AbuseIPDB » 128.199.128.168

128.199.128.168 was found in our database!

This IP was reported 60 times. Confidence of Abuse is 0%: ?

0%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 128.199.128.168

Whois 128.199.128.168

IP Abuse Reports for 128.199.128.168:

This IP address has been reported a total of 60 times from 32 distinct sources. 128.199.128.168 was first reported on July 15th 2024, and the most recent report was 8 months ago.

Old Reports: The most recent abuse report for this IP address is from 8 months ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
penjaga BRIN	2024-10-17 09:08:08 (8 months ago)	Multiple BOT Scanning Attack Detected from same source ip.-111	Web App Attack
ps-center	2024-09-23 17:11:01 (9 months ago)	DIS: Web Attack GET //wp-includes/wlwmanifest.xml	Web Spam Hacking Bad Web Bot Web App Attack
Delta Whiskey	2024-09-23 05:12:20 (9 months ago)	Multiple failed WordPress authentication attempts	Brute-Force Web App Attack
cmbplf	2024-09-22 09:27:32 (9 months ago)	718 POST requests to */wp-login.php	Brute-Force Bad Web Bot
fmWAF	2024-09-22 07:20:52 (9 months ago)	Automated report, Hacker, patterns used: *wp-login*, *wp-login.php, *login.php* - User Agent: Mozill ... show moreAutomated report, Hacker, patterns used: *wp-login*, *wp-login.php, *login.php* - User Agent: Mozilla/5.0 show less	Web App Attack
statistics indonesia	2024-09-22 07:17:00 (9 months ago)	WP Login Scan Activities	Web App Attack
winscoreonline.com	2024-09-22 07:15:01 (9 months ago)		Port Scan
ps-center	2024-09-22 07:08:49 (9 months ago)	DIS: Web Attack GET /wp-login.php	Web Spam Hacking Bad Web Bot Web App Attack
mawan	2024-09-16 01:26:49 (9 months ago)	Suspected of having performed illicit activity on LAX server.	Web App Attack
pusathosting.com	2024-09-15 02:00:07 (9 months ago)	2ds22 bruteforce	Brute-Force Web App Attack
mawan	2024-09-14 17:19:16 (9 months ago)	Suspected of having performed illicit activity on LAX server.	Web App Attack
hermawan	2024-09-13 08:38:29 (9 months ago)	[Fri Sep 13 14:36:48.303953 2024] [security2:error] [pid 15408:tid 129726366615232] [client 128.199. ... show more[Fri Sep 13 14:36:48.303953 2024] [security2:error] [pid 15408:tid 129726366615232] [client 128.199.128.168:63688] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Client" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.5.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "39"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Client found within REQUEST_HEADERS:User-Agent: Go-http-client/1.1 request_line = GET //js/filemanager/dialog.php HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/js/filemanager/dialog.php"] [unique_id "ZuPrkJ2HojOkiolgrVGH0gAAAQ8"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[15450] [zkMqSXsk+ng] [ZuPrkJ2HojOkiolgrVGH0gAAAQ8] keep_alive=[0] [2024-09-13 14:36:48.303959] [R:ZuPrkJ2HojOkiolgrVGH0gAAAQ8] UA:'Go-http-client/1.1' Host:'staklim-jatim.bmkg.go.id' Accept-Encoding:'gzip ... show less	Hacking Web App Attack
statistics indonesia	2024-09-13 06:51:20 (9 months ago)	TinyMCE Scan Activities	Web App Attack
hermawan	2024-09-13 02:48:59 (9 months ago)	[Fri Sep 13 09:43:15.858879 2024] [security2:error] [pid 11477:tid 134069585184448] [client 128.199. ... show more[Fri Sep 13 09:43:15.858879 2024] [security2:error] [pid 11477:tid 134069585184448] [client 128.199.128.168:58429] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Client" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.5.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "39"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Client found within REQUEST_HEADERS:User-Agent: Go-http-client/1.1 request_line = GET //js/tinymce/plugins/filemanager/dialog.php HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/js/tinymce/plugins/filemanager/dialog.php"] [unique_id "ZuOmw66Ge-eLD1m1tkzLYQAAAIw"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[11516] [MKphLzdQ4LE] [ZuOmw66Ge-eLD1m1tkzLYQAAAIw] keep_alive=[0] [2024-09-13 09:43:15.858884] [R:ZuOmw66Ge-eLD1m1tkzLYQAAAIw] UA:'Go-http-client/1.1' Host:'staklim-jatim.bmkg.go.id' Accept-Encoding:'gzip ... show less	Hacking Web App Attack
hermawan	2024-09-12 15:48:49 (9 months ago)	[Thu Sep 12 22:48:37.877725 2024] [security2:error] [pid 4055:tid 127864355686080] [client 128.199.1 ... show more[Thu Sep 12 22:48:37.877725 2024] [security2:error] [pid 4055:tid 127864355686080] [client 128.199.128.168:50604] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Client" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.5.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "39"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Client found within REQUEST_HEADERS:User-Agent: Go-http-client/1.1 request_line = GET //admin/filemanager/filemanager/dialog.php HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/admin/filemanager/filemanager/dialog.php"] [unique_id "ZuMNVRZ9QWfym-jLFabOpwAAAIA"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[4082] [DLE6Ci5nvdU] [ZuMNVRZ9QWfym-jLFabOpwAAAIA] keep_alive=[0] [2024-09-12 22:48:37.877740] [R:ZuMNVRZ9QWfym-jLFabOpwAAAIA] UA:'Go-http-client/1.1' Host:'staklim-jatim.bmkg.go.id' Accept-Encoding:'gzip ... show less	Hacking Web App Attack

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩