JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

125.165.108.197

Neutral Activity

Abuse Confidence Score

0% Low Risk

57 reports

23 reporters · latest 1 year ago

ISP: PT TELKOM INDONESIA
Usage Type: Fixed Line ISP
ASN: AS7713
Domain Name: telkom.co.id
Country: 🇮🇩 Indonesia
City: Pekanbaru, Riau

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

125.165.108.197 has been reported 57 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

57 from 23 distinct reporters

First reported

December 10th 2020

Most recent report

1 year ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 dynamix	2025-08-05 00:11:42 UTC · (1 year ago)	Multiple WAF Violations	Web App Attack
Anonymous	2024-08-27 07:29:46 UTC · (2 years ago)	Ports: 143,993; Direction: 0; Trigger: LF_DISTATTACK	Brute-Force SSH
Anonymous	2024-08-26 01:09:51 UTC · (2 years ago)	Ports: 143,993; Direction: 0; Trigger: LF_DISTATTACK	Brute-Force SSH
🇧🇷 diego	2024-05-10 14:21:22 UTC · (2 years ago)	[rede-164-29] 05/10/2024-11:21:22.273548, 125.165.108.197, Protocol: 6, ET SCAN Suspicious inbound to mySQL port 3306	Hacking
🇧🇷 diego	2024-05-10 10:31:07 UTC · (2 years ago)	[rede-164-29] 05/10/2024-07:31:06.625538, 125.165.108.197, Protocol: 6, ET SCAN Suspicious inbound to mySQL port 3306	Hacking
🇧🇷 diego	2024-05-10 04:05:46 UTC · (2 years ago)	[rede-164-29] 05/10/2024-01:05:46.357613, 125.165.108.197, Protocol: 6, ET SCAN Suspicious inbound to mySQL port 3306	Hacking
🇧🇷 diego	2024-05-09 14:25:26 UTC · (2 years ago)	[kvm3859] 05/09/2024-11:25:26.002593, 125.165.108.197, Protocol: 6, ET SCAN Suspicious inbound to MSSQL port 1433	Hacking
🇧🇷 diego	2024-05-09 14:02:07 UTC · (2 years ago)	[rede-164-29] 05/09/2024-11:02:07.179341, 125.165.108.197, Protocol: 6, ET SCAN Suspicious inbound to mySQL port 3306	Hacking
🇻🇪 VenCERT	2024-05-09 03:06:21 UTC · (2 years ago)	trying to access non-authorized port	Port Scan
🇧🇷 diego	2024-05-07 16:43:09 UTC · (2 years ago)	[rede-164-29] 05/07/2024-13:43:07.153202, 125.165.108.197, Protocol: 6, ET SCAN Suspicious inbound to mySQL port 3306	Hacking
🇩🇪 ps-center	2022-05-01 22:20:20 UTC · (4 years ago)	RDM-W: TCP-Scanner. Port: 23	Port Scan
🇩🇪 KPS	2021-06-30 22:00:00 UTC · (5 years ago)	SSH-Attack	SSH
🇦🇹 ipi.at	2021-06-30 17:05:19 UTC · (5 years ago)	2021-06-30T22:45:53.921723n23.at sshd[1295174]: Failed password for root from 125.165.108.197 port 5492 ssh2 2021-06-30T23:05:16.791791n23.at sshd[1311666]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.1 ... show more 2021-06-30T22:45:53.921723n23.at sshd[1295174]: Failed password for root from 125.165.108.197 port 5492 ssh2 2021-06-30T23:05:16.791791n23.at sshd[1311666]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.165.108.197 user=root 2021-06-30T23:05:18.543016n23.at sshd[1311666]: Failed password for root from 125.165.108.197 port 18935 ssh2 ... show less	Brute-Force SSH
🇿🇦 IrisFlower	2021-06-30 11:16:38 UTC · (5 years ago)	Unauthorized connection attempt detected from IP address 125.165.108.197 to port 2220 [J]	Port Scan Hacking
Anonymous	2021-06-30 07:20:23 UTC · (5 years ago)	125.165.108.197 (ID/Indonesia/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_DISTATTACK; Logs: Jun 30 07:19:33 server2 sshd[17505]: pam_unix(sshd:auth): authentication failure; logname= ... show more 125.165.108.197 (ID/Indonesia/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_DISTATTACK; Logs: Jun 30 07:19:33 server2 sshd[17505]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.250.37.180 user=root Jun 30 07:19:35 server2 sshd[17505]: Failed password for root from 45.250.37.180 port 45622 ssh2 Jun 30 07:20:17 server2 sshd[17997]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.165.108.197 user=root Jun 30 07:08:39 server2 sshd[11946]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.172.29.137 user=root Jun 30 07:15:22 server2 sshd[15521]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.35.155 user=root Jun 30 07:15:24 server2 sshd[15521]: Failed password for root from 139.199.35.155 port 33180 ssh2 IP Addresses Blocked: 45.250.37.180 (CN/China/-) show less	Brute-Force

Showing 1 to 15 of 57 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇹🇷 185.226.93.242

🇺🇦 176.103.11.109

🇩🇪 167.94.146.56

🇨🇳 59.50.187.99

🇧🇷 45.234.198.239

🇧🇷 45.179.221.70

🇧🇪 34.78.49.147

🇺🇸 20.12.186.181

🇧🇷 205.210.31.181

🇺🇸 205.210.31.103

🇮🇳 202.83.19.226

🇳🇱 193.47.62.95

🇨🇱 190.5.35.241

🇺🇸 136.117.18.38

🇧🇩 114.130.173.126

🇺🇸 104.237.132.58

🇺🇿 84.54.70.30

🇺🇸 34.171.84.172

🇨🇳 1.12.55.42

🇳🇱 193.47.62.69