JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

125.164.20.181

Neutral Activity

Abuse confidence score ?

0% Low Risk

53 reports

31 reporters · latest 11 months ago

ISP	PT TELKOM INDONESIA
Usage Type	Fixed Line ISP
ASN	AS7713
Domain Name	telkom.co.id
Country	🇮🇩 Indonesia
City	Surabaya, East Java

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

125.164.20.181 has been reported 53 times. The most recent report is from 11 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 125.164.20.181

This IP address has been reported a total of 53 times from 31 distinct sources. 125.164.20.181 was first reported on July 31st 2023, and the most recent report was 11 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 hermawan	2025-10-10 22:26:52 (11 months ago)	[Sat Oct 11 05:23:34.577180 2025] [security2:error] [pid 1600342:tid 139973587093184] [client 125.16 ... show more [Sat Oct 11 05:23:34.577180 2025] [security2:error] [pid 1600342:tid 139973587093184] [client 125.164.20.181:11187] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "okhttp" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: okhttp found within REQUEST_HEADERS:User-Agent: okhttp/4.12.0 request_line = GET /images/Klimatologi/Infografis/Infografis-Iklim/Klimat_Story/2024/Infografis_Waspada_Cuaca_Ekstrem_di_Masa_Pancaroba.webp HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/images/Klimatologi/Infografis/Infografis-Iklim/Klimat_Story/2024/Infografis_Waspada_Cuaca_Ekstrem_di_Masa_Pancaroba.webp"] [unique_id "aOmHZv6tDm7G9HnA-50OEwADzwI"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[1600345] [A5RLXpXjv1g] [aOmHZv6tDm7G9HnA-50OEwADzwI] keep_alive=[1] [2025-10-11 05:23:34.577185] [ ... show less	Hacking Web App Attack
🇮🇩 [email protected]	2024-08-05 07:53:49 (2 years ago)	Attempts to find pages that do not exist on website.	Web App Attack
🇫🇷 Steph@	2024-07-31 13:59:59 (2 years ago)	Jul 31 15:57:38 srv4 sshd[14536]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 ... show more Jul 31 15:57:38 srv4 sshd[14536]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.164.20.181 user=root Jul 31 15:57:39 srv4 sshd[14536]: Failed password for root from 125.164.20.181 port 10668 ssh2 Jul 31 15:59:57 srv4 sshd[14543]: Invalid user ftpuser from 125.164.20.181 port 28958 Jul 31 15:59:57 srv4 sshd[14543]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.164.20.181 Jul 31 15:59:59 srv4 sshd[14543]: Failed password for invalid user ftpuser from 125.164.20.181 port 28958 ssh2 ... show less	Brute-Force SSH
🇬🇧 CRSSkynet	2024-07-31 13:37:17 (2 years ago)	Jul 31 14:37:14 DVSwitch-GM0WUR sshd[24855]: pam_unix(sshd:auth): authentication failure; logname= u ... show more Jul 31 14:37:14 DVSwitch-GM0WUR sshd[24855]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.164.20.181 Jul 31 14:37:16 DVSwitch-GM0WUR sshd[24855]: Failed password for invalid user user2 from 125.164.20.181 port 28426 ssh2 ... show less	Brute-Force SSH
🇵🇹 facha	2024-07-31 12:18:09 (2 years ago)	SSH BruteForce - Jul 31 12:18:07 dev sshd[2959774]: pam_unix(sshd:auth): authentication failure; log ... show more SSH BruteForce - Jul 31 12:18:07 dev sshd[2959774]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.164.20.181 user=root show less	Brute-Force SSH
🇳🇱 MC	2024-07-31 10:24:13 (2 years ago)	Invalid user testuser from 125.164.20.181 port 10802	Brute-Force SSH
🇳🇱 MC	2024-07-31 10:24:13 (2 years ago)	Invalid user testuser from 125.164.20.181 port 10802	Brute-Force SSH
🇳🇱 MC	2024-07-31 10:24:13 (2 years ago)	Invalid user testuser from 125.164.20.181 port 10802	Brute-Force SSH
🇸🇬 paradoxnetworks	2024-07-31 10:07:03 (2 years ago)	2024-07-31T10:06:59.992010+00:00 edge-sin-con01.int.pdx.net.uk sshd[1516877]: Invalid user jenkins f ... show more 2024-07-31T10:06:59.992010+00:00 edge-sin-con01.int.pdx.net.uk sshd[1516877]: Invalid user jenkins from 125.164.20.181 port 23451 2024-07-31T10:07:00.076133+00:00 edge-sin-con01.int.pdx.net.uk sshd[1516877]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.164.20.181 2024-07-31T10:07:02.245191+00:00 edge-sin-con01.int.pdx.net.uk sshd[1516877]: Failed password for invalid user jenkins from 125.164.20.181 port 23451 ssh2 ... show less	Brute-Force SSH
🇳🇱 FlyerOne	2024-07-31 09:41:51 (2 years ago)	IP blocked	Brute-Force SSH
🇿🇦 paradoxnetworks	2024-07-31 09:29:01 (2 years ago)	2024-07-31T09:18:56.903968+00:00 edge-jnb-con01.int.pdx.net.uk sshd[1314325]: Failed password for ro ... show more 2024-07-31T09:18:56.903968+00:00 edge-jnb-con01.int.pdx.net.uk sshd[1314325]: Failed password for root from 125.164.20.181 port 12115 ssh2 2024-07-31T09:28:57.751223+00:00 edge-jnb-con01.int.pdx.net.uk sshd[1314875]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.164.20.181 user=root 2024-07-31T09:29:00.170997+00:00 edge-jnb-con01.int.pdx.net.uk sshd[1314875]: Failed password for root from 125.164.20.181 port 28571 ssh2 ... show less	Brute-Force SSH
🇬🇧 Zeeaster	2024-07-31 08:01:31 (2 years ago)	abuse-sshd h3	Brute-Force SSH
🇩🇪 debaba	2024-07-31 07:58:08 (2 years ago)	Jul 31 09:58:07 ichbinda sshd[3510803]: Failed password for root from 125.1 ...	Brute-Force SSH
🇩🇪 nicosqc	2024-07-31 05:51:01 (2 years ago)	Invalid user sysadmin from 125.164.20.181 port 5645	Brute-Force SSH
🇩🇪 nicosqc	2024-07-31 05:51:01 (2 years ago)	Invalid user sysadmin from 125.164.20.181 port 5645	Brute-Force SSH

Showing 1 to 15 of 53 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇱🇺 193.239.179.145

🇲🇽 148.224.10.92

🇺🇸 136.144.42.121

🇲🇦 105.190.102.17

🇫🇷 85.217.140.42

🇧🇬 79.124.58.134

🇧🇪 198.235.24.201

🇷🇴 185.19.40.39

🇳🇱 91.92.42.46

🇷🇴 80.94.92.156

🇬🇧 35.203.211.44

🇺🇸 24.27.116.50

🇭🇰 223.197.146.163

🇭🇰 178.83.121.222

🇺🇸 172.180.64.138

🇻🇳 116.110.217.96

🇲🇾 113.211.213.0

🇹🇼 111.70.23.231

🇮🇳 106.51.92.114

🇹🇳 102.110.7.34