JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 125.165.106.171

125.165.106.171 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 25%: ?

25%

ISP	PT TELKOM INDONESIA
Usage Type	Fixed Line ISP
ASN	AS7713
Domain Name	telkom.co.id
Country	🇮🇩 Indonesia
City	Pekanbaru, Riau

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 125.165.106.171

Whois 125.165.106.171

IP Abuse Reports for 125.165.106.171:

This IP address has been reported a total of 15 times from 11 distinct sources. 125.165.106.171 was first reported on September 1st 2021, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-24 14:06:37 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 125.165.106.171 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 125.165.106.171 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 10:06:31.429254 2026] [security2:error] [pid 1982718:tid 1982718] [client 125.165.106.171:1314] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "powerkiteforum.com"] [uri "/.env"] [unique_id "amNxZySKL0RPhZrTXKajVQAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-19 15:01:38 (6 days ago)	(mod_security) mod_security (id:210492) triggered by 125.165.106.171 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 125.165.106.171 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 11:01:32.777349 2026] [security2:error] [pid 4139:tid 4139] [client 125.165.106.171:18985] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cmgpartners.com"] [uri "/.env"] [unique_id "alzmzLaNk9s41GJJU1DBZAAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-19 14:08:49 (6 days ago)	(mod_security) mod_security (id:210492) triggered by 125.165.106.171 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 125.165.106.171 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 10:08:44.105676 2026] [security2:error] [pid 335506:tid 335559] [client 125.165.106.171:10336] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stonyp.com"] [uri "/.env"] [unique_id "alzabKK1d06Ny-LtjD1t9wAAAEQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇿🇦 conure	2026-07-19 13:43:49 (6 days ago)	csagent: score 18.1: secrets grab x2, 404 noise floor x2; 2 domain(s) in 47s	Web App Attack
🇳🇴 jad-abuse	2026-07-19 13:27:36 (6 days ago)	ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: env_probe ... show more ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: env_probe. Observed by 1 sensor(s); 1 hits. show less	Web App Attack
🇺🇸 kosada.com	2026-07-11 01:06:51 (2 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
Anonymous	2025-11-04 11:29:07 (8 months ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇹🇷 Domainhizmetleri.com	2024-09-05 00:47:16 (1 year ago)	MS-SQL	Port Scan SQL Injection Brute-Force
🇧🇷 diego	2024-05-11 10:14:11 (2 years ago)	[rede-164-29] 05/11/2024-07:14:11.371839, 125.165.106.171, Protocol: 6, ET SCAN Suspicious inbound t ... show more [rede-164-29] 05/11/2024-07:14:11.371839, 125.165.106.171, Protocol: 6, ET SCAN Suspicious inbound to mySQL port 3306 show less	Hacking
🇩🇪 FeG Deutschland	2024-01-27 05:25:39 (2 years ago)	Wordfence - Login with invalid Username	Brute-Force
🇩🇪 ISPLtd	2023-08-21 05:30:21 (2 years ago)	Aug 21 02:30:17 SRC=125.165.106.171 PROTO=TCP SPT=11141 DPT=9981 SYN Aug 21 02:30:18 SRC=125.165.106 ... show more Aug 21 02:30:17 SRC=125.165.106.171 PROTO=TCP SPT=11141 DPT=9981 SYN Aug 21 02:30:18 SRC=125.165.106.171 PROTO=TCP SPT=11141 DPT=9981 SYN Aug 21 02:30:20 SRC=125.165.106.171 PROTO=TCP SPT=11141 DPT=9981 W ... show less	Port Scan
🇩🇪 ISPLtd	2023-08-20 13:01:43 (2 years ago)	Aug 20 10:01:39 SRC=125.165.106.171 PROTO=TCP SPT=24471 DPT=9981 SYN Aug 20 10:01:40 SRC=125.165.106 ... show more Aug 20 10:01:39 SRC=125.165.106.171 PROTO=TCP SPT=24471 DPT=9981 SYN Aug 20 10:01:40 SRC=125.165.106.171 PROTO=TCP SPT=24471 DPT=9981 SYN Aug 20 10:01:42 SRC=125.165.106.171 PROTO=TCP SPT=24471 DPT=9981 W ... show less	Port Scan
🇩🇪 ISPLtd	2023-08-19 03:59:02 (2 years ago)	Aug 19 00:58:59 SRC=125.165.106.171 PROTO=TCP SPT=11491 DPT=9981 SYN Aug 19 00:59:00 SRC=125.165.106 ... show more Aug 19 00:58:59 SRC=125.165.106.171 PROTO=TCP SPT=11491 DPT=9981 SYN Aug 19 00:59:00 SRC=125.165.106.171 PROTO=TCP SPT=11491 DPT=9981 SYN Aug 19 00:59:02 SRC=125.165.106.171 PROTO=TCP SPT=11491 DPT=9981 W ... show less	Port Scan
Anonymous	2022-04-28 17:52:00 (4 years ago)	fail2ban apache-modsecurity [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [uri "/robots.tx ... show more fail2ban apache-modsecurity [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [uri "/robots.txt"] show less	Web App Attack
Anonymous	2021-09-01 00:57:53 (4 years ago)	Sep 1 14:27:42 mail sshd[8980]: Failed none for invalid user admin from 125.165.106.171 port 31223 ... show more Sep 1 14:27:42 mail sshd[8980]: Failed none for invalid user admin from 125.165.106.171 port 31223 ssh2 Sep 1 14:27:50 mail sshd[8999]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.165.106.171 ... show less	Brute-Force SSH

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.178.110.199

🇧🇴 190.181.27.37

🇲🇽 185.48.55.151

🇬🇷 172.68.62.224

🇺🇸 162.216.150.98

🇰🇷 162.158.139.10

🇺🇸 155.94.171.33

🇺🇸 147.185.132.39

🇩🇪 104.23.239.142

🇮🇩 103.186.31.66

🇹🇷 94.154.43.56

🇳🇱 91.92.42.126

🇫🇮 65.108.99.120

🇧🇷 34.95.220.121

🇻🇪 181.191.227.171

🇺🇸 173.77.68.7

🇺🇸 172.70.127.65

🇸🇬 172.69.176.59

🇸🇬 114.119.156.74

🇧🇩 103.234.203.226