JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 125.165.57.122

125.165.57.122 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 85%: ?

85%

ISP	PT TELKOM INDONESIA
Usage Type	Fixed Line ISP
ASN	AS7713
Domain Name	telkom.co.id
Country	🇮🇩 Indonesia
City	Jakarta, Jakarta

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 125.165.57.122

Whois 125.165.57.122

IP Abuse Reports for 125.165.57.122:

This IP address has been reported a total of 17 times from 16 distinct sources. 125.165.57.122 was first reported on June 30th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-01 05:43:18 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 125.165.57.122 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 125.165.57.122 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 01:43:12.011645 2026] [security2:error] [pid 5463:tid 5479] [client 125.165.57.122:53479] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "howilearnedtodanceintherain.com"] [uri "/.env/.env.bak"] [unique_id "akSo8CohQwQCyie-gRaZ8QAAAMw"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-01 05:34:56 (1 day ago)	Blocked by ModSec and CSF	Port Scan
🇬🇧 Axel	2026-07-01 03:46:26 (1 day ago)	Blocked by ModSecurity. Rule ID: 210492 Message: None Phase: 1 Severity: CRITICAL URI: /.env/.env.ba ... show more Blocked by ModSecurity. Rule ID: 210492 Message: None Phase: 1 Severity: CRITICAL URI: /.env/.env.bak Server: UK-01 show less	Web App Attack Hacking SQL Injection
🇩🇪 4server	2026-07-01 02:49:49 (1 day ago)	[WedJul0104:49:44.4342742026][security2:error][pid969160:tid969251][client125.165.57.122:0]ModSecuri ... show more [WedJul0104:49:44.4342742026][security2:error][pid969160:tid969251][client125.165.57.122:0]ModSecurity:Accessdeniedwithcode403$phase1$.Patternmatch\"$\?i$$\?:/\(\?:\^\\|/$\\\\\\\\.$env\\|git\\|svn\\|hg\\|DS_Store$\\|/$\?:wp-config\\|\\\\\\\\.htaccess\\|\\\\\\\\.htpasswd$\\|\\\\\\\\.$\?:sql\\|bak\\|old\\|log$\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"hosting-royal.ch.136-243-54-122.cpanel.site\"][uri\"/.env/.env.bak\"][unique_id\"akSASArfv1qCzbzID_5qXQAAAJM\"] show less	Port Scan Brute-Force Web App Attack
🇫🇷 COMAITE	2026-07-01 02:03:02 (1 day ago)	Suspicious URL access.	Web App Attack
🇩🇪 big-cloud.nl	2026-06-30 23:58:46 (1 day ago)	Try to access /.aws/credentials	Web App Attack
🇮🇹 adm2palazzon	2026-06-30 23:12:58 (1 day ago)	[Wed Jul 01 01:12:48.638463 2026] [php:error] [pid 13498:tid 13498] [client 125.165.57.122:53447] sc ... show more [Wed Jul 01 01:12:48.638463 2026] [php:error] [pid 13498:tid 13498] [client 125.165.57.122:53447] script '/srv/www/htdocs/phpinfo.php' not found or unable to stat [Wed Jul 01 01:12:50.256875 2026] [php:error] [pid 13250:tid 13250] [client 125.165.57.122:56404] script '/srv/www/htdocs/test.php' not found or unable to stat [Wed Jul 01 01:12:57.268470 2026] [php:error] [pid 13498:tid 13498] [client 125.165.57.122:53492] script '/srv/www/htdocs/index.php' not found or unable to stat ... show less	Brute-Force SSH
🇩🇪 mravb	2026-06-30 23:10:11 (1 day ago)	125.165.57.122 - - [01/Jul/2026:02:10:11 +0300] "GET /.env/.env.bak HTTP/1.1" 404 148 "-" "Mozilla/5 ... show more 125.165.57.122 - - [01/Jul/2026:02:10:11 +0300] "GET /.env/.env.bak HTTP/1.1" 404 148 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" ... show less	Web App Attack Hacking
🇺🇦 Olexiy Backend	2026-06-30 23:01:08 (1 day ago)	125.165.57.122 ...	Bad Web Bot Web App Attack
Anonymous	2026-06-30 21:41:02 (1 day ago)	Web App Attack, Hacking	Hacking Web App Attack
🇧🇪 voormedia	2026-06-30 21:39:09 (1 day ago)	Accessed trap at '/phpinfo.php'	Web App Attack
🇮🇩 Burayot	2026-06-30 19:19:53 (1 day ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 125.165.57.122 (ID/Indonesia/-): 1 ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 125.165.57.122 (ID/Indonesia/-): 1 in the last 3600 secs show less	Web App Attack
🇺🇸 TPI-Abuse	2026-06-30 19:06:11 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 125.165.57.122 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 125.165.57.122 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 30 15:06:04.924418 2026] [security2:error] [pid 17853:tid 17853] [client 125.165.57.122:58802] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "impressionsinthread.com"] [uri "/.env/.env.bak"] [unique_id "akQTnI5HSBEHfzTEW22G9wAAACQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mnsf	2026-06-30 17:05:23 (1 day ago)	Abuse Detected (4)	Brute-Force Web App Attack
🇨🇭 Mario Bretscher	2026-06-30 16:31:33 (1 day ago)	[Tue Jun 30 18:31:29.825572 2026] [php:error] [pid 702640] [client 125.165.57.122:57061] script '/va ... show more [Tue Jun 30 18:31:29.825572 2026] [php:error] [pid 702640] [client 125.165.57.122:57061] script '/var/www/html/phpinfo.php' not found or unable to stat [Tue Jun 30 18:31:30.242532 2026] [php:error] [pid 700164] [client 125.165.57.122:57116] script '/var/www/html/test.php' not found or unable to stat [Tue Jun 30 18:31:31.903330 2026] [php:error] [pid 691004] [client 125.165.57.122:57398] script '/var/www/html/index.php' not found or unable to stat ... show less	Web App Attack

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 191.237.249.222

🇨🇳 123.145.8.199

🇨🇳 36.140.29.110

🇺🇸 2600:1408:3c00:8::17c3:4b6f

🇹🇼 212.115.54.84

🇷🇸 188.120.100.0

🇺🇸 128.14.209.166

🇰🇷 125.191.135.160

🇵🇭 124.6.178.98

🇨🇳 121.29.85.226

🇨🇳 120.229.152.94

🇨🇳 120.82.82.242

🇭🇰 103.100.208.168

🇧🇷 20.226.36.195

🇨🇳 14.103.111.167

🇮🇳 4.224.40.94

🇷🇴 2.57.122.209

🇫🇷 151.80.133.111

🇫🇮 147.185.133.210

🇮🇳 122.181.103.37