AbuseIPDB » 116.197.134.187

116.197.134.187 was found in our database!

This IP was reported 81 times. Confidence of Abuse is 64%: ?

64%

ISP	PT. Fiber Networks Indonesia
Usage Type	Fixed Line ISP
Hostname(s)	187-134rsud-koja.fiber.net.id
Domain Name	fiber.net.id
Country	Indonesia
City	Bekasi, Jawa Barat

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 116.197.134.187

Whois 116.197.134.187

IP Abuse Reports for 116.197.134.187:

This IP address has been reported a total of 81 times from 47 distinct sources. 116.197.134.187 was first reported on March 3rd 2021, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Bytemark	2024-08-13 04:08:53 (4 weeks ago)	Aug 13 05:08:53 lnx1 postfix/smtps/smtpd[2317831]: warning: 187-134rsud-koja.fiber.net.id[116.197.13 ... show moreAug 13 05:08:53 lnx1 postfix/smtps/smtpd[2317831]: warning: 187-134rsud-koja.fiber.net.id[116.197.134.187]: SASL PLAIN authentication failed: (reason unavailable), [email protected] show less	Email Spam Spoofing Exploited Host
DumaNet	2024-08-13 00:18:00 (4 weeks ago)	Multiple SASL authentication failures. Date: 2024 Aug 12. 13:49:40 -- Source IP: 116.197.134. ... show moreMultiple SASL authentication failures. Date: 2024 Aug 12. 13:49:40 -- Source IP: 116.197.134.187 Portion of the log(s): Aug 12 13:49:39 michael postfix/smtpd[1046317]: warning: 187-134rsud-koja.fiber.net.id[116.197.134.187]: SASL PLAIN authentication failed Aug 12 13:49:39 michael postfix/smtpd[1046317]: warning: 187-134rsud-koja.fiber.net.id[116.197.134.187]: SASL PLAIN authentication failed Aug 12 13:49:35 michael postfix/smtpd[1046317]: warning: 187-134rsud-koja.fiber.net.id[116.197.134.187]: SASL PLAIN authentication failed Aug 12 13:49:35 michael postfix/smtpd[1046317]: warning: 187-134rsud-koja.fiber.net.id[116.197.134.187]: SASL PLAIN authentication failed Aug 12 13:48:11 michael postfix/smtpd[1045798]: warning: 187-134rsud-koja.fiber.net.id[116.197.134.187]: SASL PLAIN authentication failed Aug 12 13:48:11 michael postfix/smtpd[1045798]: warning: 187-134rsud-koja.fiber.net.id[116.197.134.187]: SASL PLAIN authentication failed Aug 12 13:48:07 michael postfix/smtpd[1045798]: warning: 187-134 show less	Brute-Force
Anonymous	2024-08-12 23:46:44 (4 weeks ago)	wordpress-trap	Web App Attack
Anonymous	2024-08-12 00:55:26 (4 weeks ago)	BruteForce IMAP/POP3	Brute-Force
Abuse Reporting	2024-08-11 02:23:45 (1 month ago)	Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-login.php - User Agent: N ... show moreDetected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-login.php - User Agent: N/A - Timestamp: 8/11/2024 2:23 am (UTC-6) show less	Web Spam Hacking Bad Web Bot Web App Attack
Abuse Reporting	2024-08-11 01:57:00 (1 month ago)	Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-login.php - User Agent: N ... show moreDetected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-login.php - User Agent: N/A - Timestamp: 8/11/2024 1:56 am (UTC-6) show less	Web Spam Hacking Bad Web Bot Web App Attack
Abuse Reporting	2024-08-11 00:11:14 (1 month ago)	Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-login.php - User Agent: N ... show moreDetected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-login.php - User Agent: N/A - Timestamp: 8/11/2024 12:11 am (UTC-6) show less	Web Spam Hacking Bad Web Bot Web App Attack
Anonymous	2024-08-10 11:43:12 (1 month ago)	wordpress-trap	Web App Attack
votrewebfacile	2024-08-09 22:56:47 (1 month ago)	brute force on admin	Web App Attack
Anonymous	2024-08-09 15:31:22 (1 month ago)	wordpress-trap	Web App Attack
Anonymous	2024-08-09 10:27:44 (1 month ago)		Brute-Force
Anonymous	2024-08-09 06:05:13 (1 month ago)	wordpress-trap	Web App Attack
paulshipley.com.au	2024-08-02 16:25:28 (1 month ago)	winesbydesign.com.au:443 116.197.134.187 - - [03/Aug/2024:02:25:11 +1000] "GET /phpmyadmin/ HTTP/1.1 ... show morewinesbydesign.com.au:443 116.197.134.187 - - [03/Aug/2024:02:25:11 +1000] "GET /phpmyadmin/ HTTP/1.1" 403 3393 "-" "Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0" winesbydesign.com.au:443 116.197.134.187 - - [03/Aug/2024:02:25:11 +1000] "GET /phpmyadmin/ HTTP/1.1" 403 3392 "-" "Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0" winesbydesign.com.au:443 116.197.134.187 - - [03/Aug/2024:02:25:11 +1000] "GET /administrator/ HTTP/1.1" 404 119665 "-" "Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0" winesbydesign.com.au:443 116.197.134.187 - - [03/Aug/2024:02:25:12 +1000] "GET /phpMyAdmin/ HTTP/1.1" 404 119663 "-" "Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0" winesbydesign.com.au:443 116.197.134.187 - - [03/Aug/2024:02:25:16 +1000] "GET /PhpMyAdmin/ HTTP/1.1" 404 119664 "-" "Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0" winesbydesign.com.au:443 116.197.134.187 - - [03/Aug/2024:02:25:17 +1000] "G ... show less	Web App Attack
Anonymous	2024-07-29 05:12:33 (1 month ago)		Brute-Force
syokadmin	2024-07-23 14:15:04 (1 month ago)	(imapd) Failed IMAP login from 116.197.134.187 (ID/Indonesia/187-134rsud-koja.fiber.net.id): 2 in th ... show more(imapd) Failed IMAP login from 116.197.134.187 (ID/Indonesia/187-134rsud-koja.fiber.net.id): 2 in the last 3600 secs show less	Brute-Force