JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 125.166.1.251

125.166.1.251 was found in our database!

This IP was reported 8 times. Confidence of Abuse is 4%: ?

ISP	PT TELKOM INDONESIA
Usage Type	Fixed Line ISP
ASN	AS7713
Domain Name	telkom.co.id
Country	🇮🇩 Indonesia
City	Malang, East Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 125.166.1.251

Whois 125.166.1.251

IP Abuse Reports for 125.166.1.251:

This IP address has been reported a total of 8 times from 6 distinct sources. 125.166.1.251 was first reported on August 9th 2022, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 hermawan	2026-06-19 21:07:40 (1 day ago)	[Sat Jun 20 04:07:35.951219 2026] [security2:error] [pid 1487553:tid 140501090977472] [client 125.16 ... show more [Sat Jun 20 04:07:35.951219 2026] [security2:error] [pid 1487553:tid 140501090977472] [client 125.166.1.251:23734] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.yandex.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.yandex.go.id found within REQUEST_HEADERS:Referer: https://www.yandex.go.id/ request_line = GET /index.php/analisis-iklim/analisis-musim/perbandingan-musim-kemarau/perbandingan-awal-musim-kemarau-dengan-normalnya HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/analisis-iklim/analisis-musim/perbandingan-musim-kemarau/perbandingan-awal-musim-kemarau-dengan-normalnya"] [unique_id "ajWvl6b80iEUtrTv433VtwABARg"], referer https://www.yandex.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[1487578] [ZqGQrmH0N1E] [ajWvl6b80iEUtrTv433VtwABARg] keep_alive=[1] ... show less	Email Spam Hacking
Anonymous	2025-11-17 06:08:44 (7 months ago)	scanning http requests from known botnet	Web App Attack
🇮🇩 hermawan	2025-10-22 06:30:53 (7 months ago)	[Wed Oct 22 13:30:21.683425 2025] [security2:error] [pid 1362191:tid 140576949937856] [client 125.16 ... show more [Wed Oct 22 13:30:21.683425 2025] [security2:error] [pid 1362191:tid 140576949937856] [client 125.166.1.251:21721] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "164"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: %3a found within SERVER_NAME: staklim-malang.info request_line = GET /index.php/profil/arsip-artikel?catid=473&id=819%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-1-7-desember-2015&start=190 HTTP/2.0 Request URI RAW = /index.php/profil/arsip-artikel?catid=473&id=819%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-1-7-desember-2015&start=190 Req..."] [hostname "staklim-malang.info"] [uri "/index.php/profil/arsip-artikel"] [unique_id "aPh5_bdZuu2x ... show less	Hacking Web App Attack
🇷🇸 Smel	2023-07-05 19:15:02 (2 years ago)	MH/MP Probe, Scan, Hack -	Port Scan Hacking
🇫🇷 oonux.net	2023-07-04 22:55:36 (2 years ago)	RouterOS: Scanning detected TCP 125.166.1.251:2233 > x.x.x.x:8080	Port Scan
🇺🇸 RAP	2023-07-04 14:26:02 (2 years ago)	2023-07-04 14:26:02 UTC Unauthorized activity to TCP port 8080. Web App	Port Scan Web App Attack
🇷🇸 Smel	2023-06-30 23:45:02 (2 years ago)	MH/MP Probe, Scan, Hack -	Port Scan Hacking
Anonymous	2022-08-09 23:46:21 (3 years ago)	Malicious Activity Detected	Hacking Brute-Force

Showing 1 to 8 of 8 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2a01:f2c2:6803:39d5:19e5:830b:6c75:6b2e

🇨🇭 179.43.139.58

🇺🇸 165.154.163.115

🇸🇬 43.133.61.150

🇺🇸 2a01:f2c0:7e08:16aa:d937:5e2b:5a69:7826

🇩🇪 213.209.159.56

🇬🇧 185.99.29.182

🇳🇱 164.92.217.231

🇺🇸 138.199.42.144

🇷🇺 95.215.0.144

🇩🇪 69.5.169.180

🇰🇷 58.141.91.2

🇬🇧 13.41.15.21

🇳🇱 5.61.209.92

🇷🇴 2.57.122.238

🇫🇷 185.182.8.41

🇳🇱 176.65.139.102

🇺🇸 172.58.253.150

🇩🇪 167.94.146.34

🇺🇸 159.203.143.169