JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 157.66.138.85

157.66.138.85 was found in our database!

This IP was reported 25 times. Confidence of Abuse is 22%: ?

22%

ISP	PT Neo Fiber Teknologi
Usage Type	Fixed Line ISP
ASN	AS141662
Domain Name	neofiberteknologi.id
Country	🇮🇩 Indonesia
City	Purwakarta, West Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 157.66.138.85

Whois 157.66.138.85

IP Abuse Reports for 157.66.138.85:

This IP address has been reported a total of 25 times from 22 distinct sources. 157.66.138.85 was first reported on May 12th 2025, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Vegascosmetics	2026-06-01 12:24:35 (2 weeks ago)	Kingcopy(AI-IDS) Report: This IP is Banned after 3 Attacks automatically because Pattern: High Prior ... show more Kingcopy(AI-IDS) Report: This IP is Banned after 3 Attacks automatically because Pattern: High Priority: ChangeCountry - Vegascosmetics Security System show less	DDoS Attack Hacking Exploited Host
🇩🇪 SMARTNET	2026-05-27 06:03:53 (3 weeks ago)	Aisuru(Mirai variant) DDoS \| Incident ID: f9eee327-63b9-4c70-8845-0c5f5dde9bdb	DDoS Attack
🇳🇱 trivox.sh	2026-05-14 14:48:30 (1 month ago)	2026-05-14T14:29:24.588962+00:00 ws1.trivox.sh sshd-session[1775725]: banner exchange: Connection fr ... show more 2026-05-14T14:29:24.588962+00:00 ws1.trivox.sh sshd-session[1775725]: banner exchange: Connection from 157.66.138.85 port 44536: invalid format 2026-05-14T14:35:33.031353+00:00 ws1.trivox.sh sshd-session[1788727]: banner exchange: Connection from 157.66.138.85 port 48268: invalid format 2026-05-14T14:36:09.596730+00:00 ws1.trivox.sh sshd-session[1790183]: banner exchange: Connection from 157.66.138.85 port 53414: invalid format 2026-05-14T14:38:00.447893+00:00 ws1.trivox.sh sshd-session[1793993]: banner exchange: Connection from 157.66.138.85 port 47896: invalid format ... show less	Brute-Force SSH
🇩🇪 ghostwarriors	2026-04-28 18:50:50 (1 month ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ksol-hostmaster	2026-04-28 18:45:15 (1 month ago)	2026/04/28 20:45:15 [error] 67985#154666: 1406912 access forbidden by rule, client: 157.66.138.85, ... show more 2026/04/28 20:45:15 [error] 67985#154666: 1406912 access forbidden by rule, client: 157.66.138.85, server: new.hondaforum.hu, request: "GET /topic/zene-film-tv-audio-es-vizualis-ingerek-topikja/1022858/ HTTP/1.1", host: "new.hondaforum.hu" ... show less	Web Spam
🇮🇹 VHosting	2026-04-26 09:00:49 (1 month ago)	Detected attack and reported by a human	Brute-Force Web App Attack SSH DDoS Attack Exploited Host Bad Web Bot
🇨🇦 polycoda	2026-01-17 12:31:06 (5 months ago)	🥶 Part of massive botnet scraping campaign that nearly turned into a DDoS on 2025-11-27	DDoS Attack
🇫🇷 MatStef132	2025-12-29 18:29:16 (5 months ago)	Malicious activity detected (2 incidents). IP has been blacklisted.	DDoS Attack Port Scan
🇺🇸 1gz	2025-11-30 10:41:23 (6 months ago)	Triggered Cloudflare WAF (l7ddos) from ID. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoin ... show more Triggered Cloudflare WAF (l7ddos) from ID. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: /.xml UA: Mozilla/5.0 (iPhone; CPU iPhone OS 15_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/112.0.5122.79 Mobile/15E148 Safari/604.1 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	DDoS Attack Bad Web Bot
🇺🇸 nodepile	2025-11-17 01:16:12 (7 months ago)	Requests denied due to proxy/VPN risk (tenant=82 method=GET path=/brands/switchback-turn-signal-leds ... show more Requests denied due to proxy/VPN risk (tenant=82 method=GET path=/brands/switchback-turn-signal-leds-for-2014-2023-toyota-corolla-pair.html ua='Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.135 Safari/537.36') show less	Open Proxy VPN IP
Anonymous	2025-11-14 17:31:40 (7 months ago)	scanning http requests from known botnet	Web App Attack
🇩🇪 H. Hampel	2025-11-07 18:57:11 (7 months ago)	Spam Score: 28	Email Spam
🇩🇪 sbajic	2025-11-07 15:40:26 (7 months ago)	Nov 7 16:38:50 maia postfix/smtpd[10011]: NOQUEUE: reject: RCPT from unknown[157.66.138.85]: 450 4. ... show more Nov 7 16:38:50 maia postfix/smtpd[10011]: NOQUEUE: reject: RCPT from unknown[157.66.138.85]: 450 4.7.1 Client host rejected: cannot find your reverse hostname, [157.66.138.85]; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<[157.66.138.85]> Nov 7 16:39:49 maia postfix/smtpd[30925]: NOQUEUE: reject: RCPT from unknown[157.66.138.85]: 450 4.7.1 Client host rejected: cannot find your reverse hostname, [157.66.138.85]; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<[157.66.138.85]> Nov 7 16:40:25 maia postfix/smtpd[30925]: NOQUEUE: reject: RCPT from unknown[157.66.138.85]: 450 4.7.1 Client host rejected: cannot find your reverse hostname, [157.66.138.85]; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<[157.66.138.85]> ... show less	Brute-Force
🇨🇭 Origon	2025-11-07 13:02:30 (7 months ago)	NOQUEUE - IP: 157.66.138.85 - Nov 7 14:02:29 plesk postfix/smtpd[2528842]: NOQUEUE: reject: RCPT fr ... show more NOQUEUE - IP: 157.66.138.85 - Nov 7 14:02:29 plesk postfix/smtpd[2528842]: NOQUEUE: reject: RCPT from unknown[157.66.138.85]: 554 5.7.1 Service unavailable; Client host [157.66.138.85] blocked using dnsbl-1.uceprotect.net; IP 157.66.138.85 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=157.66.138.85; from=<[email protected]> to=<REDACTED@REDACTED> proto=ESMTP helo=<[157.66.138.85]> show less	Email Spam
🇳🇱 exxos	2025-11-03 16:06:59 (7 months ago)	Attacks with Bad user agents	Hacking

Showing 1 to 15 of 25 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇷 181.116.220.252

🇧🇪 104.155.30.19

🇧🇩 103.179.198.19

🇺🇸 98.93.18.34

🇺🇸 13.220.126.47

🇦🇷 190.12.109.162

🇺🇸 172.234.21.101

🇺🇸 162.216.149.162

🇺🇸 135.232.201.35

🇺🇸 65.49.1.238

🇧🇷 45.234.238.158

🇰🇿 31.132.90.3

🇬🇧 195.96.139.168

🇧🇷 177.3.126.150

🇺🇸 147.185.132.59

🇺🇸 137.184.36.28

🇺🇸 69.160.84.199

🇺🇸 66.132.172.236

🇳🇱 45.156.87.147

🇳🇱 45.148.10.152