JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 125.164.18.213

125.164.18.213 was found in our database!

This IP was reported 31 times. Confidence of Abuse is 0%: ?

ISP	PT TELKOM INDONESIA
Usage Type	Fixed Line ISP
ASN	AS7713
Domain Name	telkom.co.id
Country	🇮🇩 Indonesia
City	Malang, East Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 125.164.18.213

Whois 125.164.18.213

IP Abuse Reports for 125.164.18.213:

This IP address has been reported a total of 31 times from 19 distinct sources. 125.164.18.213 was first reported on November 2nd 2021, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2024-09-21 01:38:06 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇳🇱 Niels	2024-06-22 21:06:08 (2 years ago)	Cowrie Honeypot: Unauthorised SSH/Telnet login attempt with user "admin" at 2024-06-22T21:06:08Z	Brute-Force SSH
🇻🇪 VenCERT	2024-05-04 01:11:10 (2 years ago)	trying to access non-authorized port	Port Scan
🇧🇷 diego	2024-05-02 06:33:23 (2 years ago)	[kvm3859] 05/02/2024-03:33:22.937377, 125.164.18.213, Protocol: 6, ET SCAN Suspicious inbound to myS ... show more [kvm3859] 05/02/2024-03:33:22.937377, 125.164.18.213, Protocol: 6, ET SCAN Suspicious inbound to mySQL port 3306 show less	Hacking
🇧🇷 diego	2024-03-01 02:20:18 (2 years ago)	[kvm3859] 02/29/2024-23:20:18.434793, 125.164.18.213, Protocol: 6, ET SCAN Suspicious inbound to myS ... show more [kvm3859] 02/29/2024-23:20:18.434793, 125.164.18.213, Protocol: 6, ET SCAN Suspicious inbound to mySQL port 3306 show less	Hacking
🇺🇸 gu-alvareza	2023-06-30 07:05:20 (3 years ago)	PHPUnit.Eval-stdin.PHP.Remote.Code.Execution	Hacking Web App Attack
🇮🇩 RasyiidWho	2023-04-27 10:52:30 (3 years ago)	ip112.20 . 2023-04-27 17:52:30 278675 [Warning] Access denied for user 'root'@'125.164.18.213' (usin ... show more ip112.20 . 2023-04-27 17:52:30 278675 [Warning] Access denied for user 'root'@'125.164.18.213' (using password: NO) ... show less	DDoS Attack Port Scan Brute-Force Bad Web Bot Web App Attack SSH
🇮🇩 RasyiidWho	2023-04-16 06:12:06 (3 years ago)	ip112.20 . 2023-04-16 13:12:06 246162 [Warning] Access denied for user 'root'@'125.164.18.213' (usin ... show more ip112.20 . 2023-04-16 13:12:06 246162 [Warning] Access denied for user 'root'@'125.164.18.213' (using password: NO) ... show less	DDoS Attack Port Scan Brute-Force Bad Web Bot Web App Attack SSH
🇮🇩 RasyiidWho	2023-04-14 03:21:37 (3 years ago)	ip112.20 . 2023-04-14 10:21:35 239554 [Warning] Access denied for user 'root'@'125.164.18.213' (usin ... show more ip112.20 . 2023-04-14 10:21:35 239554 [Warning] Access denied for user 'root'@'125.164.18.213' (using password: YES) ... show less	DDoS Attack Port Scan Brute-Force Bad Web Bot Web App Attack SSH
🇮🇩 RasyiidWho	2023-03-19 03:18:43 (3 years ago)	ip112.20 . 2023-03-19 10:18:41 160609 [Warning] Access denied for user 'root'@'125.164.18.213' (usin ... show more ip112.20 . 2023-03-19 10:18:41 160609 [Warning] Access denied for user 'root'@'125.164.18.213' (using password: YES) ... show less	DDoS Attack Port Scan Brute-Force Bad Web Bot Web App Attack SSH
🇿🇦 IrisFlower	2023-02-12 22:18:46 (3 years ago)	Unauthorized connection attempt detected from IP address 125.164.18.213 to port 80 [J]	Port Scan Hacking
Anonymous	2023-01-05 02:58:54 (3 years ago)	Jan 5 03:45:09 xxx sshd[2907738]: Invalid user debian from 125.164.18.213 port 13579 Jan 5 03:45:0 ... show more Jan 5 03:45:09 xxx sshd[2907738]: Invalid user debian from 125.164.18.213 port 13579 Jan 5 03:45:09 xxx sshd[2907738]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.164.18.213 Jan 5 03:45:11 xxx sshd[2907738]: Invalid user invalid user debian from 125.164.18.213 port 13579 ssh2 Jan 5 03:58:51 xxx sshd[3231008]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.164.18.213 user=root Jan 5 03:58:54 xxx sshd[3231008]: Invalid user root from 125.164.18.213 port 7969 ssh2 ... show less	Brute-Force SSH
🇺🇸 LotusDragon	2023-01-05 02:48:43 (3 years ago)	Jan 4 18:48:40 ds13592 sshd[31380]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eui ... show more Jan 4 18:48:40 ds13592 sshd[31380]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.164.18.213 user=root Jan 4 18:48:40 ds13592 sshd[31380]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.164.18.213 user=root Jan 4 18:48:42 ds13592 sshd[31380]: Failed password for root from 125.164.18.213 port 5351 ssh2 Jan 4 18:48:42 ds13592 sshd[31380]: Failed password for root from 125.164.18.213 port 5351 ssh2 show less	Brute-Force SSH
🇸🇪 HyperSpeed	2023-01-05 01:52:08 (3 years ago)	Jan 5 01:52:07 SE1 sshd[3456386]: Invalid user tommy from 125.164.18.213 port 1510 ...	Brute-Force SSH
🇺🇸 bigscoots.com	2023-01-05 01:44:13 (3 years ago)	125.164.18.213 (ID/Indonesia/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; ... show more 125.164.18.213 (ID/Indonesia/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jan 5 01:43:57 23955 sshd[15558]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.115.26.171 user=root Jan 5 01:41:48 23955 sshd[15481]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.164.19.22 user=root Jan 5 01:41:50 23955 sshd[15481]: Failed password for root from 125.164.19.22 port 8478 ssh2 Jan 5 01:39:10 23955 sshd[15292]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.164.18.213 user=root Jan 5 01:39:12 23955 sshd[15292]: Failed password for root from 125.164.18.213 port 20080 ssh2 IP Addresses Blocked: 82.115.26.171 (DE/Germany/-) 125.164.19.22 (ID/Indonesia/-) show less	Brute-Force SSH

Showing 1 to 15 of 31 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 106.55.173.172

🇺🇿 213.230.111.14

🇷🇴 193.32.162.60

🇺🇸 165.227.57.18

🇦🇫 149.54.40.94

🇮🇳 103.81.240.27

🇩🇪 69.5.169.234

🇳🇱 195.178.110.26

🇬🇧 195.21.76.33

🇩🇪 167.94.145.24

🇨🇳 115.220.51.185

🇵🇰 103.148.128.156

🇨🇳 60.163.129.201

🇳🇱 45.156.87.213

🇰🇷 219.250.188.143

🇺🇸 172.234.199.93

🇮🇳 152.59.201.1

🇮🇩 114.129.19.147

🇫🇷 91.231.89.174

🇫🇷 91.231.89.173