JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 125.165.109.11

125.165.109.11 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 42%: ?

42%

ISP	PT TELKOM INDONESIA
Usage Type	Fixed Line ISP
ASN	AS7713
Domain Name	telkom.co.id
Country	🇮🇩 Indonesia
City	Pekanbaru, Riau

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 125.165.109.11

Whois 125.165.109.11

IP Abuse Reports for 125.165.109.11:

This IP address has been reported a total of 17 times from 13 distinct sources. 125.165.109.11 was first reported on March 17th 2021, and the most recent report was 13 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 dynamix	2026-07-23 01:26:33 (13 hours ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇨🇭 4server	2026-07-22 09:39:44 (1 day ago)	[WedJul2211:39:38.7579792026][security2:error][pid1917252:tid1917459][client125.165.109.11:0]ModSecu ... show more [WedJul2211:39:38.7579792026][security2:error][pid1917252:tid1917459][client125.165.109.11:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"368\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"npdesign360.ch\"][uri\"/xmlrpc.php\"][unique_id\"amCP2mv-IdiN4pu_nt4tMAAAAII\"] show less	Hacking Web App Attack
🇩🇪 rh24	2026-07-21 09:39:53 (2 days ago)	(xmlrpc_405) XMLRPC-Bot 405 125.165.109.11 (ID/Indonesia/-)	Hacking
Anonymous	2026-07-19 16:23:05 (3 days ago)	Backdrop CMS module - malicious activity detected	Bad Web Bot Web App Attack
Anonymous	2026-07-19 09:57:40 (4 days ago)	125.165.109.11 - - [19/Jul/2026:11:57:39 +0200] "POST / HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows ... show more 125.165.109.11 - - [19/Jul/2026:11:57:39 +0200] "POST / HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.3; x86) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/100.0.0.0 Safari/537.36" show less	Web App Attack
🇺🇸 TPI-Abuse	2026-07-19 06:08:36 (4 days ago)	(mod_security) mod_security (id:225170) triggered by 125.165.109.11 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 125.165.109.11 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 02:08:29.900403 2026] [security2:error] [pid 1255960:tid 1255960] [client 125.165.109.11:23031] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|whiterapperz.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "whiterapperz.com"] [uri "/wp-json/wp/v2/users"] [unique_id "alxp3dYr8UBwV2fh6pf6kgAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-01-20 12:38:00 (6 months ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
Anonymous	2024-04-28 01:30:19 (2 years ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇻🇪 VenCERT	2024-04-22 01:15:45 (2 years ago)	trying to access non-authorized port	Port Scan
🇧🇷 diego	2024-04-18 06:28:54 (2 years ago)	[rede-164-29] 04/18/2024-03:28:54.335732, 125.165.109.11, Protocol: 6, ET SCAN Suspicious inbound to ... show more [rede-164-29] 04/18/2024-03:28:54.335732, 125.165.109.11, Protocol: 6, ET SCAN Suspicious inbound to MSSQL port 1433 show less	Hacking
🇨🇼 ATV	2023-04-01 10:41:25 (3 years ago)	Unsolicited connection attempts to port 1433	Hacking
🇨🇼 ATV	2023-04-01 09:40:56 (3 years ago)	Unsolicited connection attempts to port 3306	Port Scan
🇨🇼 ATV	2023-01-07 15:41:21 (3 years ago)	Unsolicited connection attempts to ports 1433, 3306	Hacking
🇺🇸 lukgth	2021-09-07 06:06:49 (4 years ago)	Sep 7 12:06:35 coomer-vps sshd[50395]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ... show more Sep 7 12:06:35 coomer-vps sshd[50395]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.165.109.11 Sep 7 12:06:37 coomer-vps sshd[50395]: Failed password for invalid user demo from 125.165.109.11 port 23525 ssh2 Sep 7 12:06:46 coomer-vps sshd[50397]: Invalid user demo from 125.165.109.11 port 21518 Sep 7 12:06:46 coomer-vps sshd[50397]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.165.109.11 Sep 7 12:06:48 coomer-vps sshd[50397]: Failed password for invalid user demo from 125.165.109.11 port 21518 ssh2 ... show less	Brute-Force SSH
🇺🇸 lukgth	2021-09-07 05:46:05 (4 years ago)	Sep 7 11:45:46 coomer-vps sshd[50341]: Failed password for root from 125.165.109.11 port 26483 ssh2 ... show more Sep 7 11:45:46 coomer-vps sshd[50341]: Failed password for root from 125.165.109.11 port 26483 ssh2 Sep 7 11:45:54 coomer-vps sshd[50343]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.165.109.11 user=root Sep 7 11:45:56 coomer-vps sshd[50343]: Failed password for root from 125.165.109.11 port 2098 ssh2 Sep 7 11:46:04 coomer-vps sshd[50345]: Invalid user ubnt from 125.165.109.11 port 21738 Sep 7 11:46:04 coomer-vps sshd[50345]: Failed none for invalid user ubnt from 125.165.109.11 port 21738 ssh2 ... show less	Brute-Force SSH

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 2001:41d0:a:f3c3::1

🇺🇸 195.184.76.138

🇺🇸 192.178.119.222

🇳🇿 172.196.45.228

🇫🇮 147.185.133.12

🇨🇦 216.26.251.169

🇺🇸 216.26.228.101

🇩🇪 209.50.189.163

🇩🇪 209.50.180.242

🇺🇸 209.50.169.79

🇺🇸 195.184.76.210

🇩🇪 194.187.176.6

🇵🇾 186.158.200.243

🇺🇸 162.216.149.96

🇫🇮 147.185.133.249

🇺🇸 107.173.36.37

🇺🇸 104.207.32.218

🇫🇷 85.217.140.29

🇳🇱 77.239.124.239

🇳🇱 77.83.39.17