JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 157.85.203.34

157.85.203.34 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 49%: ?

49%

ISP	PT XLSMART Telecom Sejahtera, TBK
Usage Type	Fixed Line ISP
ASN	AS139994
Domain Name	xlsmart.co.id
Country	🇮🇩 Indonesia
City	Semarang, Central Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 157.85.203.34

Whois 157.85.203.34

IP Abuse Reports for 157.85.203.34:

This IP address has been reported a total of 15 times from 11 distinct sources. 157.85.203.34 was first reported on July 1st 2026, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 bps-statistics	2026-08-19 03:36:07 (6 days ago)	Web Application Attacks	Web App Attack
🇺🇦 URAN Publishing Service	2026-08-19 00:45:39 (6 days ago)	[19/Aug/2026:03:45:38 +0300] -- 157.85.203.34 Ban reason: Scanner [CMS_GENERIC] \| Request: POST /wp- ... show more [19/Aug/2026:03:45:38 +0300] -- 157.85.203.34 Ban reason: Scanner [CMS_GENERIC] \| Request: POST /wp-json/batch/v1 HTTP/1.1 show less	Bad Web Bot Web App Attack
🇮🇩 sockominfo	2026-08-18 17:01:07 (1 week ago)	WP2Shell activity detected (Success: 200)., Webshell discovery success (Response: 200). Threat Score ... show more WP2Shell activity detected (Success: 200)., Webshell discovery success (Response: 200). Threat Score: 9.3/10 (CRITICAL). Confidence: 85%. CVSS v3.1: 10/10 (Critical). CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H. Bayesian Probability: 98%. MITRE ATT&CK: T1566 (Phishing). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: KNOWN_MALICIOUS. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Email Spam
🇮🇩 sockominfo	2026-08-18 16:00:56 (1 week ago)	WP2Shell activity detected (Success: 200)., Webshell discovery success (Response: 200). Threat Score ... show more WP2Shell activity detected (Success: 200)., Webshell discovery success (Response: 200). Threat Score: 9.3/10 (CRITICAL). Confidence: 85%. CVSS v3.1: 10/10 (Critical). CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H. Bayesian Probability: 98%. MITRE ATT&CK: T1566 (Phishing). Tactic: TA0001. Freshness: Fresh. Source Reputation: KNOWN_MALICIOUS. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Email Spam
🇮🇩 sockominfo	2026-08-18 15:00:11 (1 week ago)	Webshell discovery success (Response: 200). Threat Score: 9.2/10 (CRITICAL). Reported by TangerangKo ... show more Webshell discovery success (Response: 200). Threat Score: 9.2/10 (CRITICAL). Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Email Spam
🇹🇼 ashiyasayo	2026-08-18 08:39:00 (1 week ago)	Detected injection attack.	Web App Attack
🇮🇹 A000Z	2026-08-18 02:17:32 (1 week ago)	Fail2Ban: 157.85.203.34 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5. ... show more Fail2Ban: 157.85.203.34 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 show less	Bad Web Bot
Anonymous	2026-08-18 02:10:10 (1 week ago)	\| [Dangerous/Australia] Aggressive IP 157.85.203.34 (~30 hits). Type: DoS Defender- Web server 400 e ... show more \| [Dangerous/Australia] Aggressive IP 157.85.203.34 (~30 hits). Type: DoS Defender- Web server 400 error code show less	Web App Attack Hacking SQL Injection
🇩🇪 FeG Deutschland	2026-08-18 01:26:05 (1 week ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 12	Exploited Host Web App Attack
🇮🇩 sockominfo	2026-08-18 00:00:31 (1 week ago)	Reported by TangerangKota-CSIRT. Status: MALICIOUS	Hacking Email Spam
🇮🇩 sockominfo	2026-08-17 23:00:09 (1 week ago)	Webshell discovery success (Response: 200). Threat Score: 8.1/10 (HIGH). Reported by TangerangKota-C ... show more Webshell discovery success (Response: 200). Threat Score: 8.1/10 (HIGH). Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Email Spam
🇩🇪 msavo	2026-08-17 21:00:23 (1 week ago)	CIR Sentinel: batch_auth_failures; 7 requests in 60s; targets=/wp-json/batch/v1; permanently blocked ... show more CIR Sentinel: batch_auth_failures; 7 requests in 60s; targets=/wp-json/batch/v1; permanently blocked by the firewall. show less	Web App Attack
🇫🇷 dynamix	2026-08-17 18:03:46 (1 week ago)	Multiple WAF Violations	Web App Attack
🇮🇩 hermawan	2026-07-03 00:44:10 (1 month ago)	07/03/2026-07:44:04.957905 [Drop] [] [1:921373:1] Suricata Dibuat Gemini TCP SYN port scanner - W ... show more 07/03/2026-07:44:04.957905 [Drop] [] [1:921373:1] Suricata Dibuat Gemini TCP SYN port scanner - Win 65535 [**] [Classification: (null)] [Priority: 3] {TCP} 157.85.203.34:5678 -> 103.166.156.58:443 ... show less	Email Spam Hacking
Anonymous	2026-07-01 12:33:33 (1 month ago)	Port scan on ports 10070/UDP, 50874/UDP to unused IP	Port Scan

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇷 200.59.122.249

🇺🇸 152.163.164.229

🇺🇸 64.57.129.75

🇺🇸 45.33.105.182

🇮🇷 217.60.255.130

🇺🇸 204.228.141.113

🇦🇷 200.59.113.42

🇺🇸 192.241.171.92

🇺🇸 192.101.68.88

🇩🇪 164.92.161.148

🇮🇳 2406:da1a:daa:f400:5fd7:4054:3c5a:4d42

🇨🇦 20.151.129.194

🇰🇷 218.156.8.97

🇳🇱 194.62.122.254

🇳🇱 167.71.72.95

🇦🇪 145.241.116.89

🇯🇵 118.193.61.14

🇰🇪 105.165.30.6

🇳🇱 45.148.10.36

🇳🇱 193.47.62.69