JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 128.199.103.219

128.199.103.219 was found in our database!

This IP was reported 53 times. Confidence of Abuse is 0%: ?

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 128.199.103.219

Whois 128.199.103.219

IP Abuse Reports for 128.199.103.219:

This IP address has been reported a total of 53 times from 45 distinct sources. 128.199.103.219 was first reported on February 15th 2023, and the most recent report was 11 months ago.

Old Reports: The most recent abuse report for this IP address is from 11 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2025-07-29 13:26:31 (11 months ago)	Blocked by cpGuard/ModSecurity WAF	Web App Attack
Anonymous	2025-07-26 00:09:49 (11 months ago)	Aggressive web scan	SQL Injection Bad Web Bot Web App Attack
🇩🇪 barbarella	2025-07-25 15:47:22 (11 months ago)	Multiple (7) times attack on https port 443: unsolicited access to Administrative pages (GET /form.h ... show more Multiple (7) times attack on https port 443: unsolicited access to Administrative pages (GET /form.html) 15:47:23 Hacking attempt of vulnerable PHP Script (GET /upl.php) 15:47:23 unsolicited access to nonexisting pages (GET /t4) 15:47:24 searching Geoip Security Vulnerabilities (GET /geoip/) 15:47:26 hacking attempt (GET /1.php) 15:47:26 SystemBC Malware Activity (GET /systembc/password.php) 15:47:27 unsolicited access to Administrative pages (GET /password.php) show less	Hacking Web App Attack
🇪🇸 Frindestown	2025-07-25 14:47:57 (1 year ago)	[Fri Jul 25 16:47:55.382335 2025] [php7:error] [pid 3257725:tid 3257725] [client 128.199.103.219:578 ... show more [Fri Jul 25 16:47:55.382335 2025] [php7:error] [pid 3257725:tid 3257725] [client 128.199.103.219:57818] script '/var/www/chafalibre.myddns.rocks/html/index.php' not found or unable to stat [Fri Jul 25 16:47:55.764483 2025] [php7:error] [pid 3219699:tid 3219699] [client 128.199.103.219:57824] script '/var/www/chafalibre.myddns.rocks/html/upl.php' not found or unable to stat [Fri Jul 25 16:47:55.766138 2025] [php7:error] [pid 3219699:tid 3219699] [client 128.199.103.219:57824] script '/var/www/chafalibre.myddns.rocks/html/index.php' not found or unable to stat [Fri Jul 25 16:47:56.149872 2025] [php7:error] [pid 3219322:tid 3219322] [client 128.199.103.219:57836] script '/var/www/chafalibre.myddns.rocks/html/index.php' not found or unable to stat [Fri Jul 25 16:47:56.534818 2025] [php7:error] [pid 3257185:tid 3257185] [client 128.199.103.219:57848] script '/var/www/chafalibre.myddns.rocks/html/index.php' not found or unable to stat ... show less	Brute-Force
🇮🇪 Jim Keir	2025-07-25 13:12:30 (1 year ago)	2025-07-25 13:12:30 128.199.103.219 File scanning, blocking 128.199.103.219 for 5 minutes	Web App Attack
🇸🇬 simpeg-adm.bandung.go.id	2025-07-25 11:48:12 (1 year ago)	128.199.103.219 - - [25/Jul/2025:11:48:11 +0000] "GET /upl.php HTTP/1.1" 404 133 "-" "Mozilla/5.0" 1 ... show more 128.199.103.219 - - [25/Jul/2025:11:48:11 +0000] "GET /upl.php HTTP/1.1" 404 133 "-" "Mozilla/5.0" 128.199.103.219 - - [25/Jul/2025:11:48:11 +0000] "GET /t4 HTTP/1.1" 404 133 "-" "Mozilla/5.0" 128.199.103.219 - - [25/Jul/2025:11:48:11 +0000] "GET /geoip/ HTTP/1.1" 404 194 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 128.199.103.219 - - [25/Jul/2025:11:48:12 +0000] "GET /favicon.ico HTTP/1.1" 404 194 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 128.199.103.219 - - [25/Jul/2025:11:48:12 +0000] "GET /1.php HTTP/1.1" 404 194 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 128.199.103.219 - - [25/Jul/2025:11:48:12 +0000] "GET /systembc/password.php HTTP/1.1" 404 194 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537. ... show less	Web Spam Brute-Force Web App Attack
🇫🇷 masterguru	2025-07-25 11:08:20 (1 year ago)	Host header is a numeric IP address. Pattern match "^ (920350-133)	Hacking Bad Web Bot
🇺🇸 juguemosalacarioca.com	2025-07-25 09:11:01 (1 year ago)	Multiple HTTP calls attempting to GET resources using common API calls or formats on port 8080	Web App Attack
🇺🇸 kosada.com	2025-07-25 08:49:54 (1 year ago)	Web vulnerability probing	Web App Attack
🇸🇪 Anonymous	2025-07-25 07:19:19 (1 year ago)	Drop from IP address 128.199.103.219 to tcp-port 80	Port Scan
🇳🇱 Study Bitcoin 🤗	2025-07-25 07:14:28 (1 year ago)	Port probe to tcp/80 (http) [srv129]	Port Scan Bad Web Bot Web App Attack
🇳🇱 StopAbuse	2025-07-25 07:03:05 (1 year ago)	tcp/80	Port Scan
🇩🇪 getdk	2025-07-25 06:40:40 (1 year ago)	[Fri Jul 25 06:40:38.155116 2025] [security2:error] [pid 2296] [client 128.199.103.219:36810] [clien ... show more [Fri Jul 25 06:40:38.155116 2025] [security2:error] [pid 2296] [client 128.199.103.219:36810] [client 128.199.103.219] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "a ... show less	Brute-Force Bad Web Bot Web App Attack
🇸🇪 www.remote24.se	2025-07-25 04:10:10 (1 year ago)	3389BruteforceStormFW21	Brute-Force
🇦🇺 2000cn.com.au	2025-07-25 03:50:26 (1 year ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-bad-user-agent	Bad Web Bot Web App Attack

Showing 1 to 15 of 53 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 213.166.84.41

🇭🇰 199.45.154.191

🇭🇰 199.45.154.185

🇭🇰 199.45.154.180

🇫🇷 192.145.37.35

🇺🇸 165.154.163.36

🇺🇸 154.83.197.7

🇭🇰 118.193.36.63

🇻🇳 116.99.172.197

🇺🇦 46.150.79.86

🇬🇧 193.32.209.245

🇬🇧 192.248.150.180

🇬🇧 185.216.145.181

🇳🇱 185.136.15.77

🇨🇳 183.230.155.13

🇷🇺 176.215.199.70

🇵🇰 175.107.36.73

🇪🇸 158.158.16.147

🇮🇩 157.20.144.241

🇺🇸 138.68.237.222