JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

203.201.164.142

Neutral Activity

Abuse confidence score ?

0% Low Risk

1,231 reports

197 reporters · latest 4 months ago

ISP	D~NET Jakarta
Usage Type	Fixed Line ISP
ASN	AS9794
Domain Name	dnet.net.id
Country	🇮🇩 Indonesia
City	Jakarta, Jakarta

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

203.201.164.142 has been reported 1,231 times. The most recent report is from 4 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 203.201.164.142

Export CSV

This IP address has been reported a total of 1,231 times from 197 distinct sources. 203.201.164.142 was first reported on March 3rd 2026, and the most recent report was 4 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 evicky2002	2026-05-29 06:52:29 (4 months ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
Anonymous	2026-05-20 06:47:02 (4 months ago)	Failed Wordpress Logins	Web App Attack
🇬🇧 thetomtaylor.co.uk	2026-05-05 10:09:16 (5 months ago)	Fail2Ban - [RECIDIVE]Repeat offender across multiple jails on recidive ... [ice01,ice02,mx01,mx03,wa ... show more Fail2Ban - [RECIDIVE]Repeat offender across multiple jails on recidive ... [ice01,ice02,mx01,mx03,wa01,wa02] show less	Brute-Force Bad Web Bot Exploited Host Web App Attack
🇨🇦 KIsmay	2026-04-18 08:12:05 (5 months ago)	Apr 17 23:53:05 www4 WPAudit[2606804]: 203.201.164.142 servicesfyi.ca "Mozilla/5.0 (compatible; MSIE ... show more Apr 17 23:53:05 www4 WPAudit[2606804]: 203.201.164.142 servicesfyi.ca "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/7.0)" ncs-admin:ncs-admin@2025 FAIL Apr 18 01:38:36 www4 WPAudit[2614086]: 203.201.164.142 www.trilloperelloyates.com "Mozilla/5.0 (Windows NT 6.3; Win64; x64; Trident/7.0; Touch; LCJB; rv:11.0) like Gecko" sbd-admin:sbd-admin123456789 FAIL Apr 18 02:38:51 www4 WPAudit[2618279]: 203.201.164.142 trilloperelloyates.com "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/603.1.30 (KHTML, like Gecko) Version/10.1 Safari/603.1.30" sbd-admin:sbd-admin92 FAIL Apr 18 03:53:12 www4 WPAudit[2622292]: 203.201.164.142 www.servicesfyi.ca "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36 OPR/52.0.2871.64" pathwise:pathwise123. FAIL Apr 18 04:12:05 www4 WPAudit[2626820]: 203.201.164.142 trilloperelloyates.com "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; AS; rv:11.0) like Gecko" trillo:t ... show less	Brute-Force Web App Attack
🇺🇸 Mundo Bueno	2026-04-18 01:34:58 (5 months ago)	[ISILIA Protection v2.1] Tentative d'accès: /xmlrpc.php \| Pays: ID \| UA: Mozilla/5.0 (Windows NT 10. ... show more [ISILIA Protection v2.1] Tentative d'accès: /xmlrpc.php \| Pays: ID \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.17 show less	Hacking Web App Attack
🇨🇦 KIsmay	2026-04-17 21:16:03 (5 months ago)	Apr 17 12:56:22 www4 WPAudit[2513361]: 203.201.164.142 valhallasafety.com "Mozilla/5.0 (Windows NT 6 ... show more Apr 17 12:56:22 www4 WPAudit[2513361]: 203.201.164.142 valhallasafety.com "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; NP08; rv:11.0) like Gecko" sbd-admin:sbd-admin@7 FAIL Apr 17 13:27:49 www4 WPAudit[2557884]: 203.201.164.142 trilloperelloyates.com "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; NISSC; rv:11.0) like Gecko" sbd-admin:sbd-admin@9 FAIL Apr 17 13:45:12 www4 WPAudit[2559252]: 203.201.164.142 cottonwoodc.ca "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.162 Safari/537.36" elyena:elyena2000 FAIL Apr 17 14:13:03 www4 WPAudit[2562415]: 203.201.164.142 katharinedickerson.com "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13) AppleWebKit/604.1.38 (KHTML, like Gecko) Version/11.0 Safari/604.1.38" sbd-admin:Sbd-admin$ FAIL Apr 17 17:16:02 www4 WPAudit[2578713]: 203.201.164.142 amandasrestaurant.ca "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.162 Safari/537.36" gina:gina26 FAIL ... show less	Brute-Force Web App Attack
🇵🇱 bmino.pl	2026-04-17 19:41:09 (5 months ago)	Autoban IP(2): unknown - Hostname: unknown - City: unknown - Region: unknown - Country: unknown - Lo ... show more Autoban IP(2): unknown - Hostname: unknown - City: unknown - Region: unknown - Country: unknown - Location: unknown - Organization: unknown - failed attempts. show less	Web App Attack
🇩🇪 london2038.com	2026-04-17 17:49:09 (5 months ago)	Attacking WordPress 203.201.164.142 - - [17/Apr/2026:19:49:06 +0200] "POST /wp-login.php HTTP/2.0" 5 ... show more Attacking WordPress 203.201.164.142 - - [17/Apr/2026:19:49:06 +0200] "POST /wp-login.php HTTP/2.0" 503 19291 "https://<REDACTED>/wp-login.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)" show less	Brute-Force Web App Attack
🇫🇮 KnightIndustries	2026-04-17 16:58:43 (5 months ago)	2026-04-17T17:55:49.435357+02:00 milkyway wordpress(learncryptography.pw)[142322]: XML-RPC authentic ... show more 2026-04-17T17:55:49.435357+02:00 milkyway wordpress(learncryptography.pw)[142322]: XML-RPC authentication failure for mystic from 203.201.164.142 2026-04-17T18:37:58.654304+02:00 milkyway wordpress(learncryptography.pw)[161982]: Authentication attempt for unknown user MysticKnightUK from 203.201.164.142 2026-04-17T18:58:42.556607+02:00 milkyway wordpress(learncryptography.pw)[169598]: Authentication attempt for unknown user thespacebutt from 203.201.164.142 ... show less	Brute-Force Web App Attack
Anonymous	2026-04-17 16:50:08 (5 months ago)	[Fri Apr 17 18:50:07.293706 2026] [authz_core:error] [pid 14675:tid 14720] [client 203.201.164.142:4 ... show more [Fri Apr 17 18:50:07.293706 2026] [authz_core:error] [pid 14675:tid 14720] [client 203.201.164.142:48800] AH01630: client denied by server configuration: /var/www/cimt-precision/wp-login.php ... show less	Brute-Force Web App Attack
🇩🇪 dbmwebdesign	2026-04-17 13:00:20 (5 months ago)	WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail	Brute-Force Web App Attack
🇫🇷 Kimax	2026-04-17 12:24:35 (5 months ago)	RdpGuard detected brute-force attempt on HTTP	Brute-Force
🇫🇮 KnightIndustries	2026-04-17 12:09:33 (5 months ago)	2026-04-17T13:13:39.407097+02:00 milkyway wordpress(learncryptography.pw)[142322]: XML-RPC authentic ... show more 2026-04-17T13:13:39.407097+02:00 milkyway wordpress(learncryptography.pw)[142322]: XML-RPC authentication failure for mystic from 203.201.164.142 2026-04-17T13:59:09.296362+02:00 milkyway wordpress(oldscarborough.com)[148282]: Authentication failure for joshua from 203.201.164.142 2026-04-17T14:09:33.648230+02:00 milkyway wordpress(learncryptography.pw)[148282]: XML-RPC authentication failure for mystic from 203.201.164.142 ... show less	Brute-Force Web App Attack
🇩🇪 Marc	2026-04-17 11:25:08 (5 months ago)		Brute-Force
Anonymous	2026-04-17 11:03:20 (5 months ago)	203.201.164.142 - - [17/Apr/2026:12:51:56 +0200] "POST /xmlrpc.php HTTP/1.0" 200 575 "-" "Mozilla/5. ... show more 203.201.164.142 - - [17/Apr/2026:12:51:56 +0200] "POST /xmlrpc.php HTTP/1.0" 200 575 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; MASMJS; rv:11.0) like Gecko" 203.201.164.142 - - [17/Apr/2026:12:51:59 +0200] "POST /xmlrpc.php HTTP/1.1" 200 249 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; MASMJS; rv:11.0) like Gecko" 203.201.164.142 - - [17/Apr/2026:12:59:21 +0200] "POST /wp-login.php HTTP/1.1" 200 2122 "https://learningladderzm.com/wp-login.php" "Mozilla/5.0 (Windows NT 6.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063" 203.201.164.142 - - [17/Apr/2026:12:59:21 +0200] "POST /wp-login.php HTTP/1.0" 200 2648 "https://learningladderzm.com/wp-login.php" "Mozilla/5.0 (Windows NT 6.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063" 203.201.164.142 - - [17/Apr/2026:13:03:17 +0200] "POST /wp-login.php HTTP/1.0" 200 9910 "https://joycomfortlodge.com/wp-login.php" "Mozi ... show less	Brute-Force Web App Attack

Showing 1 to 15 of 1231 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 198.235.24.43

🇨🇴 181.129.55.42

🇧🇷 177.136.32.85

🇺🇸 165.227.15.209

🇩🇪 165.154.138.3

🇫🇷 141.101.97.96

🇻🇳 112.197.232.74

🇳🇱 91.92.243.171

🇺🇸 45.79.153.51

🇺🇸 162.216.149.238

🇺🇸 159.223.135.12

🇭🇰 152.32.252.94

🇫🇷 141.94.3.82

🇦🇿 94.20.61.198

🇷🇺 85.95.166.40

🇧🇪 34.79.12.228

🇺🇸 20.127.235.45

🇧🇦 195.222.57.190

🇩🇪 139.19.117.129

🇺🇸 136.108.128.7