JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 128.90.128.13

128.90.128.13 was found in our database!

This IP was reported 151 times. Confidence of Abuse is 100%: ?

100%

ISP	Unus, Inc.
Usage Type	Fixed Line ISP
ASN	AS22363
Hostname(s)	undefined.hostname.localhost
Domain Name	unusid.com
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 128.90.128.13

Whois 128.90.128.13

IP Abuse Reports for 128.90.128.13:

This IP address has been reported a total of 151 times from 95 distinct sources. 128.90.128.13 was first reported on March 6th 2024, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 wordpresshosting.solutions	2026-07-12 15:58:53 (2 hours ago)	WordPress admin install/setup endpoint probing detected. Evidence: 128.90.128.13 - - [12/Jul/2026:15 ... show more WordPress admin install/setup endpoint probing detected. Evidence: 128.90.128.13 - - [12/Jul/2026:15:58:53 +0000] "GET /wp-admin/setup-config.php?step=1&language=en_GB HTTP/1.1" 301 923 "-" "Mozilla/5.0 (compatible; Bingbot/2.0; +http://www.bing.com/bingbot.htm)" 128.90.128.13 - - [12/Jul/2026:15:58:53 +0000] "GET /wp-admin/setup-config.php?step=1&language=en_GB HTTP/1.1" 404 6451 "http://arkapi.dev/wp-admin/setup-config.php?step=1&language=en_GB" "Mozilla/5.0 (compatible; Bingbot/2.0; +http://www.bing.com/bingbot.htm)" show less	Web App Attack
🇫🇷 ELYAZ	2026-07-12 12:34:39 (5 hours ago)	(y4) Failed scan -byebye- from 128.90.128.13 (DE/Germany/undefined.hostname.localhost): (CF_ENABLE)	Hacking
🇫🇷 Baking333	2026-07-12 08:36:57 (9 hours ago)	[redacted] 128.90.128.13 - - [12/Jul/2026:09:36:56 +0100] "GET /wp-admin/[redacted]?step=1&language= ... show more [redacted] 128.90.128.13 - - [12/Jul/2026:09:36:56 +0100] "GET /wp-admin/[redacted]?step=1&language=en_GB HTTP/1.1" 302 6773 0/104065 "http://[redacted]/wp-admin/[redacted]?step=1&language=en_GB" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36" [redacted] 128.90.128.13 - - [12/Jul/2026:09:36:56 +0100] "GET / HTTP/1.1" 200 8227 0/143945 "https://[redacted]/wp-admin/[redacted]?step=1&language=en_GB" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36" show less	Bad Web Bot Web App Attack
Anonymous	2026-07-12 08:12:46 (10 hours ago)	Probe hitting /wp-admin/setup-config.php?step=1&language=en_GB detected. Whatcha lookin for in there ... show more Probe hitting /wp-admin/setup-config.php?step=1&language=en_GB detected. Whatcha lookin for in there?! show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-12 06:29:39 (11 hours ago)	(caddyscan) Scanner path probe from 128.90.128.13 (DE/Germany/undefined.hostname.localhost): 5 in th ... show more (caddyscan) Scanner path probe from 128.90.128.13 (DE/Germany/undefined.hostname.localhost): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 128.90.128.13 - - [12/Jul/2026:05:44:58 +0000] "GET /wp-admin/setup-config.php?step=1&language=en_GB HTTP/1.1" [REDACTED] 200 2627 128.90.128.13 - - [12/Jul/2026:05:44:59 +0000] "GET /wp-admin/install.php?step=1&language=en_GB HTTP/1.1" [REDACTED] 200 2627 128.90.128.13 - - [12/Jul/2026:05:45:00 +0000] "GET /wordpress/wp-admin/setup-config.php?step=1&language=en_GB HTTP/1.1" [REDACTED] 200 2627 128.90.128.13 - - [12/Jul/2026:05:45:00 +0000] "GET /wordpress/wp-admin/install.php?step=1&language=en_GB HTTP/1.1" [REDACTED] 200 2627 128.90.128.13 - - [12/Jul/2026:06:29:36 +0000] "GET /wp-admin/setup-config.php?step=1&language=en_GB HTTP/1.1" show less	Port Scan
🇫🇷 Baking333	2026-07-12 01:47:32 (16 hours ago)	[redacted] 128.90.128.13 - - [12/Jul/2026:02:47:30 +0100] "GET /wp-admin/[redacted]?step=1&language= ... show more [redacted] 128.90.128.13 - - [12/Jul/2026:02:47:30 +0100] "GET /wp-admin/[redacted]?step=1&language=en_GB HTTP/1.1" 302 6773 0/47268 "http://[redacted]/wp-admin/[redacted]?step=1&language=en_GB" "Mozilla/5.0 (compatible; Yahoo! Slurp; http://[redacted]/help/us/ysearch/slurp)" [redacted] 128.90.128.13 - - [12/Jul/2026:02:47:30 +0100] "GET / HTTP/1.1" 200 7628 0/123865 "https://[redacted]/wp-admin/[redacted]?step=1&language=en_GB" "Mozilla/5.0 (compatible; Yahoo! Slurp; http://[redacted]/help/us/ysearch/slurp)" show less	Bad Web Bot Web App Attack
Anonymous	2026-07-11 21:41:07 (20 hours ago)	fail2ban: apache-auth jail (3 hits in 2419200s) on skipper	Brute-Force Web App Attack
🇧🇪 cmbplf	2026-07-11 19:36:26 (22 hours ago)	159 requests with url.path *config.php	Brute-Force Bad Web Bot
🇩🇪 LRob	2026-07-11 19:01:48 (23 hours ago)	CrowdSec: crowdsecurity/http-admin-interface-probing \| req: ["/from-cannes/wp-admin/setup-config.php ... show more CrowdSec: crowdsecurity/http-admin-interface-probing \| req: ["/from-cannes/wp-admin/setup-config.php?step=1\u0026language=en_GB","/from-cannes/wp-admin/install.php?step=1\u0026language=en_GB","/from-cannes/blog/wp-admin/setup-config.php?step=1\u0026language=en_GB"] \| UA: ["Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.1 Safari/605.1.15","Mozilla/5.0 (Windows NT 10.0 show less	Hacking
🇩🇪 FeG Deutschland	2026-07-11 15:56:35 (1 day ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247	Exploited Host Web App Attack
🇬🇧 Yosi	2026-07-11 09:34:25 (1 day ago)	RdpGuard detected brute-force attempt on HTTP	Brute-Force
🇬🇧 consul.to	2026-07-11 06:55:24 (1 day ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 Equity Steward	2026-07-11 05:52:26 (1 day ago)	Systematic automated scraping and endpoint enumeration against equitysteward.org. 1 offences recorde ... show more Systematic automated scraping and endpoint enumeration against equitysteward.org. 1 offences recorded. Trigger: Honeypot path accessed: /wp-admin/setup-config.php — deliberately ignored robots.txt Disallow directive.. Canary ref: 47b78de8-97d. show less	Web App Attack Bad Web Bot
🇫🇷 Baking333	2026-07-11 02:32:09 (1 day ago)	[redacted] 128.90.128.13 - - [11/Jul/2026:03:32:08 +0100] "GET /wp-admin/[redacted]?step=1&language= ... show more [redacted] 128.90.128.13 - - [11/Jul/2026:03:32:08 +0100] "GET /wp-admin/[redacted]?step=1&language=en_GB HTTP/1.1" 302 1549 0/55341 "http://[redacted]/wp-admin/[redacted]?step=1&language=en_GB" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/115.0.0.0" [redacted] 128.90.128.13 - - [11/Jul/2026:03:32:08 +0100] "GET / HTTP/1.1" 200 11703 0/139231 "https://[redacted]/wp-admin/[redacted]?step=1&language=en_GB" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/115.0.0.0" show less	Bad Web Bot Web App Attack
🇨🇦 dispensight	2026-07-11 01:38:34 (1 day ago)	SecureLeaf CTI: UA-rotation burst (spoofed agents). 12 req against s01-app.dispensight.ca. Defensive ... show more SecureLeaf CTI: UA-rotation burst (spoofed agents). 12 req against s01-app.dispensight.ca. Defensive report; verified infra. show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 151 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇻🇳 116.99.168.235

🇺🇸 136.144.35.155

🇳🇱 91.92.40.45

🇬🇧 5.226.140.101

🇧🇷 2804:1ea0:b02:4b00:acaf:8636:efdb:a4a9

🇮🇳 206.183.111.36

🇬🇧 193.163.201.187

🇺🇸 172.59.125.90

🇻🇳 171.244.185.149

🇭🇰 154.221.20.92

🇺🇸 144.202.92.17

🇺🇸 130.44.178.210

🇻🇳 116.98.61.176

🇹🇼 111.70.29.158

🇷🇴 92.118.39.14

🇳🇱 91.92.40.36

🇺🇸 76.49.199.97

🇺🇸 2607:f8b0:400e:c0a::12a

🇵🇭 210.23.170.61

🇧🇷 179.102.26.14