/03-Prakiraan-Bulanan/Prakiraan_Curah_Hujan_Bulanan/Prakiraan_Curah_Hujan_Bulanan_Provinsi_Jawa_Timur/2024/07_Juli_2024/03_Prakiraan_Curah_Hujan_Bulan_NOVEMBER_2024_di_Provinsi_Jawa_Timur-Update_dari_Analisis_Bulan_Juli_2024.jpg HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/images/Klimatologi/Prakiraan/03-Prakiraan-Bulanan/Prakiraan_Curah_Hujan_Bulanan/Prakiraan_Curah_Hujan_Bulanan_Provinsi_Jawa_Timur/2024/07_Juli_2024/03_Prakiraan_Curah_H ... show less	Hacking Web App Attack

Showing 1 to 15 of 112 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇷 213.155.103.215

🇦🇷 190.13.235.69

🇳🇱 176.65.148.136

🇦🇪 165.154.12.38

🇺🇸 162.216.150.216

🇺🇸 162.216.150.68

🇭🇰 123.58.209.194

🇩🇪 116.202.3.55

🇨🇳 113.221.28.132

🇦🇪 94.205.250.78

🇫🇷 91.196.152.190

🇱🇻 80.232.159.235

🇺🇸 66.240.236.116

🇵🇰 59.103.104.100

🇫🇷 51.83.96.211

🇵🇱 51.38.138.207

🇩🇪 45.159.221.141

🇮🇩 36.92.41.115

🇬🇧 35.203.210.132

🇺🇸 34.63.42.56