JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 200.128.9.8

200.128.9.8 was found in our database!

This IP was reported 248 times. Confidence of Abuse is 100%: ?

100%

ISP	UNIVERSIDADE FEDERAL DA BAHIA
Usage Type	Government
ASN	AS53164
Domain Name	ufba.br
Country	🇧🇷 Brazil
City	Igrapiuna, Bahia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 200.128.9.8

Whois 200.128.9.8

IP Abuse Reports for 200.128.9.8:

This IP address has been reported a total of 248 times from 111 distinct sources. 200.128.9.8 was first reported on May 12th 2026, and the most recent report was 12 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Yepngo	2026-07-08 12:58:09 (12 minutes ago)	200.128.9.8 - - [08/Jul/2026:14:58:08 +0200] "POST /xmlrpc.php HTTP/2.0" 200 408 "-" "Mozilla/5.0 (L ... show more 200.128.9.8 - - [08/Jul/2026:14:58:08 +0200] "POST /xmlrpc.php HTTP/2.0" 200 408 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Mobile Safari/537.36" ... show less	Brute-Force Web App Attack
🇩🇪 nyt	2026-07-08 12:31:40 (39 minutes ago)	Brute-Force, Web App Attack, suspicious: XMLRPC Attack	Brute-Force Web App Attack
🇲🇹 Malta	2026-07-08 12:00:45 (1 hour ago)	200.128.9.8 - - [08/Jul/2026:14:00:45 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT ... show more 200.128.9.8 - - [08/Jul/2026:14:00:45 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" show less	Hacking Web App Attack
🇩🇪 bsoft.de	2026-07-08 11:58:15 (1 hour ago)	200.128.9.8 - - [08/Jul/2026:13:04:24 +0200] "POST /xmlrpc.php HTTP/1.1" 200 247 "-" "Mozilla/5.0 (M ... show more 200.128.9.8 - - [08/Jul/2026:13:04:24 +0200] "POST /xmlrpc.php HTTP/1.1" 200 247 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" 200.128.9.8 - - [08/Jul/2026:13:34:18 +0200] "GET /wp-login.php HTTP/1.1" 404 74200 "https://bolte.de/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" 200.128.9.8 - - [08/Jul/2026:13:58:13 +0200] "GET /wp-login.php HTTP/1.1" 404 74143 "https://bolte.de/wp-login.php" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Mobile Safari/537.36" show less	Web App Attack
🇺🇸 oralunal	2026-07-08 11:50:39 (1 hour ago)	IP banned by Fail2Ban in jail oral-suss access.log mvfnds ...	Bad Web Bot Web App Attack
🇫🇷 LRob	2026-07-08 11:47:26 (1 hour ago)	CrowdSec: lrob/wp-login-slow-bf \| req: ["/wp-login.php"] \| UA: ["Mozilla/5.0 (Macintosh; Intel Mac O ... show more CrowdSec: lrob/wp-login-slow-bf \| req: ["/wp-login.php"] \| UA: ["Mozilla/5.0 (Macintosh; Intel Mac OS X 11_7_10) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36","Mozilla/5.0 (Windows NT 10.0 show less	Brute-Force Web App Attack
🇨🇿 plzenskypruvodce.cz	2026-07-08 11:42:00 (1 hour ago)	2026-07-08T13:41:58.916299+02:00 web wordpress(varhanykolin.cz)[314321]: Immediately block connectio ... show more 2026-07-08T13:41:58.916299+02:00 web wordpress(varhanykolin.cz)[314321]: Immediately block connections from 200.128.9.8 ... show less	Brute-Force
🇩🇪 ger-stg-sifi1	2026-07-08 11:07:07 (2 hours ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
🇬🇧 spamverify.com	2026-07-08 10:58:08 (2 hours ago)	Honeypot Hit: xmlrpc.php	Web Spam Blog Spam Bad Web Bot Web App Attack
🇩🇪 FeG Deutschland	2026-07-08 10:48:45 (2 hours ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257	Exploited Host Web App Attack
🇩🇪 Hazzard	2026-07-08 10:45:05 (2 hours ago)	(wordpress) Failed wordpress login from 200.128.9.8 (BR/Brazil/Bahia/Salvador/-/[redacted]): (CF_EN ... show more (wordpress) Failed wordpress login from 200.128.9.8 (BR/Brazil/Bahia/Salvador/-/[redacted]): (CF_ENABLE) show less	Brute-Force
Anonymous	2026-07-08 09:31:37 (3 hours ago)	Backdrop CMS module - malicious activity detected	Bad Web Bot Web App Attack
🇵🇱 Kitki30.com	2026-07-08 08:08:49 (5 hours ago)	HTTP Probing. Log: 200.128.9.8 - - [08/Jul/2026:08:08:48 +0000] "GET /wordpress/xmlrpc.php HTTP/1.1" ... show more HTTP Probing. Log: 200.128.9.8 - - [08/Jul/2026:08:08:48 +0000] "GET /wordpress/xmlrpc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 4server	2026-07-08 08:04:45 (5 hours ago)	[WedJul0810:04:40.2478802026][security2:error][pid3503477:tid3503795][client200.128.9.8:0]ModSecurit ... show more [WedJul0810:04:40.2478802026][security2:error][pid3503477:tid3503795][client200.128.9.8:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"368\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"verticalti.ch\"][uri\"/wordpress/xmlrpc.php\"][unique_id\"ak4EmGQf50aX7-hzjlgJkQAAAIU\"] show less	Hacking Web App Attack
🇺🇸 ArturShelby	2026-07-08 07:53:23 (5 hours ago)	Honeypot triggered: /wp-json/wp/v2/users	Web App Attack

Showing 1 to 15 of 248 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 205.210.31.81

🇺🇸 157.245.245.246

🇹🇭 223.204.247.136

🇰🇷 222.108.147.76

🇧🇪 198.235.24.249

🇸🇪 185.202.108.41

🇵🇱 176.53.159.198

🇷🇴 151.242.30.56

🇫🇷 91.231.89.231

🇸🇪 31.220.15.62

🇺🇸 213.169.230.151

🇺🇸 205.185.125.209

🇧🇷 189.108.215.39

🇭🇰 152.32.186.240

🇦🇷 45.178.2.188

🇳🇱 45.148.10.141

🇰🇷 3.35.16.37

🇻🇳 113.164.66.10

🇮🇷 93.113.230.167

🇫🇮 65.108.252.22