AbuseIPDB » 128.199.194.105

128.199.194.105 was found in our database!

This IP was reported 86 times. Confidence of Abuse is 0%: ?

ISP	DigitalOcean LLC
Usage Type	Data Center/Web Hosting/Transit
Domain Name	digitalocean.com
Country	Singapore
City	Singapore, Singapore

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 128.199.194.105

Whois 128.199.194.105

IP Abuse Reports for 128.199.194.105:

This IP address has been reported a total of 86 times from 38 distinct sources. 128.199.194.105 was first reported on November 7th 2022, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
tecnicorioja	2024-07-27 22:01:57 (2 months ago)	(Mod_security) [27/Jul/2024:11:27:17.760317	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-07-27 11:58:12 (2 months ago)	(mod_security) mod_security triggered on hostname [redacted] 128.199.194.105 (SG/Singapore/-)	SQL Injection
myintarweb	2024-07-27 07:24:15 (2 months ago)	128.199.194.105 - - [27/Jul/2024:08:24:10 +0100] 80 "GET /.env.www HTTP/1.1" 410 1565 "-" "Mozilla/5 ... show more128.199.194.105 - - [27/Jul/2024:08:24:10 +0100] 80 "GET /.env.www HTTP/1.1" 410 1565 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" ... show less	Hacking Bad Web Bot Web App Attack
Anonymous	2024-07-27 07:19:54 (2 months ago)	Attempting to access restricted files	Hacking Brute-Force Web App Attack
Jim Keir	2024-07-27 05:54:46 (2 months ago)	2024-07-27 05:54:45 128.199.194.105 File scanning, blocking 128.199.194.105 for 5 minutes	Web App Attack
ITShelter Security	2024-07-27 00:11:45 (2 months ago)	Restricted File Access Attempt 2024/07/27 03:11:45 +03:00 req: GET /.env.www HTTP/1.1, host: * ... show moreRestricted File Access Attempt 2024/07/27 03:11:45 +03:00 req: GET /.env.www HTTP/1.1, host: *.ru 2024/07/27 03:11:46 +03:00 req: GET /.env_1 HTTP/1.1, host: .ru 2024/07/27 03:11:46 +03:00 req: GET /.env_sample HTTP/1.1, host: .ru 2024/07/27 03:11:47 +03:00 req: GET /.aws/credentials HTTP/1.1, host: .ru 2024/07/27 03:11:47 +03:00 req: GET /_static/.env HTTP/1.1, host: .ru 2024/07/27 03:11:47 +03:00 req: GET /.c9/metadata/environment/.env HTTP/1.1, host: .ru 2024/07/27 03:11:48 +03:00 req: GET /.docker/.env HTTP/1.1, host: .ru 2024/07/27 03:11:48 +03:00 req: GET /.env HTTP/1.1, host: .ru 2024/07/27 03:11:49 +03:00 req: GET /.env.backup HTTP/1.1, host: .ru 2024/07/27 03:11:49 +03:00 req: GET /.env.dev HTTP/1.1, host: .ru 2024/07/27 03:11:50 +03:00 req: GET /.env.bak%20 HTTP/1.1, host: .ru 2024/07/27 03:11:50 +03:00 req: GET /.env.old HTTP/1.1, host: *.ru show less	Bad Web Bot Web App Attack
nextweb	2024-07-26 14:17:44 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 128.199.194.105 (SG/Singapore/-/Singapore/-/[AS ... show more(mod_security) mod_security (id:210492) triggered by 128.199.194.105 (SG/Singapore/-/Singapore/-/[AS14061 DIGITALOCEAN-ASN]): 5 in the last 3600 secs (CF_ENABLE) show less	Brute-Force
Jim Keir	2024-07-26 10:19:20 (2 months ago)	2024-07-26 10:19:19 128.199.194.105 File scanning, blocking 128.199.194.105 for 5 minutes	Web App Attack
conseilgouz	2024-07-26 08:53:57 (2 months ago)	sae-17 : Block hidden directories=>/.env.www(/)	Hacking
URAN Publishing Service	2024-07-26 07:58:07 (2 months ago)	128.199.194.105 - - [26/Jul/2024:10:58:06 +0300] "GET /_static/.env HTTP/1.1" 404 277 "-" "Mozilla/5 ... show more128.199.194.105 - - [26/Jul/2024:10:58:06 +0300] "GET /_static/.env HTTP/1.1" 404 277 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" ... show less	Web App Attack
dtorrer	2024-07-26 06:35:14 (2 months ago)	General vulnerability scan.	Port Scan
URAN Publishing Service	2024-07-26 01:34:33 (2 months ago)	128.199.194.105 - - [26/Jul/2024:04:34:30 +0300] "GET /_static/.env HTTP/1.1" 404 280 "-" "Mozilla/5 ... show more128.199.194.105 - - [26/Jul/2024:04:34:30 +0300] "GET /_static/.env HTTP/1.1" 404 280 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 128.199.194.105 - - [26/Jul/2024:04:34:30 +0300] "GET /.c9/metadata/environment/.env HTTP/1.1" 404 280 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" ... show less	Web App Attack
tecnicorioja	2024-07-25 22:00:58 (2 months ago)	(Mod_security) [25/Jul/2024:10:08:19.887029	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-07-25 11:04:28 (2 months ago)	[25/Jul/2024:21:04:27 +1000] "GET /.env.www HTTP/1.1" 302 226 "Mozilla/5.0 (X11; Linux x86_64) Apple ... show more[25/Jul/2024:21:04:27 +1000] "GET /.env.www HTTP/1.1" 302 226 "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" show less	Hacking Web App Attack
4server	2024-07-25 10:48:35 (2 months ago)	[ThuJul2512:48:30.6673902024][security2:error][pid2629766:tid2629810][client128.199.194.105:0][clien ... show more[ThuJul2512:48:30.6673902024][security2:error][pid2629766:tid2629810][client128.199.194.105:0][client128.199.194.105]ModSecurity:Accessdeniedwithcode403$phase2$.Patternmatch\"$\?:\\\\\\\\b\(\?:\\\\\\\\.\(\?:ht\(\?:access\\|passwd\\|group$\\|www_\?acl\)\\|global\\\\\\\\.asa\\|httpd\\\\\\\\.conf\\|boot\\\\\\\\.ini\\|web.config\)\\\\\\\\b\\|$\\|\^\\|\\\\\\\\.\\\\\\\\.$/etc/\\|/\\\\\\\\.$\?:history\\|bash_history\\|sh_history\\|env$\$\)\"atREQUEST_FILENAME.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"204\"][id\"390709\"][rev\"30\"][msg\"Atomicorp.comWAFRules:Attempttoaccessprotectedfileremotely\"][data\"/.env\"][severity\"CRITICAL\"][hostname\"www.spc-ticino.ch\"][uri\"/_static/.env\"][unique_id\"ZqItfqXufHXsQlWFgwJ7fQAAAFA\"][ThuJul2512:48:30.9952782024][security2:error][pid2629766:tid2629810][client128.199.194.105:0][client128.199.194.105]ModSecurity:Accessdeniedwithcode403$phase2$.Patternmatch\"$\?:\\\\\\\\b\(\?:\\\\\\\\.\(\?:ht\(\?:access\\|passwd\\|group$\\|www_\?acl\)\\|global\\\\\\\\.asa\\|h show less	Blog Spam