JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 125.166.118.171

125.166.118.171 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 0%: ?

ISP	PT TELKOM INDONESIA
Usage Type	Fixed Line ISP
ASN	AS7713
Domain Name	telkom.co.id
Country	🇮🇩 Indonesia
City	Jember, East Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 125.166.118.171

Whois 125.166.118.171

IP Abuse Reports for 125.166.118.171:

This IP address has been reported a total of 16 times from 12 distinct sources. 125.166.118.171 was first reported on July 11th 2021, and the most recent report was 7 months ago.

Old Reports: The most recent abuse report for this IP address is from 7 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 london2038.com	2025-12-15 07:12:47 (7 months ago)	Connection atttempts against closed TCP ports Dec 15 07:18:12 BLOCK SRC=125.166.118.171 LEN=48 TOS=0 ... show more Connection atttempts against closed TCP ports Dec 15 07:18:12 BLOCK SRC=125.166.118.171 LEN=48 TOS=0x08 PREC=0x20 TTL=118 ID=26448 DF PROTO=TCP SPT=7829 DPT=3306 WINDOW=8192 RES=0x00 SYN Dec 15 07:18:15 BLOCK SRC=125.166.118.171 LEN=48 TOS=0x08 PREC=0x20 TTL=118 ID=28028 DF PROTO=TCP SPT=7829 DPT=3306 WINDOW=8192 RES=0x00 SYN Dec 15 08:11:45 BLOCK SRC=125.166.118.171 LEN=48 TOS=0x08 PREC=0x20 TTL=118 ID=26715 DF PROTO=TCP SPT=12708 DPT=1433 WINDOW=8192 RES=0x00 SYN show less	Port Scan
Anonymous	2025-09-03 15:59:02 (10 months ago)	Ports: 20,21,22,25,2525,53,80,110,143,443,465,587,993,995,2083,2087,2095,2096; Direction: 0; Trigger ... show more Ports: 20,21,22,25,2525,53,80,110,143,443,465,587,993,995,2083,2087,2095,2096; Direction: 0; Trigger: LF_CUSTOMTRIGGER show less	Brute-Force SSH
🇮🇩 Burayot	2025-09-03 12:13:20 (10 months ago)	LF_CPANEL: (cpanel) Failed cPanel login from 125.166.118.171 (ID/Indonesia/-): 1 in the last 3600 se ... show more LF_CPANEL: (cpanel) Failed cPanel login from 125.166.118.171 (ID/Indonesia/-): 1 in the last 3600 secs show less	Brute-Force
Anonymous	2025-01-30 15:08:46 (1 year ago)	Unauthorized connection attempt on Port 23	Port Scan Hacking Exploited Host
🇨🇳 ThreatBook.io	2025-01-28 23:57:16 (1 year ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/125.166.118.171 2025-0 ... show more ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/125.166.118.171 2025-01-28 23:33:24 ["enable","system","shell","sh","cat /proc/mounts; /bin/busybox UPGXY"] show less	SSH
Anonymous	2025-01-28 10:49:56 (1 year ago)	Unauthorized connection attempt on Port 23	Port Scan Hacking Exploited Host
Anonymous	2024-06-26 02:44:56 (2 years ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇷🇸 Smel	2024-03-03 22:00:04 (2 years ago)	MH/MP Probe, Scan, Hack -	Port Scan Hacking
🇺🇸 MPL	2024-03-02 04:29:48 (2 years ago)	tcp/23 (3 or more attempts)	Port Scan
🇮🇩 hermawan	2024-02-06 06:12:33 (2 years ago)	[Tue Feb 06 13:12:29.700512 2024] [security2:error] [pid 767217:tid 131495517750848] [client 125.166 ... show more [Tue Feb 06 13:12:29.700512 2024] [security2:error] [pid 767217:tid 131495517750848] [client 125.166.118.171:4349] [client 125.166.118.171] ModSecurity: Access denied with code 403 (phase 1). Match of "pm https://web.telegram.org/ www.google.com https://www.google.fi/ android-app://com.google.android.gm https://homepage.miui.com/ myactivity.google.com applebot iPhone bingbot https://yandex.com/ https://www.google.com.tw sih3.dpuair.jatimprov.go.id duck ..." against "REQUEST_HEADERS:Referer" required. [file "/etc/modsecurity/coreruleset-3.3.5/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "153"] [id "440067"] [msg "BAD Referer"] [data "Matched Data: staklim-jatim.bmkg.go.id found within REQUEST_HEADERS:Referer: https://newstempo.github.io/ request_line = GET /images/Klimatologi/Analisis/03-Analisis_Bulanan/Analisis_Distibusi_Sifat_Hujan_Bulanan/Analisis_Distibusi_Sifat_Hujan_Bulanan_Provinsi_Jawa_Timur/2019/01_Analisis_Distribusi_Sifat_Hujan_Bulan_Januari_Tahun_2019_di_Provinsi_Ja ... show less	Hacking Web App Attack
🇨🇳 ThreatBook.io	2023-07-31 23:42:21 (2 years ago)	ThreatBook Intelligence: Zombie more details on http://threatbook.io/ip/125.166.118.171 2023-07-31 0 ... show more ThreatBook Intelligence: Zombie more details on http://threatbook.io/ip/125.166.118.171 2023-07-31 00:28:38 / show less	Web App Attack
Anonymous	2023-07-31 14:40:18 (2 years ago)	Malicious activity detected	Hacking Web App Attack
🇨🇳 ThreatBook.io	2023-07-23 23:58:48 (2 years ago)	ThreatBook Intelligence: Zombie more details on http://threatbook.io/ip/125.166.118.171 2023-07-23 0 ... show more ThreatBook Intelligence: Zombie more details on http://threatbook.io/ip/125.166.118.171 2023-07-23 07:10:09 / show less	Web App Attack
🇺🇸 TTWebhosting	2023-07-07 23:28:23 (3 years ago)	(imapd) Failed IMAP login from 125.166.118.171 (ID/Indonesia/East Java/Jember/-): 1 in the last 3600 ... show more (imapd) Failed IMAP login from 125.166.118.171 (ID/Indonesia/East Java/Jember/-): 1 in the last 3600 secs show less	Port Scan Hacking Brute-Force
🇳🇿 Tripwire	2022-02-13 03:55:47 (4 years ago)	Wordpress login scanning	Brute-Force Web App Attack

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 170.106.35.187

🇨🇳 116.181.19.157

🇩🇪 213.209.159.238

🇲🇾 202.165.15.132

🇳🇱 45.148.10.151

🇮🇶 37.239.235.9

🇮🇩 36.67.197.203

🇧🇪 198.235.24.202

🇮🇳 185.100.212.141

🇵🇱 176.53.159.198

🇺🇸 162.241.50.50

🇨🇳 123.145.14.37

🇹🇷 94.154.43.77

🇫🇷 85.217.140.2

🇳🇱 45.153.34.71

🇨🇳 14.103.117.105

🇬🇧 2a06:4880:8000::9c

🇺🇸 147.185.132.180

🇧🇷 131.221.117.252

🇺🇸 172.202.30.177