JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 202.125.100.34

202.125.100.34 was found in our database!

This IP was reported 18 times. Confidence of Abuse is 3%: ?

ISP	PT. NAP Info Lintas Nusa
Usage Type	Fixed Line ISP
ASN	AS45700
Hostname(s)	customer.jtnaidn2.pop.starlinkisp.net
Domain Name	napinfo.co.id
Country	🇮🇩 Indonesia
City	Jakarta, Jakarta

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 202.125.100.34

Whois 202.125.100.34

IP Abuse Reports for 202.125.100.34:

This IP address has been reported a total of 18 times from 12 distinct sources. 202.125.100.34 was first reported on December 20th 2024, and the most recent report was 8 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 sockominfo	2026-08-28 12:00:53 (8 minutes ago)	User access to sensitive menu from bad reputation IP 202.125.100.34.. Threat Score: 8.8/10 (CRITICAL ... show more User access to sensitive menu from bad reputation IP 202.125.100.34.. Threat Score: 8.8/10 (CRITICAL). Confidence: 70%. CVSS v3.1: 10/10 (Critical). CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H. Bayesian Probability: 87%. MITRE ATT&CK: T1566 (Phishing). Tactic: TA0001. Freshness: Fresh. Source Reputation: KNOWN_MALICIOUS. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-08-28 11:00:09 (1 hour ago)	User access to sensitive menu from bad reputation IP 202.125.100.34.. Threat Score: 7.6/10 (HIGH). R ... show more User access to sensitive menu from bad reputation IP 202.125.100.34.. Threat Score: 7.6/10 (HIGH). Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-08-28 08:00:09 (4 hours ago)	User access to sensitive menu from bad reputation IP 202.125.100.34.. Threat Score: 9/10 (HIGH). Rep ... show more User access to sensitive menu from bad reputation IP 202.125.100.34.. Threat Score: 9/10 (HIGH). Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-08-28 06:00:28 (6 hours ago)	Reported by TangerangKota-CSIRT. Status: MALICIOUS	Hacking Web App Attack
🇮🇩 sockominfo	2026-08-28 04:00:12 (8 hours ago)	User access to sensitive menu from bad reputation IP 202.125.100.34.. Threat Score: 9.3/10 (CRITICAL ... show more User access to sensitive menu from bad reputation IP 202.125.100.34.. Threat Score: 9.3/10 (CRITICAL). Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇲🇳 Public CSIRT/CC of Mongolia	2026-06-27 04:02:08 (2 months ago)	Honeypot hit: MSSQL traffic (on 1433) with credentials sa:better4009	Brute-Force
🇺🇸 TPI-Abuse	2026-06-22 18:07:42 (2 months ago)	(mod_security) mod_security (id:225170) triggered by 202.125.100.34 (customer.jtnaidn2.pop.starlinki ... show more (mod_security) mod_security (id:225170) triggered by 202.125.100.34 (customer.jtnaidn2.pop.starlinkisp.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 22 14:07:35.294221 2026] [security2:error] [pid 5651:tid 5670] [client 202.125.100.34:25753] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|cynosureinternetservices.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cynosureinternetservices.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajl5530XZXpmqQHd-nZwoQAAAM4"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 4server	2026-06-22 12:45:13 (2 months ago)	[MonJun2214:45:11.2099842026][security2:error][pid1827426:tid1827497][client202.125.100.34:0]ModSecu ... show more [MonJun2214:45:11.2099842026][security2:error][pid1827426:tid1827497][client202.125.100.34:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"spicydesign.ch\"][uri\"/xmlrpc.php\"][unique_id\"ajkuV2dDeVdyUCX2xQoBqwAAAMo\"] show less	Port Scan Brute-Force Web App Attack
🇩🇪 EGP Abuse Dept	2026-04-27 08:45:38 (4 months ago)	Scanning for port/service exploits on tpc-012.mach3builders.nl	Port Scan Hacking
🇮🇩 sockominfo	2025-12-21 19:16:32 (8 months ago)	[WAZUH] SUPPRESSED: IP 202.125.100.34 blocked - 8 times fired in 6 hour	Hacking Web App Attack
🇩🇪 LRob	2025-10-19 07:38:20 (10 months ago)	Bad web bot activity detected by Fail2Ban in plesk-apache-badbot jail	Bad Web Bot
🇺🇸 SiliSoftware	2025-10-18 12:36:56 (10 months ago)	/phpBB3/templates/subSilver/images/spacer.gif	Web App Attack
🇳🇱 exxos	2025-10-15 23:03:01 (10 months ago)	Attacks with Bad user agents	Hacking
🇺🇸 COMPLEX	2025-04-03 01:17:48 (1 year ago)	Triggered Cloudflare WAF (l7ddos) from ID. Action taken: BLOCK ASN: 45700 (NAPINFO-AS-ID PT. NAP Inf ... show more Triggered Cloudflare WAF (l7ddos) from ID. Action taken: BLOCK ASN: 45700 (NAPINFO-AS-ID PT. NAP Info Lintas Nusa) Protocol: HTTP/2 (GET method) Timestamp: 2025-04-03T01:16:41Z show less	Bad Web Bot
Anonymous	2025-01-02 08:42:52 (1 year ago)	Trawling for Open Source CMS user accounts	Hacking Brute-Force

Showing 1 to 15 of 18 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇱 217.97.142.30

🇻🇳 210.245.84.39

🇺🇸 162.216.150.134

🇦🇷 152.169.164.2

🇩🇪 151.243.11.17

🇨🇳 110.83.135.6

🇷🇺 94.243.15.185

🇺🇸 20.84.148.145

🇭🇰 212.192.15.177

🇰🇷 211.105.129.57

🇲🇽 158.23.184.117

🇨🇳 106.13.107.71

🇮🇳 103.87.49.206

🇷🇺 94.243.11.253

🇪🇨 45.224.148.102

🇺🇦 37.53.46.110

🇧🇷 189.56.0.19

🇦🇷 186.13.24.118

🇵🇱 185.67.8.2

🇿🇦 154.126.223.226