JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 128.199.2.117

128.199.2.117 was found in our database!

This IP was reported 134 times. Confidence of Abuse is 0%: ?

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	Santa Clara, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 128.199.2.117

Whois 128.199.2.117

IP Abuse Reports for 128.199.2.117:

This IP address has been reported a total of 134 times from 42 distinct sources. 128.199.2.117 was first reported on March 13th 2021, and the most recent report was 11 months ago.

Old Reports: The most recent abuse report for this IP address is from 11 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2025-09-16 13:00:15 (11 months ago)	Blocked by UFW (TCP on 2000) Source port: 61013 TTL: 245 Packet length: 44 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 2000) Source port: 61013 TTL: 245 Packet length: 44 TOS: 0x08 This report (for 128.199.2.117) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇳 ThreatBook.io	2023-01-09 23:23:22 (3 years ago)	ThreatBook Intelligence: Scanner more details on http://threatbook.io/ip/128.199.2.117 2023-01-09 05 ... show more ThreatBook Intelligence: Scanner more details on http://threatbook.io/ip/128.199.2.117 2023-01-09 05:04:56 /events../.git/config 2023-01-09 05:04:55 /css../.git/config 2023-01-09 05:04:55 /js../.git/config 2023-01-09 05:04:55 /img../.git/config 2023-01-09 05:04:24 / 2023-01-09 05:04:55 /content../.git/config 2023-01-09 05:04:56 /media../.git/config 2023-01-09 05:04:54 /static../.git/config 2023-01-09 05:04:55 /assets../.git/config 2023-01-09 05:04:55 /images../.git/config show less	Web App Attack
🇿🇦 gotickets.co.za	2023-01-08 23:21:38 (3 years ago)	2023/1/8 23:21:38 "/"	Port Scan Hacking
🇺🇸 octageeks.com	2023-01-08 05:06:12 (3 years ago)	Wordpress malicious attack:[octablocked]	Web App Attack
🇦🇺 FEWA	2023-01-08 02:39:20 (3 years ago)	Fail2Ban Ban Triggered	Hacking Bad Web Bot Web App Attack
🇸🇬 tommygod.ddns.net	2023-01-08 00:15:16 (3 years ago)	[08/Jan/2023:00:13:16 +0000] Y7oKnG8FXavkXInm75DJXAAAAAQ 128.199.2.117 56800 172.104.34.116 443 [08/ ... show more [08/Jan/2023:00:13:16 +0000] Y7oKnG8FXavkXInm75DJXAAAAAQ 128.199.2.117 56800 172.104.34.116 443 [08/Jan/2023:00:15:10 +0000] Y7oLDsmxccb9cRRRK4O54AAAAAE 128.199.2.117 56326 172.104.34.116 443 [08/Jan/2023:00:15:11 +0000] Y7oLD68FjKGevwFTB9IqXQAAAAI 128.199.2.117 56330 172.104.34.116 443 [08/Jan/2023:00:15:12 +0000] Y7oLEMO_y1CH77e0LOO9TwAAAAU 128.199.2.117 37952 172.104.34.116 443 [08/Jan/2023:00:15:12 +0000] Y7oLEBQSO5WfEa6iZomC-AAAAAc 128.199.2.117 37956 172.104.34.116 443 [08/Jan/2023:00:15:13 +0000] Y7oLEang2vpSH6B55tC8UAAAAAA 128.199.2.117 37968 172.104.34.116 443 [08/Jan/2023:00:15:14 +0000] Y7oLEk5jlzjNDGP7NHyLuQAAAAM 128.199.2.117 37974 172.104.34.116 443 [08/Jan/2023:00:15:14 +0000] Y7oLElF_EBYNmyx1cDbp9gAAAAY 128.199.2.117 37976 172.104.34.116 443 [08/Jan/2023:00:15:15 +0000] Y7oLE28FXavkXInm75DJXQAAAAQ 128.199.2.117 37980 172.104.34.116 443 [08/Jan/2023:00:15:15 +0000] Y7oLE8mxccb9cRRRK4O54QAAAAE 128.199.2.117 37982 172.104.34.116 443 show less	SQL Injection Brute-Force
🇩🇪 sdos.es	2023-01-07 22:36:10 (3 years ago)	"Restricted File Access Attempt - Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"	Web App Attack
🇺🇸 jcbriar	2023-01-07 18:21:14 (3 years ago)	Searching for vulnerable scripts	Hacking Web App Attack
🇨🇳 ThreatBook.io	2022-12-05 18:26:11 (3 years ago)	ThreatBook Intelligence: Scanner more details on http://threatbook.io/ip/128.199.2.117 2022-12-05 00 ... show more ThreatBook Intelligence: Scanner more details on http://threatbook.io/ip/128.199.2.117 2022-12-05 00:00:00 /images../.git/config 2022-12-05 00:00:00 /img../.git/config 2022-12-05 00:00:01 /content../.git/config 2022-12-05 00:00:01 /media../.git/config 2022-12-05 00:00:02 /lib../.git/config 2022-12-05 00:00:00 /css../.git/config 2022-12-05 00:00:01 /assets../.git/config 2022-12-05 00:00:01 /events../.git/config show less	Web App Attack
🇮🇩 hermawan	2022-12-04 19:48:33 (3 years ago)	[Mon Dec 05 07:43:51.352257 2022] [-:error] [pid 807784:tid 140242866648640] [client 128.199.2.117:4 ... show more [Mon Dec 05 07:43:51.352257 2022] [-:error] [pid 807784:tid 140242866648640] [client 128.199.2.117:49296] [client 128.199.2.117] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "bot" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-3.3.4/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "5"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: bot found within REQUEST_HEADERS:User-Agent: msnbot/1.1 ( http://search.msn.com/msnbot.htm) request_line = GET / HTTP/1.1"] [severity "NOTICE"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/"] [unique_id "Y40-xwfg3Wh1XbW3HQf07QAAAcA"] [karangploso.jatim.bmkg.go.id] [karangploso.jatim.bmkg.go.id] top=[807984] [6K8n+/HYnYY] [Y40-xwfg3Wh1XbW3HQf07QAAAcA] keep_alive=[0] [2022-12-05 07:43:51.352260] [R:Y40-xwfg3Wh1XbW3HQf07QAAAcA] UA:'msnbot/1.1 ( http://search.msn.com/msnbot.htm)' Host:'103.166.156.58' Accept-Encoding:'gzip ... show less	Hacking Web App Attack
🇨🇳 ThreatBook.io	2022-12-04 18:10:35 (3 years ago)	ThreatBook Intelligence: Scanner more details on http://threatbook.io/ip/128.199.2.117 2022-12-04 23 ... show more ThreatBook Intelligence: Scanner more details on http://threatbook.io/ip/128.199.2.117 2022-12-04 23:59:59 /js../.git/config 2022-12-04 23:59:44 /cgi-bin/.%2e/%2e%2e/.git/config 2022-12-04 23:59:42 /.git/config 2022-12-04 23:59:44 /cgi-bin/.%2e/.git/config 2022-12-04 23:59:59 /static../.git/config 2022-12-04 23:59:22 / show less	Web App Attack
🇹🇭 Sawasdee	2022-12-03 23:04:27 (3 years ago)	Unwanted checking 80 or 443 port ...	Bad Web Bot
🇦🇺 Bay13	2022-11-30 17:09:36 (3 years ago)	f2b http-unavailable	Hacking Web App Attack
Anonymous	2022-11-30 00:23:14 (3 years ago)	port scan and connect, tcp 443 (https)	Port Scan
🇬🇧 SecondEdge	2022-11-29 18:21:18 (3 years ago)	A web attack was detected from 128.199.2.117 (United States / California / Santa Clara) against 52.2 ... show more A web attack was detected from 128.199.2.117 (United States / California / Santa Clara) against 52.215.230.232 (CGI-BIN,Git Variable Scan) over 1m5s. show less	Web App Attack

Showing 1 to 15 of 134 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 198.235.24.106

🇭🇰 152.32.171.213

🇫🇮 147.185.133.87

🇨🇻 102.222.141.152

🇧🇬 79.124.62.230

🇫🇮 2a00:1450:4010:c01::12e

🇨🇴 2803:cd60:5102:104:9999::230

🇫🇷 2001:41d0:303:a4e6::1

🇺🇸 198.144.190.37

🇺🇸 165.154.182.30

🇪🇬 154.178.137.161

🇺🇸 104.248.210.24

🇮🇳 103.207.180.145

🇳🇱 91.92.40.25

🇳🇱 45.140.222.166

🇺🇸 34.86.189.217

🇪🇸 92.176.213.160

🇰🇷 1.227.114.193

🇩🇪 194.187.176.254

🇩🇪 144.76.22.204