Log in to view charts and search reports for this IP.
Log In
Reports Activity
Example preview
Report Categories (Last 60 Days)
Example preview
Top Reporter Countries (Last 60 Days)
Example preview
Account required for the enhanced features
Log inSign up
IP Abuse Reports for 125.166.12.161
This IP address has been reported a total of
10
times from
7 distinct
sources.
125.166.12.161 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
France
with 1
report;
United States of America
with 1
report.
The most common categories in these recent reports were:
Web App Attack
1
time;
DDoS Attack
1
time;
Bad Web Bot
1
time.
Old Reports
The most recent abuse report for this IP address is from
. It is possible that this IP is no
longer involved in abusive activities.
Suspicious user agent detected python-requests/2.32.5. Threat Score: 0/10 (INFORMATIONAL). Reported ...
show moreSuspicious user agent detected python-requests/2.32.5. Threat Score: 0/10 (INFORMATIONAL). Reported by TangerangKota-CSIRT
show less
[Mon Dec 09 12:59:21.126840 2024] [security2:error] [pid 210720:tid 134179341727424] [client 125.166 ...
show more[Mon Dec 09 12:59:21.126840 2024] [security2:error] [pid 210720:tid 134179341727424] [client 125.166.12.161:30168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "zh-CN" at REQUEST_HEADERS:Accept-Language. [file "/etc/modsecurity/coreruleset-4.8.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "64"] [id "440001"] [msg "Seperti Ddos bahasa Rusia ada di ip vietnam 2.59.0.188 "] [data "Matched Data: zh-CN found within REQUEST_HEADERS:Accept-Language: en-US,en;q=0.9,zh-CN;q=0.8,zh;q=0.7 request_line = GET /index.php/profil/meteorologi/list-all-categories/4090-klimatologi/analisis-klimatologi/monitoring-kekeringan-dengan-metode-indeks-presipitasi-terstandarisasi-spi/monitoring-kekeringan-dengan-metode-indeks-presipitasi-terstandarisasi-spi-di-jawa-timur/monitoring-kekeringan-dengan-metode-indeks-presipitasi-terstandarisasi-spi-di-jawa-timur-tiap-3-bulanan/analisis-bulanan-indeks-kekering..."] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php
...
show less
Dec 4 11:41:54 staklim-malang sshd[265991]: error: PAM: Authentication failure for root from 125.16 ...
show moreDec 4 11:41:54 staklim-malang sshd[265991]: error: PAM: Authentication failure for root from 125.166.12.161
Dec 4 11:41:54 staklim-malang sshd[265991]: Failed keyboard-interactive/pam for root from 125.166.12.161 port 22381 ssh2
Dec 4 11:41:54 staklim-malang sshd[265991]: error: maximum authentication attempts exceeded for root from 125.166.12.161 port 22381 ssh2 [preauth]
...
show less
Hacking
Brute-Force
Showing 1 to
10
of 10 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
