JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 157.66.67.132

157.66.67.132 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 55%: ?

55%

ISP	PT Buraq Telekomunikasi Indonesia
Usage Type	Fixed Line ISP
ASN	AS152781
Domain Name	buraqtelin.id
Country	🇮🇩 Indonesia
City	Makassar, South Sulawesi

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 157.66.67.132

Whois 157.66.67.132

IP Abuse Reports for 157.66.67.132:

This IP address has been reported a total of 13 times from 9 distinct sources. 157.66.67.132 was first reported on July 8th 2026, and the most recent report was 13 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 COMPLEX	2026-07-28 19:40:34 (13 hours ago)	Banned by Multi Agent · node …jrh1 · reason=SSH banner invalid / banner exchange invalid format · at ... show more Banned by Multi Agent · node …jrh1 · reason=SSH banner invalid / banner exchange invalid format · attempts=1 · SSH banner invalid / banner exchange invalid format show less	Brute-Force SSH
🇩🇪 XICTRON	2026-07-28 18:50:20 (14 hours ago)	WordPress attack attempt detected by Fail2Ban	Web App Attack
🇺🇸 kosada.com	2026-07-28 12:49:44 (20 hours ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
Anonymous	2026-07-28 08:40:34 (1 day ago)	\| [Normal/Unknown] Aggressive IP 157.66.67.132 (~350 hits). Type: DoS Defender- Web server 400 error ... show more \| [Normal/Unknown] Aggressive IP 157.66.67.132 (~350 hits). Type: DoS Defender- Web server 400 error code show less	Web App Attack Hacking SQL Injection
🇩🇪 anycast_ac	2026-07-28 00:57:04 (1 day ago)	[DDoS Attacker] This IP was attacking website anycast.ac and sent 352 requests on port 443	DDoS Attack Web App Attack
🇩🇪 John Chrys.	2026-07-24 07:22:48 (5 days ago)	157.66.67.132 - - [24/Jul/2026:10:22:39 +0300] "POST /wp-comments-post.php HTTP/1.1" 403 6644 "-" "M ... show more 157.66.67.132 - - [24/Jul/2026:10:22:39 +0300] "POST /wp-comments-post.php HTTP/1.1" 403 6644 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.66.67.132 - - [24/Jul/2026:10:22:40 +0300] "POST /wp-comments-post.php HTTP/1.1" 403 6644 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.66.67.132 - - [24/Jul/2026:10:22:42 +0300] "POST /wp-comments-post.php HTTP/1.1" 403 6644 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.66.67.132 - - [24/Jul/2026:10:22:43 +0300] "POST /wp-comments-post.php HTTP/1.1" 403 6644 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 157.66.67.132 - - [24/Jul/2026:10:22:45 +0300] "POST /wp-comments-post.php HTTP/1.1" 403 6644 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit ... show less	Brute-Force Web App Attack
🇸🇬 pusathosting.com	2026-07-23 23:20:05 (5 days ago)	24ds22 bruteforce	Brute-Force Web App Attack
🇺🇸 kosada.com	2026-07-18 06:26:55 (1 week ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇮🇩 sockominfo	2026-07-17 12:00:53 (1 week ago)	Zimbra: Login failures from malicious IP: 157.66.67.132. Threat Score: 6.2/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 157.66.67.132. Threat Score: 6.2/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-07-17 11:00:53 (1 week ago)	Zimbra: Login failures from malicious IP: 157.66.67.132. Threat Score: 6.3/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 157.66.67.132. Threat Score: 6.3/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-07-17 10:00:09 (1 week ago)	Zimbra: Login failures from malicious IP: 157.66.67.132. Threat Score: 5.5/10 (MEDIUM). Reported by ... show more Zimbra: Login failures from malicious IP: 157.66.67.132. Threat Score: 5.5/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇫🇷 Tilellit.PRO	2026-07-16 05:43:50 (1 week ago)	WooCommerce YITH AJAX Filder product_cat filter flood attempt with taxonomies	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-07-08 22:16:35 (2 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2604:a880:400:d1:0:4:c244:1001

🇺🇿 213.230.86.54

🇦🇹 195.54.172.22

🇺🇸 172.232.27.232

🇨🇳 121.29.85.17

🇫🇷 85.217.140.2

🇬🇧 81.19.219.212

🇺🇸 71.6.158.166

🇩🇪 69.5.169.46

🇺🇸 66.132.172.226

🇲🇾 49.124.152.220

🇭🇰 47.242.37.198

🇨🇦 46.203.190.175

🇳🇱 45.148.10.239

🇰🇪 41.89.128.6

🇩🇪 213.209.159.225

🇬🇧 193.176.29.7

🇩🇪 188.172.224.48

🇷🇺 185.247.16.46

🇵🇾 181.91.84.114