125.165.35.40

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted.
Abuse Confidence Score
0% Low Risk
27 reports
24 reporters · latest 4 months ago
ISP
PT TELKOM INDONESIA
Usage Type
Fixed Line ISP
ASN
AS7713
Domain Name
telkom.co.id
Country
🇮🇩 Indonesia
City
Tasikmalaya, West Java
Log in to view charts and search reports for this IP. Log In

No reports in the last 60 days

125.165.35.40 has been reported 27 times. The most recent report is from .

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Total reports
27 from 24 distinct reporters
First reported
Most recent report
Reporter IoA Timestamp (UTC) Comment Categories
🇪🇸 Gem
Unauthorized web scan.
Web App Attack
🇳🇱 homeshowdomain.nl
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-17.
Web App Attack SSH Hacking
🇳🇴 jad-abuse
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: env_probe, aws_creds. Observed by 1 sensor(s); 5 hits.
Web App Attack
🇧🇪 madeit
Web App Attack
🇺🇸 Gabriel Camargo
Brute-Force SSH
🇬🇧 consul.to
Web attack/malicious scanning detected
Web App Attack
🇫🇷 airstream
Brute-force / scan on app.air-stream.io
Brute-Force SSH
Anonymous
125.165.35.40 - - [18/Jun/2026:07:21:34 +0000] "GET /.env/.env.bak HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" ...
Bad Web Bot Web App Attack
🇬🇧 Axel
Blocked by ModSecurity. Rule ID: 210492 Message: None Phase: 1 Severity: CRITICAL URI: /.env/.env.bak Server: UK-01
Web App Attack Hacking SQL Injection
🇮🇩 penjaga BRIN
Suspicious malicious activity
Hacking
🇧🇪 voormedia
Accessed trap at '/phpinfo.php'
Web App Attack
🇧🇷 vfAcceloReporter
125.165.35.40 - - [18/Jun/2026:01:00:09 -0300] "GET /.env/.env.bak HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" ...
Brute-Force Web App Attack Exploited Host
🇧🇷 Halux
125.165.35.40 Probing protected path or service
Web App Attack
Anonymous
Web App Attack
Brute-Force Exploited Host Web App Attack
🇺🇸 mnsf
Abuse Detected (4)
Brute-Force Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 185.136.15.17
🇺🇸 173.190.162.31
🇦🇷 152.231.22.63
🇩🇪 109.160.32.39
🇫🇷 85.217.140.30
🇧🇳 61.6.238.79
🇺🇸 45.146.54.178
🇦🇿 37.114.177.18
🇩🇿 154.252.208.43
🇲🇾 120.141.30.108
🇧🇩 103.156.189.86
🇳🇱 77.239.124.31
feedback