AbuseIPDB » 128.199.125.56

Check an IP Address, Domain Name, or Subnet

e.g. 3.235.25.27, microsoft.com, or 5.188.10.0/24

128.199.125.56 was found in our database!

This IP was reported 45 times. Confidence of Abuse is 0%: ?

ISP	DigitalOcean LLC
Usage Type	Data Center/Web Hosting/Transit
Hostname(s)	yubake.my
Domain Name	digitalocean.com
Country	Singapore
City	Singapore, Singapore

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 128.199.125.56

Whois 128.199.125.56

IP Abuse Reports for 128.199.125.56:

This IP address has been reported a total of 45 times from 22 distinct sources. 128.199.125.56 was first reported on June 14th 2021, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	Date	Comment	Categories
zeitschel.net	02 Oct 2022	2022-10-02 16:08:09 multiple 404 on /.env	Hacking Web App Attack
Ba-Yu	02 Oct 2022	General hacking/exploits/scanning	Web Spam Hacking Brute-Force Exploited Host Web App Attack
Hirte	01 Oct 2022	C1: Web Attack GET /admin/.env	Web Spam Hacking Bad Web Bot Web App Attack
ut-addicted.com	01 Oct 2022	\[Sat Oct 01 18:11:17.478074 2022\] \[:error\] \[pid 24092:tid 139988150777600\] \[client 128.199.12 ... show more\[Sat Oct 01 18:11:17.478074 2022\] \[:error\] \[pid 24092:tid 139988150777600\] \[client 128.199.125.56:58908\] \[client 128.199.125.56\] ModSecurity: Access denied with code 403 $phase 2$. Operator GE matched 5 at TX:anomaly_score. \[file "/usr/local/apache/modsecurity-owasp-latest/rules/REQUEST-949-BLOCKING-EVALUATION.conf"\] \[line "57"\] \[id "949110"\] \[msg "Inbound Anomaly Score Exceeded $Total Score: 8$"\] \[severity "CRITICAL"\] \[tag "application-multi"\] \[tag "language-multi"\] \[tag "platform-multi"\] \[tag "attack-generic"\] \[hostname "78.46.187.162"\] \[uri "/.env"\] \[unique_id "[email protected]"\] show less	Brute-Force Web App Attack
zeitschel.net	01 Oct 2022	2022-10-01 18:08:43 multiple 404 on /vendor/.env	Hacking Web App Attack
4server	01 Oct 2022	[SatOct0117:58:03.0855762022][:error][pid28956:tid47401578600192][client128.199.125.56:57510][client ... show more[SatOct0117:58:03.0855762022][:error][pid28956:tid47401578600192][client128.199.125.56:57510][client128.199.125.56]ModSecurity:Accessdeniedwithcode403$phase2$.Patternmatch\"$\?:\\\\\\\\b\(\?:\\\\\\\\.\(\?:ht\(\?:access\\|passwd\\|group$\\|www_\?acl\)\\|global\\\\\\\\.asa\\|httpd\\\\\\\\.conf\\|boot\\\\\\\\.ini\\|web.config\)\\\\\\\\b\\|$\\|\^\\|\\\\\\\\.\\\\\\\\.$/etc/\\|/\\\\\\\\.$\?:history\\|bash_history\\|sh_history\\|env$\$\)\"atREQUEST_FILENAME.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"189\"][id\"390709\"][rev\"30\"][msg\"Atomicorp.comWAFRules:Attempttoaccessprotectedfileremotely\"][data\"/.env\"][severity\"CRITICAL\"][hostname\"136.243.224.51\"][uri\"/.env\"][unique_id\"Yzhji0rXJTgctjJd-F1O9AAAAIk\"][SatOct0117:58:03.5794232022][:error][pid28956:tid47401591207680][client128.199.125.56:57518][client128.199.125.56]ModSecurity:Accessdeniedwithcode403$phase2$.Patternmatch\"$\?:\\\\\\\\b\(\?:\\\\\\\\.\(\?:ht\(\?:access\\|passwd\\|group$\\|www_\?acl\)\\|global\\\\\\\\.asa\\|httpd\\\\\\\\.co show less	Port Scan Brute-Force Web App Attack
nextweb	01 Oct 2022	(mod_security) mod_security (id:244600) triggered by 128.199.125.56 (SG/Singapore/-/Singapore/yubake ... show more(mod_security) mod_security (id:244600) triggered by 128.199.125.56 (SG/Singapore/-/Singapore/yubake.my/[AS14061 DIGITALOCEAN-ASN]): 5 in the last 3600 secs (CF_ENABLE) show less	Brute-Force
Hirte	01 Oct 2022	DIS: Web Attack GET /admin/.env	Web Spam Hacking Bad Web Bot Web App Attack
Anonymous	01 Oct 2022	(mod_security) mod_security triggered on hostname [redacted] 128.199.125.56 (SG/Singapore/yubake.my)	SQL Injection
Hirte	01 Oct 2022	SS5: Web Attack GET /admin/.env	Web Spam Hacking Bad Web Bot Web App Attack
tg_de	30 Sep 2022	6 attempts since 30.09.2022 19:38:29 CEST - last search for: /vendor/phpunit/phpunit/src/Util/PHP/ev ... show more6 attempts since 30.09.2022 19:38:29 CEST - last search for: /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php show less	Web App Attack
tg_de	30 Sep 2022	6 attempts since 30.09.2022 19:38:29 CEST - last search for: /vendor/phpunit/phpunit/src/Util/PHP/ev ... show more6 attempts since 30.09.2022 19:38:29 CEST - last search for: /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php show less	Web App Attack
☢MiG☢	29 Sep 2022	"GET /vendor/.env HTTP/1.1" 404 494 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_1 ... show more"GET /vendor/.env HTTP/1.1" 404 494 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" show less	Web App Attack
kumiko	29 Sep 2022	[2022-09-29 16:15:05] Probing for dotfiles "GET /.env HTTP/1.1" 403	Bad Web Bot Web App Attack
Richie	14 Jun 2021	[HOST2] Port Scan detected	Port Scan