JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

202.129.16.158

Neutral Activity

Abuse confidence score ?

0% Low Risk

18 reports

14 reporters · latest 3 years ago

ISP	National Telecom Public Company Limited
Usage Type	Fixed Line ISP
ASN	AS9931
Domain Name	ntplc.co.th
Country	🇹🇭 Thailand
City	Hat Yai, Songkhla

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

202.129.16.158 has been reported 18 times. The most recent report is from 3 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 202.129.16.158

Export CSV

This IP address has been reported a total of 18 times from 14 distinct sources. 202.129.16.158 was first reported on February 22nd 2021, and the most recent report was 3 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇳 ThreatBook.io	2023-10-07 01:31:37 (3 years ago)	ThreatBook Intelligence: Zombie more details on http://threatbook.io/ip/202.129.16.158 2023-10-06 14 ... show more ThreatBook Intelligence: Zombie more details on http://threatbook.io/ip/202.129.16.158 2023-10-06 14:41:53 /docs/./images/asf-logo.svg 2023-10-06 14:41:51 /docs/ show less	Web App Attack
🇨🇳 ThreatBook.io	2023-09-15 02:01:52 (3 years ago)	ThreatBook Intelligence: Zombie more details on http://threatbook.io/ip/202.129.16.158 2023-09-14 06 ... show more ThreatBook Intelligence: Zombie more details on http://threatbook.io/ip/202.129.16.158 2023-09-14 06:52:06 /tomcat.svg 2023-09-14 06:52:06 /favicon.ico 2023-09-14 06:51:55 / show less	Web App Attack
🇨🇳 ThreatBook.io	2023-05-25 01:26:36 (3 years ago)	ThreatBook Intelligence: Zombie more details on http://threatbook.io/ip/202.129.16.158 2023-05-24 23 ... show more ThreatBook Intelligence: Zombie more details on http://threatbook.io/ip/202.129.16.158 2023-05-24 23:47:08 /upload 2023-05-24 23:46:52 /upload 2023-05-24 23:47:09 /KnWmViHBJBQY show less	Web App Attack
🇱🇺 Tha_14	2023-01-07 14:25:42 (3 years ago)	Incoming UDP Connection from 202.129.16.158 to port: 20473. Honeypot was triggered at 1/7/2023 16:25 ... show more Incoming UDP Connection from 202.129.16.158 to port: 20473. Honeypot was triggered at 1/7/2023 16:25:01. show less	Port Scan
🇯🇴 abdel	2022-10-08 08:18:49 (4 years ago)	Web Attack	DNS Compromise DNS Poisoning Fraud Orders DDoS Attack FTP Brute-Force Ping of Death Phishing Fraud VoIP Open Proxy Web Spam Email Spam Blog Spam VPN IP Port Scan Hacking SQL Injection Spoofing Brute-Force Bad Web Bot Exploited Host Web App Attack SSH IoT Targeted
Anonymous	2022-08-26 10:39:53 (4 years ago)	202.129.16.158 (TH/Thailand/ns305.icc-dns.com), 6 distributed ftpd attacks on account [qygymcrs] in ... show more 202.129.16.158 (TH/Thailand/ns305.icc-dns.com), 6 distributed ftpd attacks on account [qygymcrs] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK show less	FTP Brute-Force Brute-Force
🇬🇧 4slgroup.com	2022-05-26 17:40:00 (4 years ago)	Unauthorised SIP registration attempts, dst port udp/5060. Attempt count for date: 2022-05-26 = 9	Fraud VoIP Hacking Brute-Force
🇮🇹 Sandonanet	2022-03-22 04:01:29 (4 years ago)	This IP Address 202.129.16.158 has made numerous attempts to authenticate with 3CX using invalid cre ... show more This IP Address 202.129.16.158 has made numerous attempts to authenticate with 3CX using invalid credentials show less	Fraud VoIP
🇺🇸 tinyshield.me	2022-02-22 12:12:02 (4 years ago)	Provided by tinyshield.me - Simple Security For WordPress	Brute-Force Web App Attack
🇵🇱 ChillScanner	2021-09-20 23:39:11 (5 years ago)	4 probe(s) @ TCP(22)	Port Scan
🇵🇱 fripers.pl	2021-09-20 11:28:30 (5 years ago)	Sep 20 17:28:24 serwer sshd\[16631\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 ... show more Sep 20 17:28:24 serwer sshd\[16631\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.129.16.158 user=admin Sep 20 17:28:27 serwer sshd\[16631\]: Failed password for admin from 202.129.16.158 port 62181 ssh2 Sep 20 17:28:28 serwer sshd\[16635\]: Invalid user support from 202.129.16.158 port 63249 Sep 20 17:28:28 serwer sshd\[16635\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.129.16.158 ... show less	Brute-Force SSH
Anonymous	2021-09-02 03:52:40 (5 years ago)	202.129.16.158 - - [02/Sep/2021:10:48:53 +0300] "GET //shop/wp-includes/wlwmanifest.xml HTTP/1.0" 40 ... show more 202.129.16.158 - - [02/Sep/2021:10:48:53 +0300] "GET //shop/wp-includes/wlwmanifest.xml HTTP/1.0" 404 2580 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 202.129.16.158 - - [02/Sep/2021:10:48:54 +0300] "GET //wp1/wp-includes/wlwmanifest.xml HTTP/1.0" 404 2580 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 202.129.16.158 - - [02/Sep/2021:10:48:55 +0300] "GET //test/wp-includes/wlwmanifest.xml HTTP/1.0" 404 2580 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 202.129.16.158 - - [02/Sep/2021:10:48:55 +0300] "GET //media/wp-includes/wlwmanifest.xml HTTP/1.0" 404 2580 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" show less	Hacking Web App Attack
🇺🇸 MortimerCat	2021-04-29 00:27:19 (5 years ago)	Attempting to download environment file	Web App Attack
🇳🇱 www.BullWall.com	2021-03-04 01:22:36 (5 years ago)	RDP Brute-Force (honeypot 12)	Brute-Force
🇳🇱 www.BullWall.com	2021-03-04 01:22:36 (5 years ago)	RDP Brute-Force (honeypot 7)	Brute-Force

Showing 1 to 15 of 18 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇭 185.201.130.40

🇺🇸 185.96.39.9

🇭🇰 165.154.64.119

🇺🇸 68.225.62.190

🇺🇸 66.132.159.41

🇳🇱 45.148.10.152

🇪🇸 5.154.90.172

🇳🇱 195.178.110.217

🇵🇱 193.24.247.144

🇫🇮 147.185.133.21

🇺🇸 142.252.76.216

🇺🇸 107.173.174.206

🇵🇱 104.164.120.143

🇻🇳 103.48.192.48

🇺🇸 85.208.96.197

🇺🇸 82.24.210.54

🇨🇦 54.39.6.215

🇨🇳 8.138.154.105

🇬🇪 2.57.217.229

🇺🇸 205.210.31.17