JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 157.85.206.76

157.85.206.76 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 21%: ?

21%

ISP	PT XLSMART Telecom Sejahtera, TBK
Usage Type	Fixed Line ISP
ASN	AS139994
Domain Name	xlsmart.co.id
Country	🇮🇩 Indonesia
City	Soreang, West Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 157.85.206.76

Whois 157.85.206.76

IP Abuse Reports for 157.85.206.76:

This IP address has been reported a total of 11 times from 8 distinct sources. 157.85.206.76 was first reported on January 10th 2026, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 pixelmemory.us	2026-07-23 09:17:23 (5 hours ago)	2026-07-23T09:16:21 157.85.206.76 GET /Photos/Work/Shutterfly/March%2022%202007%20GoKart/IMG_7037.CR ... show more 2026-07-23T09:16:21 157.85.206.76 GET /Photos/Work/Shutterfly/March%2022%202007%20GoKart/IMG_7037.CR2 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36 ... show less	Bad Web Bot
🇺🇸 kosada.com	2026-07-13 18:48:47 (1 week ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇮🇩 hermawan	2026-05-29 16:38:03 (1 month ago)	[Fri May 29 23:37:59.053132 2026] [security2:error] [pid 123879:tid 140229926123200] [client 157.85. ... show more [Fri May 29 23:37:59.053132 2026] [security2:error] [pid 123879:tid 140229926123200] [client 157.85.206.76:13926] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:Referer: https://www.bmkg.go.id/ request_line = GET /index.php HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php"] [unique_id "ahnA5zKNT4EosIVhsHZk6AAAlhE"], referer https://www.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[123898] [Cr6xdzczJPA] [ahnA5zKNT4EosIVhsHZk6AAAlhE] keep_alive=[1] [2026-05-29 23:37:59.053138] [R:ahnA5zKNT4EosIVhsHZk6AAAlhE] UA:'Mozilla/5.0 (iPhone; CPU iPhone OS 15_6 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15_6 Mobile/15E148 Safari/604.1' Host:'staklim-jatim ... show less	Email Spam Hacking
🇫🇷 Sklurk	2026-05-28 05:52:50 (1 month ago)	Web App Attack	Web App Attack
🇮🇩 sockominfo	2026-04-25 18:00:53 (2 months ago)	User login to application during non-business hours. Threat Score: 6.8/10 (HIGH). Confidence: 40%. C ... show more User login to application during non-business hours. Threat Score: 6.8/10 (HIGH). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 97%. MITRE ATT&CK: T1046 (Network Service Scanning). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-04-25 17:00:23 (2 months ago)	User login to application during non-business hours. Threat Score: 6/10 (MEDIUM). Reported by Tanger ... show more User login to application during non-business hours. Threat Score: 6/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-04-25 16:00:17 (2 months ago)	Late night login (22:00-05:30) - High risk Jakarta timezone (WIB). Threat Score: 8.6/10 (HIGH). Repo ... show more Late night login (22:00-05:30) - High risk Jakarta timezone (WIB). Threat Score: 8.6/10 (HIGH). Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇺🇸 kosada.com	2026-04-14 04:38:03 (3 months ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
Anonymous	2026-01-11 11:14:22 (6 months ago)	Unauthorized connection attempt on Port 2323	Port Scan Hacking Exploited Host
🇳🇱 EGP Abuse Dept	2026-01-10 04:15:54 (6 months ago)	Unauthorized connection to Telnet port 23	Port Scan Hacking
🇫🇷 security.rdmc.fr	2026-01-10 01:48:01 (6 months ago)	Port Scan Attack proto:TCP src:27765 dst:23	Port Scan

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 213.227.144.47

🇺🇸 52.146.9.202

🇰🇿 194.67.82.11

🇬🇧 193.46.0.123

🇺🇸 172.253.85.212

🇻🇳 171.231.198.37

🇲🇦 160.176.95.205

🇺🇸 107.173.36.231

🇺🇦 82.193.122.91

🇳🇱 45.148.10.157

🇺🇸 37.123.192.41

🇬🇧 35.203.210.132

🇩🇪 2602:80d:1005::1b

🇨🇳 203.189.221.17

🇫🇷 195.25.75.65

🇺🇸 173.194.103.82

🇳🇱 158.94.210.203

🇳🇱 91.92.47.37

🇫🇷 78.243.48.43

🇮🇷 78.39.209.90