JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 157.85.212.49

157.85.212.49 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 59%: ?

59%

ISP	PT XLSMART Telecom Sejahtera, TBK
Usage Type	Fixed Line ISP
ASN	AS139994
Domain Name	xlsmart.co.id
Country	🇮🇩 Indonesia
City	Soreang, West Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 157.85.212.49

Whois 157.85.212.49

IP Abuse Reports for 157.85.212.49:

This IP address has been reported a total of 11 times from 9 distinct sources. 157.85.212.49 was first reported on June 19th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇹 urnilxfgbez	2026-06-25 22:45:00 (1 day ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇷🇴 gtheo99	2026-06-25 17:41:28 (1 day ago)	(cpanel) Failed cPanel login from 157.85.212.49 (ID/Indonesia/-): 2 in the last 900 secs	Brute-Force Web App Attack
🇫🇷 solution.it	2026-06-25 17:14:30 (1 day ago)	[Thu Jun 25 19:14:29.624386 2026] [php7:error] [pid 2693298:tid 2693298] [client 157.85.212.49:19627 ... show more [Thu Jun 25 19:14:29.624386 2026] [php7:error] [pid 2693298:tid 2693298] [client 157.85.212.49:19627] script '/var/www/html/blog.solution.it/wp-login.php' not found or unable to stat show less	Web App Attack
🇨🇦 polycoda	2026-06-24 19:02:03 (2 days ago)	📂 Probes for tons of inexistent directory listings	Hacking Web App Attack
🇧🇬 MazenHost	2026-06-24 15:26:37 (2 days ago)	Jun 24 18:24:38 HRScriptsBot sshd[837150]: Failed password for invalid user bgviprp from 157.85.212. ... show more Jun 24 18:24:38 HRScriptsBot sshd[837150]: Failed password for invalid user bgviprp from 157.85.212.49 port 8823 ssh2 Jun 24 18:26:28 HRScriptsBot sshd[839121]: Invalid user 40120 from 157.85.212.49 port 13637 Jun 24 18:26:28 HRScriptsBot sshd[839121]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.85.212.49 Jun 24 18:26:30 HRScriptsBot sshd[839121]: Failed password for invalid user 40120 from 157.85.212.49 port 13637 ssh2 Jun 24 18:26:33 HRScriptsBot sshd[839231]: Invalid user 40120 from 157.85.212.49 port 24979 Jun 24 18:26:33 HRScriptsBot sshd[839231]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.85.212.49 Jun 24 18:26:36 HRScriptsBot sshd[839231]: Failed password for invalid user 40120 from 157.85.212.49 port 24979 ssh2 ... show less	Brute-Force SSH
🇸🇬 bret.dk	2026-06-24 15:26:28 (2 days ago)	Jun 24 15:26:24 sg-mirror sshd[2558025]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ... show more Jun 24 15:26:24 sg-mirror sshd[2558025]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.85.212.49 Jun 24 15:26:26 sg-mirror sshd[2558025]: Failed password for invalid user AdMiN44188 from 157.85.212.49 port 27065 ssh2 ... show less	Brute-Force SSH
🇧🇬 MazenHost	2026-06-24 14:02:40 (2 days ago)	Jun 24 16:59:25 MoonLightRP sshd[939138]: Invalid user 40120 from 157.85.212.49 port 26590 Jun 24 16 ... show more Jun 24 16:59:25 MoonLightRP sshd[939138]: Invalid user 40120 from 157.85.212.49 port 26590 Jun 24 16:59:25 MoonLightRP sshd[939138]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.85.212.49 Jun 24 16:59:26 MoonLightRP sshd[939138]: Failed password for invalid user 40120 from 157.85.212.49 port 26590 ssh2 Jun 24 17:02:36 MoonLightRP sshd[943147]: Invalid user 40120 from 157.85.212.49 port 7334 Jun 24 17:02:36 MoonLightRP sshd[943147]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.85.212.49 Jun 24 17:02:38 MoonLightRP sshd[943147]: Failed password for invalid user 40120 from 157.85.212.49 port 7334 ssh2 Jun 24 17:02:40 MoonLightRP sshd[943271]: Invalid user 40120 from 157.85.212.49 port 7341 ... show less	Brute-Force SSH
🇩🇪 LRob.fr	2026-06-24 05:15:12 (3 days ago)	WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail	Brute-Force Web App Attack
🇧🇬 MazenHost	2026-06-22 18:43:29 (4 days ago)	Jun 22 21:38:44 Euphoria sshd[172195]: Invalid user lam57p from 157.85.212.49 port 39329 Jun 22 21:3 ... show more Jun 22 21:38:44 Euphoria sshd[172195]: Invalid user lam57p from 157.85.212.49 port 39329 Jun 22 21:38:44 Euphoria sshd[172195]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.85.212.49 Jun 22 21:38:46 Euphoria sshd[172195]: Failed password for invalid user lam57p from 157.85.212.49 port 39329 ssh2 Jun 22 21:43:24 Euphoria sshd[172270]: Invalid user losangles from 157.85.212.49 port 41997 Jun 22 21:43:24 Euphoria sshd[172270]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.85.212.49 Jun 22 21:43:26 Euphoria sshd[172270]: Failed password for invalid user losangles from 157.85.212.49 port 41997 ssh2 Jun 22 21:43:28 Euphoria sshd[172272]: Invalid user losangles from 157.85.212.49 port 30365 ... show less	Brute-Force SSH
🇦🇺 dyln	2026-06-19 04:33:36 (1 week ago)	Dyls honeypot brute-force: SMB (4 total hits)	Brute-Force
🇺🇸 RAP	2026-06-19 03:56:24 (1 week ago)	2026-06-19 03:56:24 UTC Unauthorized activity to TCP port 445. SMB	Port Scan

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇰 175.107.0.204

🇺🇸 73.129.51.249

🇨🇳 223.109.200.181

🇮🇳 182.76.107.16

🇰🇷 121.178.185.141

🇺🇸 98.83.8.142

🇫🇷 91.231.89.173

🇧🇬 79.124.59.78

🇺🇸 64.62.156.175

🇬🇧 35.203.210.225

🇨🇳 27.39.128.169

🇺🇸 216.25.89.150

🇺🇸 216.25.89.90

🇮🇳 182.95.51.166

🇨🇭 172.161.73.175

🇨🇳 171.83.26.130

🇨🇳 117.15.95.225

🇻🇳 116.99.168.247

🇻🇳 103.9.205.204

🇺🇸 98.20.248.12