JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

128.199.152.116

Neutral Activity

Abuse confidence score ?

0% Low Risk

228 reports

118 reporters · latest 1 year ago

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇸🇬 Singapore
City	Singapore

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

128.199.152.116 has been reported 228 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 128.199.152.116

Export CSV

This IP address has been reported a total of 228 times from 118 distinct sources. 128.199.152.116 was first reported on June 21st 2024, and the most recent report was 1 year ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇹 nomzamo	2025-01-21 04:07:08 (1 year ago)	Fail2Ban reported: nginx-noscript	Brute-Force Bad Web Bot SSH
Anonymous	2024-10-16 13:31:00 (1 year ago)	IP relacionado a webshells. URLs associadas: /wp-login.php, /wp-admin/plugin-install.php	SSH
🇺🇸 insightdiabetes.com	2024-08-14 16:49:26 (2 years ago)	IP reported by Wordfence	Brute-Force SSH
Anonymous	2024-08-14 08:27:52 (2 years ago)	[14/Aug/2024:18:27:52 +1000] "GET //wp-includes/css/dashicons.min.css HTTP/1.1" 404 196	Hacking Web App Attack
🇺🇸 woof	2024-08-13 08:38:35 (2 years ago)	This IP accessed a banned path "/vendor/phpunit/phpunit/LICENSE" with User Agent "Apache/2.4.34 (Ubu ... show more This IP accessed a banned path "/vendor/phpunit/phpunit/LICENSE" with User Agent "Apache/2.4.34 (Ubuntu) OpenSSL/1.1.1 (internal dummy connection)". (ListenCaddy) show less	Bad Web Bot Web App Attack
🇩🇪 dwmp	2024-08-11 13:06:18 (2 years ago)	[Sun Aug 11 14:21:14.553378 2024] [authz_core:error] [pid 2178994:tid 139862925637376] [client 128.1 ... show more [Sun Aug 11 14:21:14.553378 2024] [authz_core:error] [pid 2178994:tid 139862925637376] [client 128.199.152.116:57970] AH01630: client denied by server configuration: /var/www/vhosts/assicurazionemodena.it/httpdocs/wp-admin/setup-config.php, referer: www.google.com [Sun Aug 11 14:27:55.493410 2024] [authz_core:error] [pid 2178971:tid 139863143716608] [client 128.199.152.116:41026] AH01630: client denied by server configuration: /var/www/vhosts/assicurazioneparma.it/httpdocs/wordpress, referer: www.google.com [Sun Aug 11 14:27:56.318133 2024] [authz_core:error] [pid 2178994:tid 139863143716608] [client 128.199.152.116:41028] AH01630: client denied by server configuration: /var/www/vhosts/assicurazioneparma.it/httpdocs/wp-admin/setup-config.php, referer: www.google.com [Sun Aug 11 15:06:17.450248 2024] [authz_core:error] [pid 2178971:tid 139863194072832] [client 128.199.152.116:53618] AH01630: client denied by server configuration: /var/www/vhosts/energicom.it/httpdocs/wordpress, referer: ... show less	Brute-Force
🇩🇪 Trashware	2024-08-09 15:41:27 (2 years ago)	Unsolicited connection attempt	Hacking Brute-Force
🇺🇸 woof	2024-08-09 13:36:26 (2 years ago)	This IP accessed a banned path "//wp-includes/css/dashicons.min.css" with User Agent "Mozlila/5.0 (L ... show more This IP accessed a banned path "//wp-includes/css/dashicons.min.css" with User Agent "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36". (ListenCaddy) show less	Bad Web Bot Web App Attack
🇺🇸 MPL	2024-08-09 13:23:40 (2 years ago)	tcp/80 (12 or more attempts)	Port Scan
🇩🇪 updown.io	2024-08-09 07:57:03 (2 years ago)	{"level":"info","ts":1723188094.6995702,"logger":"http.log.access.log1","msg":"handled request","req ... show more {"level":"info","ts":1723188094.6995702,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"128.199.152.116","remote_port":"42032","proto":"HTTP/1.1","method":"GET","host":"status.abetterlemonadestand.com","uri":"//wp-includes/css/dashicons.min.css","headers":{"Upgrade-Insecure-Requests":["1"],"User-Agent":["Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"],"Accept-Language":["en-US,en;q=0.9,fr;q=0.8"],"Cache-Control":["max-age=0"],"Referer":["www.google.com"],"Connection":["keep-alive"],"Accept-Encoding":["gzip, deflate"],"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,/;q=0.8"]}},"user_id":"","duration":0.000055054,"size":0,"status":308,"resp_headers":{"Location":["https://status.abetterlemonadestand.com//wp-includes/css/dashicons.min.css"],"Content-Type":[],"Server":["Caddy"],"Connection":["close"]}} {"level":"i ... show less	DDoS Attack Web App Attack
🇺🇸 MPL	2024-08-08 06:43:13 (2 years ago)	tcp/80 (8 or more attempts)	Port Scan
🇬🇧 Epimetheus	2024-08-08 00:58:15 (2 years ago)	Unauthorized access attempts: From: 128.199.152.116 Method: HTTP GET URI Path: //wp-content/pl ... show more Unauthorized access attempts: From: 128.199.152.116 Method: HTTP GET URI Path: //wp-content/plugins/woocommerce-payments/dist/index.js.LICENSE.txt UA: "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" show less	Web App Attack
🇫🇮 Mr-Money	2024-08-07 15:05:19 (2 years ago)	128.199.152.116 - - [07/Aug/2024:17:05:14 +0200] "GET //wordpress/wp-admin/setup-config.php?step=1 H ... show more 128.199.152.116 - - [07/Aug/2024:17:05:14 +0200] "GET //wordpress/wp-admin/setup-config.php?step=1 HTTP/1.1" 404 506 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.152.116 - - [07/Aug/2024:17:05:17 +0200] "GET /wordpress/wp-admin/setup-config.php?step=1 HTTP/1.1" 404 3662 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.152.116 - - [07/Aug/2024:17:05:18 +0200] "GET /wordpress/wp-admin/setup-config.php?step=1 HTTP/1.1" 404 3660 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" ... show less	Hacking SQL Injection Bad Web Bot Exploited Host Web App Attack
🇺🇸 MPL	2024-08-07 14:42:59 (2 years ago)	tcp/80 (8 or more attempts)	Port Scan
🇫🇮 Mr-Money	2024-08-07 08:21:14 (2 years ago)	128.199.152.116 - - [07/Aug/2024:10:21:09 +0200] "GET //wordpress/wp-admin/setup-config.php?step=1 H ... show more 128.199.152.116 - - [07/Aug/2024:10:21:09 +0200] "GET //wordpress/wp-admin/setup-config.php?step=1 HTTP/1.1" 404 506 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.152.116 - - [07/Aug/2024:10:21:12 +0200] "GET /wordpress/wp-admin/setup-config.php?step=1 HTTP/1.1" 404 3663 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 128.199.152.116 - - [07/Aug/2024:10:21:14 +0200] "GET /wordpress/wp-admin/setup-config.php?step=1 HTTP/1.1" 404 3661 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" ... show less	Hacking SQL Injection Bad Web Bot Exploited Host Web App Attack

Showing 1 to 15 of 228 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 220.118.173.234

🇿🇦 197.242.145.222

🇺🇸 130.211.199.207

🇺🇸 104.23.209.127

🇷🇴 92.118.39.171

🇺🇸 71.6.134.233

🇩🇪 69.5.169.249

🇺🇸 20.106.52.98

🇨🇭 209.99.188.168

🇺🇸 207.90.244.19

🇦🇷 186.62.102.252

🇨🇴 181.49.149.174

🇪🇨 177.234.232.41

🇩🇪 167.94.146.46

🇫🇷 91.231.89.139

🇫🇷 91.196.152.123

🇩🇪 69.5.169.239

🇩🇪 69.5.169.238

🇦🇺 51.161.136.177

🇳🇱 46.151.178.11