JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 157.85.205.153

157.85.205.153 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 38%: ?

38%

ISP	PT XLSMART Telecom Sejahtera, TBK
Usage Type	Fixed Line ISP
ASN	AS139994
Domain Name	xlsmart.co.id
Country	🇮🇩 Indonesia
City	Yogyakarta, Yogyakarta

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 157.85.205.153

Whois 157.85.205.153

IP Abuse Reports for 157.85.205.153:

This IP address has been reported a total of 11 times from 5 distinct sources. 157.85.205.153 was first reported on June 25th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 BIV	2026-06-29 20:19:57 (1 hour ago)	Honeypot multi-source hit. Sources: dshield:fw,tpot:Suricata. Ports: 7101. Automated tiered (T-Pot+D ... show more Honeypot multi-source hit. Sources: dshield:fw,tpot:Suricata. Ports: 7101. Automated tiered (T-Pot+DShield). show less	Port Scan Hacking
🇮🇩 sockominfo	2026-06-29 17:00:30 (4 hours ago)	Reported by TangerangKota-CSIRT. Status: MALICIOUS	Hacking Web App Attack
Anonymous	2026-06-29 12:48:34 (8 hours ago)	Port scan on ports 5568/UDP, 6990/UDP, 9395/UDP, 10229/UDP, 10574/UDP, 11527/UDP, 16517/UDP, 17192/U ... show more Port scan on ports 5568/UDP, 6990/UDP, 9395/UDP, 10229/UDP, 10574/UDP, 11527/UDP, 16517/UDP, 17192/UDP, 19522/UDP, 21877/UDP, 22488/UDP, 22537/UDP, 25360/UDP, 25431/UDP, 28486/UDP, 28795/UDP, 31473/UDP, 31709/UDP, 34331/UDP, 36883/UDP, 38440/UDP, 39686/UDP, 41058/UDP, 42642/UDP, 44901/UDP, 45105/UDP, 48185/UDP, 49535/UDP, 55017/UDP, 56046/UDP, 56097/UDP, 57011/UDP, 59191/UDP, 59300/UDP, 59907/UDP, 60364/UDP, 60806/UDP, 61979/UDP, 62951/UDP to unused IP show less	Port Scan
🇮🇩 sockominfo	2026-06-29 01:00:52 (20 hours ago)	User login to application from malicious IP 157.85.205.153.. Threat Score: 3.8/10 (LOW). Confidence: ... show more User login to application from malicious IP 157.85.205.153.. Threat Score: 3.8/10 (LOW). Confidence: 30%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 40%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-06-29 00:00:52 (21 hours ago)	User login to application from malicious IP 157.85.205.153.. Threat Score: 3.9/10 (LOW). Confidence: ... show more User login to application from malicious IP 157.85.205.153.. Threat Score: 3.9/10 (LOW). Confidence: 30%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 40%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇩🇪 Admins@FBN	2026-06-28 12:28:16 (1 day ago)	IPS:drop <match> dstport=30609	Brute-Force Exploited Host
🇮🇩 sockominfo	2026-06-27 13:00:52 (2 days ago)	User login to application from malicious IP 157.85.205.153.. Threat Score: 3.5/10 (LOW). Confidence: ... show more User login to application from malicious IP 157.85.205.153.. Threat Score: 3.5/10 (LOW). Confidence: 30%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 40%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Moderate. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-06-27 12:00:52 (2 days ago)	User login to application from malicious IP 157.85.205.153.. Threat Score: 3.7/10 (LOW). Confidence: ... show more User login to application from malicious IP 157.85.205.153.. Threat Score: 3.7/10 (LOW). Confidence: 30%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 40%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-06-27 11:00:52 (2 days ago)	User login to application from malicious IP 157.85.205.153.. Threat Score: 3.8/10 (LOW). Confidence: ... show more User login to application from malicious IP 157.85.205.153.. Threat Score: 3.8/10 (LOW). Confidence: 30%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 40%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-06-27 10:00:09 (2 days ago)	User login to application from malicious IP 157.85.205.153.. Threat Score: 0/10 (INFORMATIONAL). Rep ... show more User login to application from malicious IP 157.85.205.153.. Threat Score: 0/10 (INFORMATIONAL). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
Anonymous	2026-06-25 21:02:51 (4 days ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 98.93.165.236

🇨🇳 223.167.205.252

🇺🇸 207.90.244.27

🇺🇸 205.210.31.41

🇳🇱 204.76.203.15

🇧🇷 201.158.61.216

🇳🇱 192.253.248.59

🇺🇸 154.92.23.249

🇺🇸 152.32.207.172

🇺🇸 100.55.70.229

🇸🇦 51.39.145.132

🇩🇪 43.228.157.8

🇯🇵 43.163.206.70

🇺🇸 34.229.17.110

🇮🇳 34.100.248.63

🇺🇸 193.36.225.31

🇪🇨 191.99.42.48

🇬🇧 185.216.145.168

🇩🇪 185.30.32.68

🇺🇦 176.118.48.244