JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 96.9.66.141

96.9.66.141 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 0%: ?

ISP	SINET, Dedicated Fiber, Dedicated Speed, Dedicated Support, Dedicated Always.
Usage Type	Fixed Line ISP
ASN	AS131207
Hostname(s)	141.66.9.96.sinet.com.kh
Domain Name	sinet.com.kh
Country	🇰🇭 Cambodia
City	Phnom Penh, Phnom Penh

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 96.9.66.141

Whois 96.9.66.141

IP Abuse Reports for 96.9.66.141:

This IP address has been reported a total of 19 times from 12 distinct sources. 96.9.66.141 was first reported on February 10th 2021, and the most recent report was 2 years ago.

Old Reports: The most recent abuse report for this IP address is from 2 years ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2023-11-29 19:12:32 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 96.9.66.141 (141.66.9.96.sinet.com.kh): 1 in th ... show more (mod_security) mod_security (id:210730) triggered by 96.9.66.141 (141.66.9.96.sinet.com.kh): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 29 14:12:24.663290 2023] [security2:error] [pid 20413] [client 96.9.66.141:34277] [client 96.9.66.141] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|abecasis.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "abecasis.com"] [uri "/wp-content/mysql.sql"] [unique_id "ZWeNGCD7fma6kKzsCbdkaQAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇲🇾 syokadmin	2023-04-08 22:14:29 (3 years ago)	96.9.66.141 (KH/Cambodia/141.66.9.96.sinet.com.kh), 2 distributed smtpauth attacks on account [flyro ... show more 96.9.66.141 (KH/Cambodia/141.66.9.96.sinet.com.kh), 2 distributed smtpauth attacks on account [[email protected]] in the last 3600 secs show less	Brute-Force
🇲🇾 syokadmin	2023-02-07 19:25:38 (3 years ago)	96.9.66.141 (KH/Cambodia/141.66.9.96.sinet.com.kh), 2 distributed smtpauth attacks on account [admin ... show more 96.9.66.141 (KH/Cambodia/141.66.9.96.sinet.com.kh), 2 distributed smtpauth attacks on account [[email protected]] in the last 3600 secs show less	Brute-Force
🇲🇾 syokadmin	2022-12-22 23:49:21 (3 years ago)	96.9.66.141 (KH/Cambodia/141.66.9.96.sinet.com.kh), 2 distributed smtpauth attacks on account [info@ ... show more 96.9.66.141 (KH/Cambodia/141.66.9.96.sinet.com.kh), 2 distributed smtpauth attacks on account [[email protected]] in the last 3600 secs show less	Brute-Force
🇲🇾 syokadmin	2022-12-21 03:57:21 (3 years ago)	96.9.66.141 (KH/Cambodia/141.66.9.96.sinet.com.kh), 2 distributed smtpauth attacks on account [admin ... show more 96.9.66.141 (KH/Cambodia/141.66.9.96.sinet.com.kh), 2 distributed smtpauth attacks on account [[email protected]] in the last 3600 secs show less	Brute-Force
🇩🇪 Bernhard Fürst	2022-11-30 03:17:51 (3 years ago)	Cluster member 144.76.246.124 (DE/Germany/mx03.fuerstnet.de) said, TEMPDENY 96.9.66.141, Reason:[96. ... show more Cluster member 144.76.246.124 (DE/Germany/mx03.fuerstnet.de) said, TEMPDENY 96.9.66.141, Reason:[96.9.66.141 (KH/Cambodia/141.66.9.96.sinet.com.kh), 5 distributed imapd attacks on account [[email protected]] in the last 3600 secs]; Ports: *; Direction: inout; Trigger: LF_CLUSTER; Logs: show less	Port Scan
🇲🇾 syokadmin	2022-11-05 19:37:15 (3 years ago)	96.9.66.141 (KH/Cambodia/141.66.9.96.sinet.com.kh), 2 distributed smtpauth attacks on account [amali ... show more 96.9.66.141 (KH/Cambodia/141.66.9.96.sinet.com.kh), 2 distributed smtpauth attacks on account [[email protected]] in the last 3600 secs show less	Brute-Force
🇿🇦 Birdflew	2022-10-08 15:42:09 (3 years ago)	Port scanning	Hacking
🇿🇦 IrisFlower	2022-07-23 01:12:45 (3 years ago)	Unauthorized connection attempt detected from IP address 96.9.66.141 to port 8080 [J]	Port Scan Hacking
🇩🇪 linuxman1	2022-05-02 06:43:33 (4 years ago)	(smtpauth) Failed SMTP AUTH login from 96.9.66.141 (KH/Cambodia/141.66.9.96.sinet.com.kh): 5 in the ... show more (smtpauth) Failed SMTP AUTH login from 96.9.66.141 (KH/Cambodia/141.66.9.96.sinet.com.kh): 5 in the last 3600 secs; Ports: 25,465,587; Direction: in; Trigger: LF_SMTPAUTH; Logs: May 2 17:13:10 hostingremote postfix/smtpd[229204]: warning: unknown[96.9.66.141]: SASL CRAM-MD5 authentication failed: authentication failure May 2 17:13:15 hostingremote postfix/smtpd[234401]: warning: unknown[96.9.66.141]: SASL CRAM-MD5 authentication failed: authentication failure May 2 17:13:19 hostingremote postfix/smtpd[229204]: warning: unknown[96.9.66.141]: SASL CRAM-MD5 authentication failed: authentication failure May 2 17:13:26 hostingremote postfix/smtpd[234401]: warning: unknown[96.9.66.141]: SASL CRAM-MD5 authentication failed: authentication failure May 2 17:13:32 hostingremote postfix/smtpd[234401]: warning: unknown[96.9.66.141]: SASL CRAM-MD5 authentication failed: authentication failure show less	Port Scan
🇵🇱 Grzegorz	2022-01-13 09:27:13 (4 years ago)	Jan 13 15:27:09 master sshd[330579]: Invalid user admin from 96.9.66.141 port 54292 Jan 13 15:27:12 ... show more Jan 13 15:27:09 master sshd[330579]: Invalid user admin from 96.9.66.141 port 54292 Jan 13 15:27:12 master sshd[330579]: error: Received disconnect from 96.9.66.141 port 54292:3: com.jcraft.jsch.JSchException: Auth fail [preauth] ... show less	Brute-Force
Anonymous	2022-01-12 19:38:27 (4 years ago)	2022-01-13T02:38:22.598727ollin.zadara.org sshd[481020]: pam_unix(sshd:auth): authentication failure ... show more 2022-01-13T02:38:22.598727ollin.zadara.org sshd[481020]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=96.9.66.141 2022-01-13T02:38:24.170570ollin.zadara.org sshd[481020]: Failed password for invalid user admin from 96.9.66.141 port 38315 ssh2 ... show less	Brute-Force SSH
🇧🇾 JailSeed	2021-12-31 06:04:26 (4 years ago)	SSH brute-force attempt	FTP Brute-Force Hacking Brute-Force SSH
🇲🇾 syokadmin	2021-12-10 07:45:53 (4 years ago)	96.9.66.141 (KH/Cambodia/141.66.9.96.sinet.com.kh), 3 distributed smtpauth attacks on account [odygo ... show more 96.9.66.141 (KH/Cambodia/141.66.9.96.sinet.com.kh), 3 distributed smtpauth attacks on account [[email protected]] in the last 3600 secs show less	Brute-Force
🇵🇱 Grzegorz	2021-09-26 05:47:10 (4 years ago)	Sep 26 11:47:09 master sshd[125709]: Invalid user admin from 96.9.66.141 port 41560 Sep 26 11:47:10 ... show more Sep 26 11:47:09 master sshd[125709]: Invalid user admin from 96.9.66.141 port 41560 Sep 26 11:47:10 master sshd[125709]: error: Received disconnect from 96.9.66.141 port 41560:3: com.jcraft.jsch.JSchException: Auth fail [preauth] ... show less	Brute-Force

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 218.200.9.182

🇰🇷 211.253.31.30

🇨🇦 192.95.10.202

🇮🇩 103.178.175.117

🇫🇷 92.205.26.151

🇺🇸 57.141.18.57

🇺🇸 2602:80d:1008::70

🇮🇳 223.225.102.227

🇯🇲 216.10.217.5

🇨🇭 209.99.191.19

🇺🇸 195.184.76.186

🇵🇱 176.53.159.198

🇮🇩 103.63.24.142

🇫🇷 85.217.140.32

🇨🇦 74.125.16.244

🇺🇸 66.132.186.186

🇮🇳 64.227.142.13

🇫🇷 62.210.142.164

🇺🇸 13.89.125.30

🇫🇷 2001:41d0:33a:a00::401