JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 101.255.211.42

101.255.211.42 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 0%: ?

ISP	PT Remala Abadi
Usage Type	Fixed Line ISP
ASN	AS38511
Domain Name	tachyon.net.id
Country	🇮🇩 Indonesia
City	Jakarta, Jakarta

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 101.255.211.42

Whois 101.255.211.42

IP Abuse Reports for 101.255.211.42:

This IP address has been reported a total of 14 times from 11 distinct sources. 101.255.211.42 was first reported on January 4th 2025, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-03-26 00:12:27 (2 months ago)	Forum/form spam	Web Spam
Anonymous	2026-03-23 07:00:11 (2 months ago)	\| [Dangerous/Indonesia] Aggressive IP 101.255.211.42 (~30 hits). Type: DoS Defender- Web server 400 ... show more \| [Dangerous/Indonesia] Aggressive IP 101.255.211.42 (~30 hits). Type: DoS Defender- Web server 400 error code show less	Web App Attack Hacking SQL Injection
🇮🇩 sockominfo	2026-03-20 21:00:34 (2 months ago)	Late night login (22:00-05:30) - High risk Jakarta timezone (WIB), User login to application during ... show more Late night login (22:00-05:30) - High risk Jakarta timezone (WIB), User login to application during non-business hours. Threat Score: 8.8/10 (CRITICAL). Confidence: 70%. CVSS v3.1: 9.9/10 (Critical). CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H. Bayesian Probability: 93%. MITRE ATT&CK: T1078 (Valid Accounts). Tactic: TA0001. Freshness: Fresh. Source Reputation: KNOWN_MALICIOUS. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-03-20 19:01:16 (2 months ago)	Late night login (22:00-05:30) - High risk Jakarta timezone (WIB). Threat Score: 8.5/10 (HIGH). Repo ... show more Late night login (22:00-05:30) - High risk Jakarta timezone (WIB). Threat Score: 8.5/10 (HIGH). Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-03-17 17:00:33 (2 months ago)	User login to application during non-business hours. Threat Score: 6.6/10 (HIGH). Confidence: 40%. C ... show more User login to application during non-business hours. Threat Score: 6.6/10 (HIGH). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 87%. MITRE ATT&CK: T1046 (Network Service Scanning). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇨🇭 Modules	2025-12-23 12:58:43 (5 months ago)	Open proxy http://101.255.211.42:1111 (RT:6539ms,Loc:Indonesia,ASN:AS38511)	Open Proxy
🇩🇪 RyoKN	2025-10-17 08:34:06 (7 months ago)	Blocked by UFW on s474 [34600/tcp] Source port: 1111 TTL: 48 Packet length: 60 TOS: 0x00 This repor ... show more Blocked by UFW on s474 [34600/tcp] Source port: 1111 TTL: 48 Packet length: 60 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇬🇧 Silly Development	2025-09-05 04:00:00 (9 months ago)	Malicious activity detected from 38511 TACHYON-AS-ID PT Remala Abadi towards host panel.sillydev.co. ... show more Malicious activity detected from 38511 TACHYON-AS-ID PT Remala Abadi towards host panel.sillydev.co.uk (GET HTTP/2) @ 2025-09-05T04:00:00Z (1 occurrences) show less	DDoS Attack Exploited Host
🇩🇪 Packets-Decreaser.NET	2025-08-29 23:40:50 (9 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇩🇪 Packets-Decreaser.NET	2025-08-28 22:57:19 (9 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇩🇪 1gz	2025-08-27 23:59:43 (9 months ago)	Triggered Cloudflare WAF (firewallCustom) from ID. Action taken: MANAGED_CHALLENGE Protocol: HTTP/2 ... show more Triggered Cloudflare WAF (firewallCustom) from ID. Action taken: MANAGED_CHALLENGE Protocol: HTTP/2 (GET method) Endpoint: / UA: Mozilla/4.0 (compatible; MSIE 7.0; AOL 9.1; AOLBuild 4334.34; Windows NT 5.1; .NET CLR 1.1.4322) This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇸🇬 Vano Ganzzz	2025-08-09 14:00:43 (9 months ago)	Triggered Cloudflare WAF (l7ddos) from ID. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoin ... show more Triggered Cloudflare WAF (l7ddos) from ID. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: / UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	DDoS Attack Bad Web Bot
🇸🇪 Johan Finn	2025-07-13 12:19:21 (10 months ago)	malicious activity, botnet	Web App Attack
🇩🇪 David Ferneding	2025-01-04 15:01:32 (1 year ago)	Part of large-scale ddos-attack, 522520 requests from this ip	DDoS Attack

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 172.71.154.89

🇮🇱 172.70.153.168

🇮🇸 172.69.144.160

🇨🇳 101.126.53.14

🇳🇱 45.153.34.71

🇨🇳 180.168.60.146

🇺🇸 173.239.224.95

🇩🇪 172.70.247.209

🇮🇳 172.69.95.14

🇮🇳 165.232.181.59

🇨🇳 117.187.40.36

🇭🇰 172.253.4.21

🇳🇵 172.71.231.166

🇧🇷 172.69.99.164

🇲🇳 172.68.93.137

🇺🇸 132.145.213.106

🇧🇩 123.49.50.130

🇸🇪 81.226.129.67

🇮🇷 5.232.83.237

🇳🇱 176.65.148.158