JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 222.165.234.147

222.165.234.147 was found in our database!

This IP was reported 155 times. Confidence of Abuse is 10%: ?

10%

ISP	PT Net2Cyber Indonesia
Usage Type	Fixed Line ISP
ASN	AS24207
Hostname(s)	ip-147-234-static.velo.net.id
Domain Name	express.net.id
Country	🇮🇩 Indonesia
City	Bekasi, West Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 222.165.234.147

Whois 222.165.234.147

IP Abuse Reports for 222.165.234.147:

This IP address has been reported a total of 155 times from 81 distinct sources. 222.165.234.147 was first reported on December 19th 2020, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 jasperedv.de	2026-09-08 10:52:18 (1 week ago)	Failed IMAP Login - Brutforcing	Email Spam Brute-Force
🇮🇩 sockominfo	2026-07-21 07:00:53 (1 month ago)	Zimbra: Login failures from malicious IP: 222.165.234.147. Threat Score: 6.2/10 (MEDIUM). Confidence ... show more Zimbra: Login failures from malicious IP: 222.165.234.147. Threat Score: 6.2/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-07-21 06:00:52 (1 month ago)	Zimbra: Login failures from malicious IP: 222.165.234.147. Threat Score: 6.3/10 (MEDIUM). Confidence ... show more Zimbra: Login failures from malicious IP: 222.165.234.147. Threat Score: 6.3/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-07-21 05:00:09 (1 month ago)	Zimbra: Login failures from malicious IP: 222.165.234.147. Threat Score: 5.5/10 (MEDIUM). Reported b ... show more Zimbra: Login failures from malicious IP: 222.165.234.147. Threat Score: 5.5/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇹 VHosting	2026-07-07 09:11:07 (2 months ago)	Detected attack and reported by a human	Brute-Force Web App Attack SSH DDoS Attack Exploited Host Bad Web Bot
🇩🇪 Justin F. \| AS204464	2026-06-06 17:40:37 (3 months ago)	Honeypot [nx-infrastructure]: Brute-force attack detected on 22/SSH • Credentials: d307ec7247a6:, a8 ... show more Honeypot [nx-infrastructure]: Brute-force attack detected on 22/SSH • Credentials: d307ec7247a6:, a8bf40915d61:4f62d3ba9d, 023dda4c8122:b815eab90e, efbff6dd6c04:455748f228, af519a02fe66:, a10d8a07b862:, 65df07f7885a:, 9afdb2a1aead:, 36695a72335d: • Number of login attempts: 9 • Client: SSH-2.0-Go Reported by: Justin F. show less	Brute-Force SSH
🇩🇪 SMARTNET	2026-05-27 06:03:53 (3 months ago)	Aisuru(Mirai variant) DDoS \| Incident ID: 22ada211-5b5c-463a-b46f-60fd11dc639d	DDoS Attack
🇩🇪 Justin F. \| AS204464	2026-04-26 15:02:24 (4 months ago)	Honeypot [nx-infrastructure]: Brute-force attack detected on 23/TELNET • Credentials: eea437cb202e:0 ... show more Honeypot [nx-infrastructure]: Brute-force attack detected on 23/TELNET • Credentials: eea437cb202e:02d65e, b9d68c09f674:d17dc4, 9ee9d156976b:4636aa, 4f0dc9a29358:d14041, 39a97e02774b:db9600 • Number of login attempts: 5 • Client: SSH-2.0-Go Reported by: Justin F. show less	Brute-Force Hacking
🇩🇪 Justin F. \| AS204464	2026-04-26 01:31:03 (4 months ago)	Honeypot [nx-infrastructure]: Brute-force attack detected on 22/SSH • Credential used: 4b232534c940: ... show more Honeypot [nx-infrastructure]: Brute-force attack detected on 22/SSH • Credential used: 4b232534c940: • Number of login attempts: 1 • Client: SSH-2.0-Go Reported by: Justin F. show less	SSH
Anonymous	2026-02-26 14:13:48 (6 months ago)	Detected Hacking, SQL Injection or general Web App Attack	Web App Attack
🇩🇪 kranem	2026-01-18 21:03:40 (7 months ago)	Triggered Cloudflare WAF from ID. Action taken: BLOCK ASN: 24207 (EXPRESSNET-AS-ID PT NettoCyber Ind ... show more Triggered Cloudflare WAF from ID. Action taken: BLOCK ASN: 24207 (EXPRESSNET-AS-ID PT NettoCyber Indonesia) Protocol: HTTP/1.1 (GET method) Endpoint: / Timestamp: 2026-01-18T20:29:32Z User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2865.80 Safari/537.36 show less	Bad Web Bot
🇨🇭 Modules	2025-12-14 12:22:20 (9 months ago)	Open proxy socks4://222.165.234.147:52667 (RT:12481ms,Loc:Indonesia,ASN:AS24207)	Open Proxy
Anonymous	2025-12-04 07:20:22 (9 months ago)	botnet	DDoS Attack
🇦🇺 GreyWatch - Honeypot Intelligence	2025-11-09 05:32:15 (10 months ago)	ASN: 24207 (EXPRESSNET-AS-ID PT NettoCyber Indonesia) Botnet Zombie: This IP has been detected as a ... show more ASN: 24207 (EXPRESSNET-AS-ID PT NettoCyber Indonesia) Botnet Zombie: This IP has been detected as a botnet zombie \| Outbound DDoS attack source \| Malicious show less	DDoS Attack Bad Web Bot
🇨🇭 backslash	2025-11-03 20:22:16 (10 months ago)	block ruleset Badbot using very old user-agents 5CF3CDB778C7D82564405B86B9242E612F378C68	Bad Web Bot

Showing 1 to 15 of 155 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇹 213.225.7.95

🇺🇸 199.195.253.156

🇨🇱 190.121.22.158

🇧🇩 117.103.80.168

🇳🇱 94.154.46.242

🇫🇷 82.65.245.254

🇷🇴 80.94.92.234

🇺🇸 184.105.139.126

🇷🇺 109.106.129.198

🇺🇸 73.112.248.93

🇺🇸 45.79.145.233

🇳🇱 34.90.155.246

🇩🇪 185.11.139.198

🇨🇳 183.190.61.94

🇫🇷 146.75.166.49

🇺🇸 143.244.147.79

🇺🇸 66.132.195.37

🇺🇸 65.49.1.138

🇯🇵 58.98.230.152

🇺🇸 45.92.229.86