JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 101.255.138.166

101.255.138.166 was found in our database!

This IP was reported 23 times. Confidence of Abuse is 27%: ?

27%

ISP	FIBER KERUMAH INDONESIA
Usage Type	Fixed Line ISP
ASN	AS38511
Domain Name	tachyon.net.id
Country	🇮🇩 Indonesia
City	Bekasi, West Java

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 101.255.138.166

Whois 101.255.138.166

IP Abuse Reports for 101.255.138.166:

This IP address has been reported a total of 23 times from 7 distinct sources. 101.255.138.166 was first reported on January 31st 2026, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 sockominfo	2026-07-09 18:00:53 (2 weeks ago)	Critical: After-hours login detected - Jakarta timezone (WIB), Late night login (22:00-05:30) - High ... show more Critical: After-hours login detected - Jakarta timezone (WIB), Late night login (22:00-05:30) - High risk Jakarta timezone (WIB). Threat Score: 9/10 (CRITICAL). Confidence: 70%. CVSS v3.1: 9.9/10 (Critical). CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H. Bayesian Probability: 93%. MITRE ATT&CK: T1078 (Valid Accounts). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: KNOWN_MALICIOUS. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-07-08 17:00:30 (2 weeks ago)	Reported by TangerangKota-CSIRT. Status: MALICIOUS	Hacking Web App Attack
🇺🇸 nodepile	2026-07-01 00:37:38 (3 weeks ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/catalogsearch/result/ ua='M ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/catalogsearch/result/ ua='Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36') show less	Web App Attack Exploited Host
🇺🇸 kosada.com	2026-06-29 15:15:30 (3 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇩🇪 botreporter	2026-06-28 07:18:19 (3 weeks ago)	botnet ignoring robots.txt	Bad Web Bot
🇩🇪 botreporter	2026-06-24 01:32:31 (1 month ago)	botnet ignoring robots.txt	Bad Web Bot
🇮🇩 sockominfo	2026-06-14 17:00:11 (1 month ago)	Late night login (22:00-05:30) - High risk Jakarta timezone (WIB). Threat Score: 8.6/10 (HIGH). Repo ... show more Late night login (22:00-05:30) - High risk Jakarta timezone (WIB). Threat Score: 8.6/10 (HIGH). Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-06-13 19:00:53 (1 month ago)	User login to application during non-business hours, Late night login (22:00-05:30) - High risk Jaka ... show more User login to application during non-business hours, Late night login (22:00-05:30) - High risk Jakarta timezone (WIB). Threat Score: 9/10 (CRITICAL). Confidence: 70%. CVSS v3.1: 9.9/10 (Critical). CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H. Bayesian Probability: 93%. MITRE ATT&CK: T1078 (Valid Accounts). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: KNOWN_MALICIOUS. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇦🇺 prologic	2026-06-13 04:38:47 (1 month ago)	Distributed application-layer DoS against git.mills.io (self-hosted Gitea). High-volume automated re ... show more Distributed application-layer DoS against git.mills.io (self-hosted Gitea). High-volume automated requests to expensive Git repository endpoints (commit/diff/blame/archive views), ~1 request per IP, spoofed browser UA, rejected with HTTP 429. Residential-proxy botnet campaign, 2026-06-13/14 UTC. show less	DDoS Attack Web App Attack
🇩🇪 EGP Abuse Dept	2026-06-13 02:23:14 (1 month ago)	Scraping webshop URLs (www.badgehouder.nl), likely botnet drone	Bad Web Bot Exploited Host
🇩🇪 Vegascosmetics	2026-06-08 07:48:57 (1 month ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated encoding. Vegas Security	DDoS Attack Hacking Bad Web Bot
🇮🇩 sockominfo	2026-05-05 20:00:40 (2 months ago)	User login to application during non-business hours, User access to sensitive menu during non-busine ... show more User login to application during non-business hours, User access to sensitive menu during non-business hours. Threat Score: 6.6/10 (HIGH). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 97%. MITRE ATT&CK: T1046 (Network Service Scanning). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-05-05 19:00:39 (2 months ago)	User login to application during non-business hours, User access to sensitive menu during non-busine ... show more User login to application during non-business hours, User access to sensitive menu during non-business hours. Threat Score: 6.7/10 (HIGH). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 97%. MITRE ATT&CK: T1046 (Network Service Scanning). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-05-05 18:00:40 (2 months ago)	User login to application during non-business hours, User access to sensitive menu during non-busine ... show more User login to application during non-business hours, User access to sensitive menu during non-business hours. Threat Score: 6.8/10 (HIGH). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 97%. MITRE ATT&CK: T1046 (Network Service Scanning). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-05-03 15:00:18 (2 months ago)	Double URL encoding detection. Threat Score: 6.6/10 (MEDIUM). Reported by TangerangKota-CSIRT	Hacking Web App Attack

Showing 1 to 15 of 23 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 222.118.59.16

🇷🇺 83.234.146.131

🇺🇸 216.25.89.134

🇨🇳 211.93.6.230

🇺🇸 205.210.31.10

🇳🇱 185.107.80.93

🇧🇷 177.16.244.39

🇺🇸 162.217.100.201

🇦🇿 158.181.41.39

🇺🇸 135.237.126.251

🇯🇵 133.167.39.230

🇨🇳 112.25.252.49

🇺🇸 100.49.117.77

🇷🇴 92.118.39.233

🇫🇷 85.217.140.16

🇺🇸 66.132.172.46

🇮🇳 65.2.189.114

🇨🇳 61.144.101.118

🇲🇾 49.124.159.188

🇳🇱 45.148.10.62