JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 125.166.118.138

125.166.118.138 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 50%: ?

50%

ISP	PT TELKOM INDONESIA
Usage Type	Fixed Line ISP
ASN	AS7713
Domain Name	telkom.co.id
Country	🇮🇩 Indonesia
City	Jember, East Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 125.166.118.138

Whois 125.166.118.138

IP Abuse Reports for 125.166.118.138:

This IP address has been reported a total of 11 times from 11 distinct sources. 125.166.118.138 was first reported on June 10th 2021, and the most recent report was 21 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 GabrielJST	2026-06-27 22:57:17 (21 hours ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 125.166.118.138 (ID/ ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 125.166.118.138 (ID/Indonesia/-) show less	Bad Web Bot
🇺🇸 Rip	2026-06-27 18:24:25 (1 day ago)	403 Errors: Access Forbidden	Brute-Force
🇦🇺 screwlooseit.com.au	2026-06-27 17:16:48 (1 day ago)	Blocked by CSF 13 firewall - Rule: XMLRPC ID/Indonesia/-	Web App Attack
🇩🇪 Bedios GmbH	2026-06-27 07:11:51 (1 day ago)	Wordpress hacking attempt	Web App Attack
🇳🇱 wlt-blocker	2026-06-26 12:41:59 (2 days ago)	Unauthorized access to webpage admin	Web App Attack
🇬🇷 setupgr	2026-06-24 08:04:47 (4 days ago)	(XMLRPC) WP XMLPRC Attack 125.166.118.138 (ID/Indonesia/East Java/Krajan/-/-): 1 in the last 86400 s ... show more (XMLRPC) WP XMLPRC Attack 125.166.118.138 (ID/Indonesia/East Java/Krajan/-/-): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 125.166.118.138 - - [24/Jun/2026:10:50:09 +0300] "POST /xmlrpc.php HTTP/1.1" 301 284 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" show less	Port Scan
🇺🇸 thororen	2026-06-17 04:15:28 (1 week ago)	Blocked by UFW [1433/tcp] Source port: 24944 TTL: 115 Packet length: 52 TOS: 0x00 This report was g ... show more Blocked by UFW [1433/tcp] Source port: 24944 TTL: 115 Packet length: 52 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇮🇩 hermawan	2026-06-04 21:22:04 (3 weeks ago)	[Fri Jun 05 04:22:01.561913 2026] [security2:error] [pid 491431:tid 139764519904960] [client 125.166 ... show more [Fri Jun 05 04:22:01.561913 2026] [security2:error] [pid 491431:tid 139764519904960] [client 125.166.118.138:25405] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:Referer: https://www.bmkg.go.id/ request_line = GET /index.php/prediksi-iklim/prediksi-dasarian/monitoring-dan-prediksi-curah-hujan HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prediksi-iklim/prediksi-dasarian/monitoring-dan-prediksi-curah-hujan"] [unique_id "aiHseYV5wFHcRvXubxpGRQAADQU"], referer https://www.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[491442] [LJeGIrQxnJc] [aiHseYV5wFHcRvXubxpGRQAADQU] keep_alive=[1] [2026-06-05 04:22:01.561925] [R:aiHseYV5wFHcRvXubxpGRQAADQU] UA:'Mozilla/5.0 (Lin ... show less	Email Spam Hacking
🇩🇪 Vegascosmetics	2026-05-31 23:51:43 (3 weeks ago)	Kingcopy(AI-IDS) Report: IP 125.166.118.138 wurde nach 3 Angriffsversuchen automatisch geblockt. Pat ... show more Kingcopy(AI-IDS) Report: IP 125.166.118.138 wurde nach 3 Angriffsversuchen automatisch geblockt. Pattern: High Priority: ChangeCountry - Vegas Cosmetics Security System show less	DDoS Attack Hacking Exploited Host
🇺🇸 MSchienle	2021-08-09 07:51:04 (4 years ago)	2021-08-09 06:50:55.880199-0500 localhost sshd[62003]: Failed password for invalid user admin from ... show more 2021-08-09 06:50:55.880199-0500 localhost sshd[62003]: Failed password for invalid user admin from 125.166.118.138 port 26639 ssh2 show less	Brute-Force
🇿🇦 IrisFlower	2021-06-10 00:16:54 (5 years ago)	Unauthorized connection attempt detected from IP address 125.166.118.138 to port 23 [J]	Port Scan Hacking

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 198.235.24.108

🇹🇼 198.235.24.72

🇺🇸 20.168.122.18

🇨🇳 223.96.229.81

🇺🇸 209.145.54.172

🇻🇳 203.205.37.233

🇧🇪 198.235.24.169

🇹🇼 198.235.24.48

🇧🇷 191.210.73.33

🇺🇸 147.185.132.192

🇭🇰 144.48.243.18

🇩🇪 130.12.180.77

🇫🇷 104.28.160.97

🇧🇩 103.86.198.162

🇫🇷 91.196.152.70

🇭🇺 84.236.9.252

🇺🇦 81.162.97.5

🇷🇴 80.94.95.58

🇺🇸 66.132.224.81

🇧🇩 58.147.171.11