JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 125.166.18.91

125.166.18.91 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 86%: ?

86%

ISP	PT TELKOM INDONESIA
Usage Type	Fixed Line ISP
ASN	AS7713
Domain Name	telkom.co.id
Country	🇮🇩 Indonesia
City	Makassar, South Sulawesi

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 125.166.18.91

Whois 125.166.18.91

IP Abuse Reports for 125.166.18.91:

This IP address has been reported a total of 20 times from 15 distinct sources. 125.166.18.91 was first reported on July 21st 2026, and the most recent report was 14 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 LRob	2026-07-25 06:13:23 (14 hours ago)	CrowdSec: crowdsecurity/http-bf-wordpress_bf_xmlrpc \| req: /xmlrpc.php \| UA: Jetpack/12.1; WordPress ... show more CrowdSec: crowdsecurity/http-bf-wordpress_bf_xmlrpc \| req: /xmlrpc.php \| UA: Jetpack/12.1; WordPress/6.3; http://site25269366.com show less	Brute-Force Web App Attack
🇫🇷 dynamix	2026-07-25 02:59:28 (17 hours ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
Anonymous	2026-07-25 01:43:02 (18 hours ago)	Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/1.1	Hacking Web App Attack
🇮🇹 CoreTech srl	2026-07-24 07:08:57 (1 day ago)	cloudlinux2 fail2ban: 2026-07-24 09:04:00,749 fail2ban.filter [1816]: INFO [plesk-wordpre ... show more cloudlinux2 fail2ban: 2026-07-24 09:04:00,749 fail2ban.filter [1816]: INFO [plesk-wordpress] Found 155.2.215.37 - 2026-07-24 09:03:59cloudlinux2 fail2ban: 2026-07-24 09:05:16,072 fail2ban.filter [1816]: INFO [plesk-modsecurity] Found 125.166.18.91 - 2026-07-24 09:05:16cloudlinux2 fail2ban: 2026-07-24 09:06:18,974 fail2ban.filter [1816]: INFO [plesk-modsecurity] Found 125.166.18.91 - 2026-07-24 09:06:18cloudlinux2 fail2ban: 2026-07-24 09:06:57,302 fail2ban.filter [1816]: INFO [plesk-proftpd] Found 27.29.164.167 - 2026-07-24 09:06:57cloudlinux2 fail2ban: 2026-07-24 09:07:22,567 fail2ban.filter [1816]: INFO [plesk-modsecurity] Found 125.166.18.91 - 2026-07-24 09:07:22cloudlinux2 fail2ban: 2026-07-24 09:07:22,900 fail2ban.actions [1816]: NOTICE [plesk-modsecurity] Ban 125.166.18.91cloudlinux2 fail2ban: 2026-07-24 09:07:22,902 fail2ban.filter [1816]: INFO [recidive] Found 125.166.18.91 - 2026-07-24 09:07:22cloudlinux2 fail2ban: 2026-07-24 09 show less	FTP Brute-Force Web App Attack
Anonymous	2026-07-24 06:14:44 (1 day ago)	(wordpress) Failed wordpress login from 125.166.18.91 (ID/Indonesia/-)	Brute-Force
Anonymous	2026-07-24 06:10:18 (1 day ago)	[redacted] 125.166.18.91 - - [24/Jul/2026:08:09:35 +0200] "POST /xmlrpc.php HTTP/1.1" 403 0 "-" "Wor ... show more [redacted] 125.166.18.91 - - [24/Jul/2026:08:09:35 +0200] "POST /xmlrpc.php HTTP/1.1" 403 0 "-" "WordPress.com; https://wordpress.com" [redacted] 125.166.18.91 - - [24/Jul/2026:08:09:45 +0200] "POST /xmlrpc.php HTTP/1.1" 403 0 "-" "Jetpack/13.0; WordPress/6.1; http://site57680820.com" [redacted] 125.166.18.91 - - [24/Jul/2026:08:09:56 +0200] "POST /xmlrpc.php HTTP/1.1" 403 0 "-" "Jetpack by WordPress.com" [redacted] 125.166.18.91 - - [24/Jul/2026:08:10:07 +0200] "POST /xmlrpc.php HTTP/1.1" 403 0 "-" "WordPress.com; https://wordpress.com" [redacted] 125.166.18.91 - - [24/Jul/2026:08:10:16 +0200] "POST /xmlrpc.php HTTP/1.1" 403 0 "-" "WordPress.com; https://wordpress.com" ... show less	Hacking Web App Attack
Anonymous	2026-07-24 04:56:14 (1 day ago)	[redacted] 125.166.18.91 - - [24/Jul/2026:06:55:32 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "J ... show more [redacted] 125.166.18.91 - - [24/Jul/2026:06:55:32 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.4)" [redacted] 125.166.18.91 - - [24/Jul/2026:06:55:42 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" [redacted] 125.166.18.91 - - [24/Jul/2026:06:55:53 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" [redacted] 125.166.18.91 - - [24/Jul/2026:06:56:03 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.0; WordPress/6.1; http://site82355515.com" [redacted] 125.166.18.91 - - [24/Jul/2026:06:56:14 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" ... show less	Hacking Web App Attack
🇩🇪 Trueforce Threat Report	2026-07-24 04:38:59 (1 day ago)	Automated report, trolling for resource vulnerabilities	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-23 08:33:12 (2 days ago)	(mod_security) mod_security (id:240335) triggered by 125.166.18.91 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 125.166.18.91 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 23 04:33:05.728988 2026] [security2:error] [pid 455485:tid 455485] [client 125.166.18.91:12878] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 125.166.18.91 (+1 hits since last alert)\|blacktieokc.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "blacktieokc.com"] [uri "/xmlrpc.php"] [unique_id "amHRwREvWiX5HXk5M0fB0wAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-23 08:29:17 (2 days ago)	[redacted] 125.166.18.91 - - [23/Jul/2026:10:28:35 +0200] "POST /xmlrpc.php HTTP/1.1" 403 239 "-" "J ... show more [redacted] 125.166.18.91 - - [23/Jul/2026:10:28:35 +0200] "POST /xmlrpc.php HTTP/1.1" 403 239 "-" "Jetpack/12.1; WordPress/6.2; http://site78709936.com" [redacted] 125.166.18.91 - - [23/Jul/2026:10:28:45 +0200] "POST /xmlrpc.php HTTP/1.1" 403 239 "-" "Jetpack/12.0; WordPress/6.4; http://site88948443.com" [redacted] 125.166.18.91 - - [23/Jul/2026:10:28:56 +0200] "POST /xmlrpc.php HTTP/1.1" 403 239 "-" "Jetpack/12.1; WordPress/6.3; http://site57118567.com" [redacted] 125.166.18.91 - - [23/Jul/2026:10:29:06 +0200] "POST /xmlrpc.php HTTP/1.1" 403 239 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.1)" [redacted] 125.166.18.91 - - [23/Jul/2026:10:29:17 +0200] "POST /xmlrpc.php HTTP/1.1" 403 239 "-" "Jetpack/12.5; WordPress/6.1; http://site63261717.com" ... show less	Hacking Web App Attack
Anonymous	2026-07-23 06:24:09 (2 days ago)	[redacted] 125.166.18.91 - - [23/Jul/2026:08:23:26 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "J ... show more [redacted] 125.166.18.91 - - [23/Jul/2026:08:23:26 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" [redacted] 125.166.18.91 - - [23/Jul/2026:08:23:36 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" [redacted] 125.166.18.91 - - [23/Jul/2026:08:23:46 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.3)" [redacted] 125.166.18.91 - - [23/Jul/2026:08:23:57 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.1; WordPress/6.3; http://site59866431.com" [redacted] 125.166.18.91 - - [23/Jul/2026:08:24:07 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" ... show less	Hacking Web App Attack
Anonymous	2026-07-23 05:59:14 (2 days ago)	[ns31.kdns.gr] httpd-xmlrpc-post: sites=www.esperohotel.gr; logs=/var/log/httpd/domains/esperohotel. ... show more [ns31.kdns.gr] httpd-xmlrpc-post: sites=www.esperohotel.gr; logs=/var/log/httpd/domains/esperohotel.gr.log; samples=/xmlrpc.php show less	Brute-Force Web App Attack
🇩🇪 LRob	2026-07-23 05:22:47 (2 days ago)	CrowdSec: crowdsecurity/http-bf-wordpress_bf_xmlrpc \| req: /xmlrpc.php \| UA: Jetpack by WordPress.co ... show more CrowdSec: crowdsecurity/http-bf-wordpress_bf_xmlrpc \| req: /xmlrpc.php \| UA: Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.2) show less	Brute-Force Web App Attack
🇪🇸 masterguru	2026-07-22 07:43:40 (3 days ago)	(xmlrpc) Failed xmlrpc access from 125.166.18.91 (ID/Indonesia/-): 5 in the last 3600 secs (0-122)	Hacking
🇫🇷 dynamix	2026-07-22 07:02:18 (3 days ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 172.253.4.28

🇮🇹 172.213.225.181

🇺🇸 85.8.151.146

🇩🇪 213.95.11.49

🇧🇷 177.212.107.67

🇺🇸 170.39.185.6

🇭🇰 118.193.44.22

🇫🇷 104.23.229.20

🇬🇧 87.236.176.70

🇮🇳 20.204.241.68

🇱🇹 5.181.86.188

🇨🇳 1.193.63.237

🇨🇳 180.76.244.13

🇺🇸 172.58.164.125

🇨🇳 116.179.37.223

🇫🇷 104.23.229.21

🇧🇩 103.163.116.222

🇺🇸 43.166.128.86

🇳🇱 20.160.86.7

🇸🇬 4.194.217.15