157.85.209.32

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
9% Caution
22 reports
12 reporters · latest 2 weeks ago
ISP
PT XLSMART Telecom Sejahtera, TBK
Usage Type
Fixed Line ISP
ASN
AS139994
Domain Name
xlsmart.co.id
Country
🇮🇩 Indonesia
City
Takokak, West Java
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
22 from 12 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇭🇺 Hungary 1 🇵🇱 Poland 1
Most common categories Brute-Force 2 Web App Attack 1
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇭🇺 kisbogdan
Synology DSM login bruteforce; Requests: 10; Avg time between requests: 595.89 seconds; Attempted usernames: kapa7, Jonay
Brute-Force
🇵🇱 jrgjon
Automated brute-force authentication attempt against Synology DSM management portal. Blocked by autoblock.
Brute-Force Web App Attack
Anonymous
PORT & IP Scan.
Port Scan Brute-Force
Anonymous
denied SSH access attempt. destination port 22.
Port Scan Brute-Force SSH
🇳🇱 rmvanderspek
Telnet Brute-force (IoT Botnet scan) detected.
Brute-Force IoT Targeted
🇺🇸 MPL
tcp/23 (2 or more attempts)
Port Scan
🇺🇸 RAP
2026-08-17 05:43:14 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
🇺🇸 xmission.com
Blocked by UFW (TCP on 23) Source port: 18436 TTL: 46 Packet length: 60 TOS: 0x08 This report (for 157.85.209.32) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan Hacking Brute-Force
Anonymous
denied traffic to a honeypot network. destination port 23.
Port Scan Hacking
🇺🇸 RAP
2026-08-16 21:40:44 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
🇺🇸 kosada.com
Web bot: denial-of-service flood
DDoS Attack Bad Web Bot
🇮🇩 sockominfo
Critical: After-hours login detected - Jakarta timezone (WIB). Threat Score: 8.6/10 (HIGH). Reported by TangerangKota-CSIRT. Status: MALICIOUS
Hacking Web App Attack
🇮🇹 A000Z
Fail2Ban: 157.85.209.32 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2857.1963 Safari/537.36
Bad Web Bot
🇮🇩 sockominfo
Hacking Web App Attack
🇮🇩 sockominfo
Hacking Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 45.140.222.141
🇳🇱 35.214.225.86
🇺🇸 24.199.84.117
🇷🇴 2.57.121.25
🇺🇸 216.25.89.121
🇳🇱 195.178.110.232
🇪🇸 193.228.58.231
🇮🇹 172.213.26.234
🇫🇷 91.231.89.251
🇺🇸 91.203.129.99
🇸🇬 47.128.19.45
🇨🇳 123.144.237.94
🇨🇳 49.232.34.190
🇸🇬 47.82.14.47
🇳🇱 45.156.128.157
🇨🇳 36.213.69.67
🇨🇳 36.108.175.145
🇸🇬 34.142.240.160
🇺🇸 4.157.250.195
🇺🇸 216.25.90.19
feedback