200.128.9.2
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- UNIVERSIDADE FEDERAL DA BAHIA
- Usage Type
- University/College/School
- ASN
- AS53164
- Domain Name
- ufba.br
- Country
- 🇧🇷 Brazil
- City
- Vitoria da Conquista, Bahia
No reports in the last 60 days
200.128.9.2 has been reported 69 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
69 from
51 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇸🇮 administrator |
|
Bad Web Bot Web Spam Email Spam Blog Spam Port Scan Brute-Force Web App Attack | |
| 🇮🇳 evicky2002 |
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
|
Hacking Brute-Force SSH | |
| 🇳🇱 Site.eu |
Excessive multi-domain requests
|
Brute-Force | |
| 🇩🇪 juutis |
|
Web App Attack | |
| 🇺🇸 tmunsch |
WordPress brute force: 2 failed login POSTs to /wp-login.php between 2026-08-09 and 2026-08-09 UTC (honeypot).
|
Brute-Force Web App Attack | |
| 🇩🇪 dbmwebdesign |
WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail
|
Brute-Force Web App Attack | |
| 🇺🇸 dtorrer |
Brute-force general attack.
|
Brute-Force | |
| 🇺🇸 Starburst SysOp Team |
Malware host (X-Forwarded-For) detected by rbl.malware.expert. RBL lookup of 2.9.128.200.rbl.malware.expert succeeded at REQUEST_HEADERS:x-forwarded-for. (1001000-mnz6-3)
|
Hacking | |
| 🇩🇪 wpadm4 |
(wordpress) Failed login wp-login.php or xmlrpc.php
|
Web App Attack | |
| 🇹🇷 oalver |
Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: nginx_path_signature. Sources: nginx. Details: path_signature: request to /wp-login.php (HTTP 200). First seen: 2026-08-09. Risk score: 60/100.
|
Web App Attack | |
| Anonymous |
WordPress Brute Force
|
Brute-Force | |
| 🇺🇸 omc |
AH01797: Unauthorized file.
|
Bad Web Bot | |
| 🇩🇪 4server |
|
Port Scan Brute-Force Web App Attack | |
| 🇫🇷 Yepngo |
200.128.9.2 - - [09/Aug/2026:17:23:50 +0200] "POST /wp-login.php HTTP/2.0" 200 11390 "https://yepngo.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
...
|
Brute-Force Web App Attack | |
| 🇬🇧 spamverify.com |
Honeypot Hit: xmlrpc.php
|
Web Spam Blog Spam Bad Web Bot Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown