JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 116.90.234.245

116.90.234.245 was found in our database!

This IP was reported 86 times. Confidence of Abuse is 100%: ?

100%

ISP	Internet Service Provider
Usage Type	Fixed Line ISP
ASN	AS24550
Hostname(s)	email.erasoft.com.np
Domain Name	websurfer.com.np
Country	🇳🇵 Nepal
City	Kathmandu, Bagmati Province

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 116.90.234.245

Whois 116.90.234.245

IP Abuse Reports for 116.90.234.245:

This IP address has been reported a total of 86 times from 63 distinct sources. 116.90.234.245 was first reported on June 26th 2026, and the most recent report was 15 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇲🇾 Rizzy	2026-07-25 17:02:10 (15 minutes ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇩🇪 ger-stg-sifi1	2026-07-25 16:59:01 (18 minutes ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
Anonymous	2026-07-25 16:46:09 (31 minutes ago)	(caddyscan) Scanner path probe from 116.90.234.245 (NP/Nepal/email.erasoft.com.np): 5 in the last 36 ... show more (caddyscan) Scanner path probe from 116.90.234.245 (NP/Nepal/email.erasoft.com.np): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 116.90.234.245 - - [25/Jul/2026:16:46:00 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 116.90.234.245 - - [25/Jul/2026:16:46:02 +0000] "GET /env/.env HTTP/1.1" [REDACTED] 200 2627 116.90.234.245 - - [25/Jul/2026:16:46:03 +0000] "GET /app/.env HTTP/1.1" [REDACTED] 200 2627 116.90.234.245 - - [25/Jul/2026:16:46:04 +0000] "GET /api/.env HTTP/1.1" [REDACTED] 200 2627 116.90.234.245 - - [25/Jul/2026:16:46:05 +0000] "GET /.env HTTP/1.1" show less	Port Scan
🇺🇸 Matthew Ping	2026-07-25 16:45:02 (32 minutes ago)	ModSecurity rule 949110 triggered on dedicated4785. Web application attack blocked by CSF/LFD.	Web App Attack Hacking
🇨🇭 4server	2026-07-25 16:41:37 (35 minutes ago)	[SatJul2518:41:29.9821412026][security2:error][pid413138:tid413475][client116.90.234.245:0]ModSecuri ... show more [SatJul2518:41:29.9821412026][security2:error][pid413138:tid413475][client116.90.234.245:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".env\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"365\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"aid-web.com\"][uri\"/.env\"][unique_id\"amTnOe3r5FW9SRTjdxboDwAAARY\"] show less	Hacking Web App Attack
🇺🇸 PKThai	2026-07-25 16:07:25 (1 hour ago)	Attempted brute-force SASL access to mail server - Repeat offender 116.90.234.245 banned at least 6 ... show more Attempted brute-force SASL access to mail server - Repeat offender 116.90.234.245 banned at least 6 times in the last 7 days show less	Port Scan Hacking Brute-Force
Anonymous	2026-07-25 14:56:09 (2 hours ago)	2026-07-25T16:37:21.264009+02:00 host dovecot: imap-login: Disconnected: Connection closed (auth fai ... show more 2026-07-25T16:37:21.264009+02:00 host dovecot: imap-login: Disconnected: Connection closed (auth failed, 1 attempts in 5 secs): user=<[email protected]>, method=PLAIN, rip=116.90.234.245, lip=172.104.246.203, TLS, session=<IxAAbXBXMrh0Wur1> 2026-07-25T16:56:09.321832+02:00 host dovecot: imap-login: Disconnected: Connection closed (auth failed, 1 attempts in 4 secs): user=<[email protected]>, method=PLAIN, rip=116.90.234.245, lip=172.104.246.203, TLS, session=<35dEsHBX3sB0Wur1> ... show less	Brute-Force
🇹🇷 baku.hosting	2026-07-25 14:16:52 (3 hours ago)	CSF Auto Report: (pop3d) Failed POP3 login from 116.90.234.245 (NP/Nepal/email.erasoft.com.np): 4 in ... show more CSF Auto Report: (pop3d) Failed POP3 login from 116.90.234.245 (NP/Nepal/email.erasoft.com.np): 4 in the last 3600 secs show less	Brute-Force Web App Attack
🇺🇸 PKThai	2026-07-25 13:55:41 (3 hours ago)	Attempted brute-force SASL access to mail server - Repeat offender 116.90.234.245 banned at least 5 ... show more Attempted brute-force SASL access to mail server - Repeat offender 116.90.234.245 banned at least 5 times in the last 7 days show less	Port Scan Hacking Brute-Force
🇩🇪 onlyops.app	2026-07-25 13:00:04 (4 hours ago)	Repeated failed login attempts against Dovecot (IMAP/POP3) \| detected by Fail2Ban (plesk-dovecot jai ... show more Repeated failed login attempts against Dovecot (IMAP/POP3) \| detected by Fail2Ban (plesk-dovecot jail) \| onlyops.app show less	Web Spam
🇺🇸 PKThai	2026-07-25 12:40:52 (4 hours ago)	Attempted brute-force SASL access to mail server - Repeat offender 116.90.234.245 banned at least 4 ... show more Attempted brute-force SASL access to mail server - Repeat offender 116.90.234.245 banned at least 4 times in the last 7 days show less	Port Scan Hacking Brute-Force
🇫🇷 vhnmn	2026-07-25 12:35:10 (4 hours ago)	spam/brute force attack blocked attempt from fail2ban ...	Email Spam Brute-Force
🇫🇷 David Buzinkai	2026-07-25 12:09:35 (5 hours ago)	Jul 25 11:32:37 server0 dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 0 secs): user= ... show more Jul 25 11:32:37 server0 dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 0 secs): user=<[email protected]>, rip=116.90.234.245, lip=173.249.37.114, session=<oUaj2G1XwMR0Wur1> Jul 25 11:51:05 server0 dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 0 secs): user=<[email protected]>, rip=116.90.234.245, lip=173.249.37.114, session=<HOmjGm5X6Mx0Wur1> Jul 25 12:09:35 server0 dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 0 secs): user=<[email protected]>, rip=116.90.234.245, lip=173.249.37.114, session=<DYDNXG5XDth0Wur1> ... show less	Brute-Force
Anonymous	2026-07-25 12:07:55 (5 hours ago)	dovecot	Brute-Force Web App Attack
Anonymous	2026-07-25 12:07:51 (5 hours ago)	2026-07-25T13:30:52.452526+02:00 host dovecot: imap-login: Disconnected: Connection closed (auth fai ... show more 2026-07-25T13:30:52.452526+02:00 host dovecot: imap-login: Disconnected: Connection closed (auth failed, 1 attempts in 4 secs): user=<[email protected]>, method=PLAIN, rip=116.90.234.245, lip=172.104.246.203, TLS, session=<NlQh0m1XpK90Wur1> 2026-07-25T13:49:20.225405+02:00 host dovecot: imap-login: Disconnected: Connection closed (auth failed, 1 attempts in 4 secs): user=<[email protected]>, method=PLAIN, rip=116.90.234.245, lip=172.104.246.203, TLS, session=<rRYkFG5XUrd0Wur1> 2026-07-25T14:07:50.196331+02:00 host dovecot: imap-login: Disconnected: Connection closed (auth failed, 1 attempts in 4 secs): user=<[email protected]>, method=PLAIN, rip=116.90.234.245, lip=172.104.246.203, TLS, session=<lv9LVm5XesF0Wur1> ... show less	Brute-Force

Showing 1 to 15 of 86 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 204.44.67.238

🇩🇪 195.230.103.249

🇧🇷 179.224.19.201

🇷🇺 178.178.222.57

🇳🇬 165.154.11.210

🇷🇺 89.109.45.17

🇵🇱 176.53.159.198

🇳🇿 172.204.17.66

🇧🇷 170.233.131.83

🇬🇧 157.245.38.70

🇮🇳 152.58.118.84

🇭🇰 152.32.189.121

🇺🇦 146.120.100.17

🇵🇱 109.205.211.229

🇵🇱 74.248.96.101

🇺🇸 66.132.172.138

🇸🇬 47.128.20.95

🇰🇷 47.80.13.176

🇺🇸 34.125.61.57

🇺🇸 177.234.139.38