JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 116.212.132.96

116.212.132.96 was found in our database!

This IP was reported 36 times. Confidence of Abuse is 0%: ?

ISP	MekongNet, Internet Service Provider (ISP), Internet Exchange Provider (IXP) and Internet Data Exchange Center (IDX)
Usage Type	Fixed Line ISP
ASN	AS38235
Domain Name	mekongnet.com.kh
Country	🇰🇭 Cambodia
City	Phnom Penh, Phnom Penh

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 116.212.132.96

Whois 116.212.132.96

IP Abuse Reports for 116.212.132.96:

This IP address has been reported a total of 36 times from 15 distinct sources. 116.212.132.96 was first reported on May 24th 2022, and the most recent report was 2 years ago.

Old Reports: The most recent abuse report for this IP address is from 2 years ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2024-08-09 19:48:45 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 116.212.132.96 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 116.212.132.96 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 09 15:48:41.254356 2024] [security2:error] [pid 27061:tid 27061] [client 116.212.132.96:57587] [client 116.212.132.96] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.register-yacht-dubai.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.register-yacht-dubai.com"] [uri "/userName=QIeYUlDfOcXkdHP&companyName=DeMBWnLKs&[email protected]"] [unique_id "ZrZymfLZJSv4mKJwL-ibrwAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-07-16 08:36:03 (2 years ago)		Web Spam
🇩🇪 NxtGenIT	2024-06-10 16:27:03 (2 years ago)	116.212.132.96 has been observed attacking Port 1812. Observed Threat: RADIUS Login Brute Force Atte ... show more 116.212.132.96 has been observed attacking Port 1812. Observed Threat: RADIUS Login Brute Force Attempt show less	Brute-Force
🇩🇪 NxtGenIT	2024-05-31 18:28:31 (2 years ago)	116.212.132.96 has been observed attacking Port 1812. Observed Threat: RADIUS Login Brute Force Atte ... show more 116.212.132.96 has been observed attacking Port 1812. Observed Threat: RADIUS Login Brute Force Attempt show less	Brute-Force
🇦🇺 MAGIC	2024-05-29 17:02:04 (2 years ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
Anonymous	2024-05-28 06:37:02 (2 years ago)	VPN Logon Failed: AAA user authentication Rejected	Brute-Force
Anonymous	2024-05-27 00:42:59 (2 years ago)	Ports: *; Direction: 0; Trigger: LF_DISTSMTP	Brute-Force SSH
🇩🇪 NxtGenIT	2024-05-26 11:04:52 (2 years ago)	116.212.132.96 has been observed attacking Port 1812. Observed Threat: RADIUS Login Brute Force Atte ... show more 116.212.132.96 has been observed attacking Port 1812. Observed Threat: RADIUS Login Brute Force Attempt show less	Brute-Force
Anonymous	2024-05-24 01:03:22 (2 years ago)	Ports: 25,587,465; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇨🇿 lp	2024-04-29 22:57:00 (2 years ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 116.212.132.96 2024-04-29T22:06:41+02 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 116.212.132.96 2024-04-29T22:06:41+02:00 vpn Access-Reject '[email protected]' station: 116.212.132.96 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇲🇩 Deny_IP	2024-04-28 04:37:06 (2 years ago)	KH bad_bot	Web App Attack
🇨🇿 unhfree.net	2024-03-18 18:03:04 (2 years ago)	Mar 18 11:17:55 canopus postfix/smtpd[3169943]: NOQUEUE: reject: RCPT from unknown[116.212.132.96]: ... show more Mar 18 11:17:55 canopus postfix/smtpd[3169943]: NOQUEUE: reject: RCPT from unknown[116.212.132.96]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<localhost.> Mar 18 12:21:34 canopus postfix/smtpd[3212827]: NOQUEUE: reject: RCPT from unknown[116.212.132.96]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<localhost.> Mar 18 15:22:07 canopus postfix/smtpd[3259624]: NOQUEUE: reject: RCPT from unknown[116.212.132.96]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<localhost.> Mar 18 15:50:25 canopus postfix/smtpd[3267784]: NOQUEUE: reject: RCPT from unknown[116.212.132.96]: 554 5.7 ... show less	Brute-Force Exploited Host
🇲🇾 syokadmin	2023-03-25 22:30:55 (3 years ago)	(smtpauth) Failed SMTP AUTH login from 116.212.132.96 (KH/Cambodia/-): 2 in the last 3600 secs	Brute-Force
🇯🇵 stfw	2023-02-03 13:18:35 (3 years ago)	22/tcp 22/tcp 22/tcp... [2023-02-03]6pkt,1pt.(tcp)	Port Scan
🇲🇾 syokadmin	2022-12-30 17:47:08 (3 years ago)	116.212.132.96 (KH/Cambodia/-), 2 distributed smtpauth attacks on account [[email protected]] in ... show more 116.212.132.96 (KH/Cambodia/-), 2 distributed smtpauth attacks on account [[email protected]] in the last 3600 secs show less	Brute-Force

Showing 1 to 15 of 36 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2400:cb00:1273:1000:6915:b898:1cbc:9db1

🇿🇦 102.212.64.41

🇷🇺 94.243.10.240

🇺🇸 74.125.231.138

🇺🇸 72.28.247.77

🇺🇸 66.181.46.22

🇺🇸 66.132.172.234

🇬🇷 62.38.20.61

🇭🇰 45.207.209.16

🇫🇷 37.66.150.94

🇺🇸 35.169.206.177

🇺🇸 2.25.104.58

🇨🇳 221.195.114.14

🇩🇪 213.209.159.236

🇮🇩 210.87.97.90

🇪🇨 200.105.235.236

🇬🇧 185.247.137.220

🇺🇸 164.92.89.19

🇨🇦 144.217.243.186

🇰🇷 118.33.119.34