JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 125.164.20.146

125.164.20.146 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 0%: ?

ISP	PT TELKOM INDONESIA
Usage Type	Fixed Line ISP
ASN	AS7713
Domain Name	telkom.co.id
Country	🇮🇩 Indonesia
City	Bandung, West Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 125.164.20.146

Whois 125.164.20.146

IP Abuse Reports for 125.164.20.146:

This IP address has been reported a total of 19 times from 17 distinct sources. 125.164.20.146 was first reported on March 13th 2022, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 security.rdmc.fr	2025-03-14 07:16:58 (1 year ago)	Port Scan Attack proto:TCP src:13508 dst:23	Port Scan
Anonymous	2024-09-24 12:53:48 (2 years ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇷🇺 sms.ru	2024-08-18 21:29:19 (2 years ago)	/wp-admin/js/about.php	Web App Attack
🇮🇩 BPS-StatisticsIndonesia	2024-08-18 18:41:30 (2 years ago)	WP Admin Scan Activities	Web App Attack
🇧🇪 Fanjoe	2023-09-24 08:14:20 (3 years ago)	Sep 24 10:14:18 raspberrypi wordpress$fanjoe.be$\[11090\]: XML-RPC authentication attempt for unkn ... show more Sep 24 10:14:18 raspberrypi wordpress$fanjoe.be$\[11090\]: XML-RPC authentication attempt for unknown user [email protected] from 125.164.20.146 ... show less	Brute-Force Web App Attack
🇨🇳 ThreatBook.io	2023-08-28 23:26:43 (3 years ago)	ThreatBook Intelligence: Zombie more details on http://threatbook.io/ip/125.164.20.146 2023-08-28 03 ... show more ThreatBook Intelligence: Zombie more details on http://threatbook.io/ip/125.164.20.146 2023-08-28 03:32:50 //dnspod.qcloud.com:443 show less	Web App Attack
🇮🇩 hermawan	2023-08-26 23:50:12 (3 years ago)	[Sun Aug 27 06:50:10.050359 2023] [security2:error] [pid 300176:tid 140072330438208] [client 125.164 ... show more [Sun Aug 27 06:50:10.050359 2023] [security2:error] [pid 300176:tid 140072330438208] [client 125.164.20.146:14254] [client 125.164.20.146] ModSecurity: Access denied with code 403 (phase 2). String match within "/accept-charset/ /content-encoding/ /proxy/ /lock-token/ /content-range/ /if/" at TX:header_name_accept-charset. [file "/etc/modsecurity/coreruleset-3.3.5/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1397"] [id "920450"] [msg "HTTP header is restricted by policy (/accept-charset/)"] [data "Restricted header detected: Matched Data: connection found within TX:header_name_accept-charset: /accept-charset/ request_line = GET / HTTP/1.1"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/12.1"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/"] [unique_id "ZOqPst6mFCy3Xm2EWQsj4QAAASg"] [karangploso.jatim.b ... show less	Hacking Web App Attack
🇮🇩 RasyiidWho	2023-05-19 04:11:29 (3 years ago)	ip112.20 . 2023-05-19 11:11:27 375199 [Warning] Access denied for user 'root'@'125.164.20.146' (usin ... show more ip112.20 . 2023-05-19 11:11:27 375199 [Warning] Access denied for user 'root'@'125.164.20.146' (using password: YES) ... show less	DDoS Attack Port Scan Brute-Force Bad Web Bot Web App Attack SSH
🇨🇳 ThreatBook.io	2023-03-29 23:20:02 (3 years ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/125.164.20.146 2023-03 ... show more ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/125.164.20.146 2023-03-29 07:01:18 ["enable","system","shell","sh","cat /proc/mounts; /bin/busybox DTUBG"] show less	SSH
🇩🇪 alexgn	2023-03-28 11:19:09 (3 years ago)	Mar 28 13:15:44 hosmatic sshd[1784893]: Invalid user usdj from 125.164.20.146 port 18060 Mar 28 13:1 ... show more Mar 28 13:15:44 hosmatic sshd[1784893]: Invalid user usdj from 125.164.20.146 port 18060 Mar 28 13:16:13 hosmatic sshd[1786568]: Invalid user at4400 from 125.164.20.146 port 26263 Mar 28 13:16:23 hosmatic sshd[1787028]: Invalid user danielle from 125.164.20.146 port 5546 Mar 28 13:17:51 hosmatic sshd[1791641]: Invalid user debug from 125.164.20.146 port 29917 Mar 28 13:19:08 hosmatic sshd[1795914]: Invalid user system from 125.164.20.146 port 14310 ... show less	Brute-Force SSH
🇪🇸 didevi	2023-03-27 15:56:19 (3 years ago)	$f2bV_matches	Brute-Force SSH
🇩🇪 alexgn	2023-03-27 15:46:51 (3 years ago)	Mar 27 17:39:56 hosmatic sshd[2193942]: Invalid user xzx from 125.164.20.146 port 1059 Mar 27 17:40: ... show more Mar 27 17:39:56 hosmatic sshd[2193942]: Invalid user xzx from 125.164.20.146 port 1059 Mar 27 17:40:00 hosmatic sshd[2194248]: Invalid user ubuntu from 125.164.20.146 port 3238 Mar 27 17:43:44 hosmatic sshd[2206225]: Invalid user MS54 from 125.164.20.146 port 14749 Mar 27 17:46:24 hosmatic sshd[2214977]: Invalid user wangli from 125.164.20.146 port 32361 Mar 27 17:46:50 hosmatic sshd[2216246]: Invalid user jy from 125.164.20.146 port 13320 ... show less	Brute-Force SSH
🇺🇸 Dan Habot	2023-03-27 13:45:21 (3 years ago)	2023-03-27T09:46:32.318178-04:00 workstation sshd[2206028]: Invalid user ubuntu from 125.164.20.146 ... show more 2023-03-27T09:46:32.318178-04:00 workstation sshd[2206028]: Invalid user ubuntu from 125.164.20.146 port 28653 ... show less	Brute-Force SSH
🇩🇪 F242	2023-02-23 22:31:21 (3 years ago)	Wordpress Login or XMLRPC abuse	Web App Attack
🇨🇦 soundboxxx.com	2022-09-16 23:21:54 (4 years ago)	Sep 16 22:21:41 soundboxxx sshd[3323415]: pam_unix(sshd:auth): authentication failure; logname= uid= ... show more Sep 16 22:21:41 soundboxxx sshd[3323415]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.164.20.146 Sep 16 22:21:41 soundboxxx sshd[3323415]: Invalid user user2 from 125.164.20.146 port 19435 Sep 16 22:21:43 soundboxxx sshd[3323415]: Failed password for invalid user user2 from 125.164.20.146 port 19435 ssh2 Sep 16 22:21:51 soundboxxx sshd[3323426]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.164.20.146 user=root Sep 16 22:21:53 soundboxxx sshd[3323426]: Failed password for root from 125.164.20.146 port 30247 ssh2 ... show less	Brute-Force SSH

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 188.40.244.107

🇸🇦 158.101.233.87

🇻🇳 103.189.208.13

🇬🇧 86.38.187.206

🇺🇸 216.180.246.149

🇹🇼 198.235.24.13

🇲🇾 195.86.192.66

🇺🇸 172.236.123.208

🇺🇸 164.90.142.33

🇨🇳 112.86.225.244

🇮🇩 103.165.212.210

🇮🇳 103.65.30.157

🇳🇬 102.140.97.134

🇷🇴 92.118.39.50

🇺🇸 91.223.133.125

🇺🇸 89.46.0.166

🇬🇧 86.38.187.177

🇬🇧 86.38.187.176

🇵🇱 85.14.74.218

🇩🇪 47.254.173.24