157.66.36.129

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
75% Critical
23 reports
17 reporters · latest 3 hours ago
ISP
PT Trik Media Data
Usage Type
Fixed Line ISP
ASN
AS140016
Domain Name
trikmediadata.com
Country
🇮🇩 Indonesia
City
VILLA PERMATA HIJAU, West Java
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
23 from 17 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇵🇱 Poland 5 🇫🇷 France 3 🇳🇱 Netherlands 3
Most common categories Brute-Force 9 DDoS Attack 8 Port Scan 3 Open Proxy 2 Hacking 2
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇵🇱 MatStef132
MatShield L7: blocked on unlocknow.cc (sec-ch-ua-grease-mismatch)
DDoS Attack
🇫🇷 Arkya Networks
HTTP flood (DDoS): 1646 requests to GET / between 2026-11-14 22:00 and 2026-11-15 00:00 UTC, all blocked by our WAF. Likely a compromised device or open proxy.
DDoS Attack
🇵🇱 MatStef132
MatShield L7: blocked on a protected site (sec-ch-ua-grease-mismatch)
DDoS Attack
🇬🇧 Axel
Blocked by UFW on BGPGB [39296/tcp] | SPT: 2864 | TTL: 47 | LEN: 40 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇵🇱 MatStef132
MatShield L7: blocked on unlocknow.cc (sec-fetch-referer-contradiction)
DDoS Attack
🇳🇱 maxxsense
157.66.36.129 (ID/Indonesia/-), 12 distributed imapd attacks on account [redacted]
Brute-Force
🇳🇱 Mangelot Hosting
DDoS Attack
🇸🇪 triplecode
Reported from hMailServer
Hacking
🇹🇼 tyetriiix
Wazuh Alert Evidence: 2026/11/05 12:39:47 [error] 2825320#2825320: *9737 access forbidden by rule, client: 157.66.36.129, server: strapii.triiix.io, request: "GET / HTTP/1.1", host: "strapii.triiix.io"
Web App Attack
🇷🇴 clauss
IP reached maximum auth failures for a one day block
Brute-Force
🇯🇵 SentinalX by uzumaru
Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: 23.239.9.178:80
Open Proxy Port Scan
🇸🇪 triplecode
Reported from hMailServer
Hacking
🇫🇷 adlp.org
Brute-Force
🇵🇱 MatStef132
MatShield L7: blocked on a protected site (sec-ch-ua-grease-mismatch)
DDoS Attack
🇳🇱 maxxsense
157.66.36.129 (ID/Indonesia/-), 12 distributed imapd attacks on account [redacted]
Brute-Force

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇲🇽 187.184.5.29
🇺🇸 147.185.132.213
🇨🇳 116.163.22.44
🇳🇱 104.23.172.70
🇺🇸 87.87.188.229
🇩🇪 47.245.137.15
🇺🇸 172.236.126.175
🇸🇳 154.124.36.231
🇨🇳 101.96.193.183
🇺🇸 97.107.141.150
🇳🇱 89.248.163.197
🇳🇱 81.19.216.126
🇺🇸 34.138.57.160
🇺🇸 32.200.188.37
🇰🇷 221.163.5.228
🇺🇸 198.44.129.243
🇷🇴 193.46.255.86
🇫🇮 147.185.133.201
🇰🇷 115.20.171.54
🇵🇱 104.28.193.185
feedback