JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 129.212.239.228

129.212.239.228 was found in our database!

This IP was reported 30 times. Confidence of Abuse is 100%: ?

100%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 129.212.239.228

Whois 129.212.239.228

IP Abuse Reports for 129.212.239.228:

This IP address has been reported a total of 30 times from 24 distinct sources. 129.212.239.228 was first reported on September 14th 2026, and the most recent report was 45 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 LRob	2026-09-17 04:15:11 (45 minutes ago)	Asking over plain http and never following the redirect served — a crawler that reads nothing it ask ... show more Asking over plain http and never following the redirect served — a crawler that reads nothing it asks for \| method: GET \| path: /license.txt \| 2026-09-17 04:15 UTC show less	Bad Web Bot
🇺🇸 donarev419	2026-09-16 13:39:10 (15 hours ago)	Connection to port 5985 with data transfer. Data preview: POST /wsman HTTP/1.1 Host: 198.23.188.201 ... show more Connection to port 5985 with data transfer. Data preview: POST /wsman HTTP/1.1 Host: 198.23.188.201:5985 User-Agent: Python WinRM client Accept-Encoding: g show less	Port Scan Hacking
🇩🇪 BlueWire Hosting	2026-09-16 12:13:54 (16 hours ago)	Bad bot ignoring robot.txt	Bad Web Bot
🇫🇷 lindi	2026-09-16 09:23:34 (19 hours ago)	Probing for resource vulnerabilities ...	Web Spam Brute-Force Bad Web Bot Exploited Host Web App Attack
🇩🇪 conseilgouz	2026-09-16 08:18:22 (20 hours ago)	gie-6 : Trying access system files=>/license.txt(license.txt)	Hacking
Anonymous	2026-09-16 06:13:06 (22 hours ago)	Scanner hitting /license.txt on prometheus.narkow.dev (DIGITALOCEAN-129-212-128-0) — aaguard	Brute-Force Port Scan
🇪🇸 XiDeRo	2026-09-16 00:47:01 (1 day ago)	IP bloqueada por puntuación de karma acumulada (Guardian Web v2).	Port Scan Web App Attack
🇧🇪 madeit	2026-09-15 22:38:17 (1 day ago)		Web App Attack
🇩🇪 FeG Deutschland	2026-09-15 22:09:33 (1 day ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247	Exploited Host Web App Attack
🇩🇪 rh24	2026-09-15 04:57:03 (2 days ago)	(badbots) Bad bot user-agent [redacted] from 129.212.239.228 (SG/Singapore/-)	Hacking
🇫🇮 as211431.net	2026-09-15 04:54:36 (2 days ago)	Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /license.txt UA: python-requests/2.27.1 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇵🇱 sefinek.net	2026-09-15 04:32:57 (2 days ago)	Triggered Cloudflare WAF (firewallCustom) from SG. Action: BLOCK \| Protocol: HTTP/1.1 (GET) \| Endpoi ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action: BLOCK \| Protocol: HTTP/1.1 (GET) \| Endpoint: /license.txt \| UA: python-requests/2.27.1 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇨🇭 4server	2026-09-15 04:26:10 (2 days ago)	[TueSep1506:26:03.9309012026][security2:error][pid3573939:tid3574090][client129.212.239.228:0]ModSec ... show more [TueSep1506:26:03.9309012026][security2:error][pid3573939:tid3574090][client129.212.239.228:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"python-requests/\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"203\"][id\"332039\"][rev\"4\"][msg\"Atomicorp.comWAFRules:SuspiciousUnusualUserAgent\(python-requests\).Disablethisruleifyouusepython-requests/.\"][severity\"CRITICAL\"][hostname\"teatrotangram.ch.81-17-25-250.cpanel.site\"][uri\"/license.txt\"][unique_id\"aqjI29gUH62LoxRlGbMOPAAAAUM\"] show less	Hacking Web App Attack
🇳🇱 Site.eu	2026-09-15 03:57:16 (2 days ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇵🇱 Budyn	2026-09-15 03:51:12 (2 days ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: s3.goblinpot.site \| URI: /wp-login.php \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 30 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇴 216.28.211.116

🇨🇦 159.203.31.4

🇵🇰 154.208.50.10

🇨🇳 120.48.118.142

🇩🇿 105.96.102.146

🇨🇾 81.4.156.50

🇺🇸 66.132.224.25

🇺🇸 65.49.1.142

🇺🇸 64.62.156.80

🇱🇹 62.60.130.242

🇳🇱 45.156.128.132

🇺🇸 45.79.207.110

🇺🇸 34.74.130.64

🇳🇱 34.12.10.127

🇺🇸 23.185.200.28

🇸🇬 8.219.13.78

🇷🇺 2.62.108.201

🇷🇴 2.57.122.53

🇮🇳 223.181.56.37

🇧🇷 200.152.88.19