JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 202.129.206.239

202.129.206.239 was found in our database!

This IP was reported 22 times. Confidence of Abuse is 1%: ?

ISP	NIPA TECHNOLOGY CO., LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS132300
Hostname(s)	vpn.ns.co.th
Domain Name	nipa.co.th
Country	🇹🇭 Thailand
City	Bangkok, Bangkok

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 202.129.206.239

Whois 202.129.206.239

IP Abuse Reports for 202.129.206.239:

This IP address has been reported a total of 22 times from 12 distinct sources. 202.129.206.239 was first reported on December 30th 2025, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 el-brujo	2026-05-04 02:39:50 (1 month ago)	Cloudflare WAF: Request Path: / Request Query: Host: elhacker.net userAgent: Mozilla/5.0 (Macintosh ... show more Cloudflare WAF: Request Path: / Request Query: Host: elhacker.net userAgent: Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.7180.54 Safari/537.36 Edg/146.0.2684.81 Action: block Source: ratelimit ASN Description: NIPA TECHNOLOGY CO., LTD Country: TH Method: GET Timestamp: 2026-05-04T02:39:50Z ruleId: 11a71ad4659e48b29b5173e3bcc61b4a. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
🇪🇸 el-brujo	2026-04-18 10:59:17 (1 month ago)	Cloudflare WAF: Request Path: /hh123 Request Query: Host: elhacker.net userAgent: Mozilla/5.0 (X11; ... show more Cloudflare WAF: Request Path: /hh123 Request Query: Host: elhacker.net userAgent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Action: block Source: l7ddos ASN Description: NIPA-AS-TH NIPA TECHNOLOGY CO., LTD Country: TH Method: GET Timestamp: 2026-04-18T10:59:17Z ruleId: 6e3ccc23900c428e8ec0fb8a3a679c52. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
🇨🇿 lp	2026-04-06 15:19:44 (2 months ago)	Email account brute force: 1 attempts were recorded from 202.129.206.239 2026-04-06T15:42:29+02:00 w ... show more Email account brute force: 1 attempts were recorded from 202.129.206.239 2026-04-06T15:42:29+02:00 warning: vpn.ns.co.th[202.129.206.239]: SASL PLAIN authentication failed: authentication failure, [email protected] show less	Brute-Force
🇨🇿 lp	2026-04-05 22:50:10 (2 months ago)	Email account brute force: 1 attempts were recorded from 202.129.206.239 2026-04-05T23:39:07+02:00 w ... show more Email account brute force: 1 attempts were recorded from 202.129.206.239 2026-04-05T23:39:07+02:00 warning: vpn.ns.co.th[202.129.206.239]: SASL PLAIN authentication failed: authentication failure, [email protected] show less	Brute-Force
🇩🇪 NoaQT	2026-04-05 14:53:06 (2 months ago)	202.129.206.239 - - [05/Apr/2026:16:52:59 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.instag ... show more 202.129.206.239 - - [05/Apr/2026:16:52:59 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.instagram.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 202.129.206.239 - - [05/Apr/2026:16:53:01 +0200] "GET /web/login HTTP/1.1" 499 0 "https://tech-advance.uk/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 202.129.206.239 - - [05/Apr/2026:16:53:01 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.instagram.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 202.129.206.239 - - [05/Apr/2026:16:53:01 +0200] "GET /web/login HTTP/1.1" 499 0 "https://tech-advance.uk/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" ... show less	DDoS Attack
🇩🇪 NoaQT	2026-04-05 14:34:54 (2 months ago)	202.129.206.239 - - [05/Apr/2026:16:30:37 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.newspr ... show more 202.129.206.239 - - [05/Apr/2026:16:30:37 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.newsprime.us/blog" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 202.129.206.239 - - [05/Apr/2026:16:30:37 +0200] "GET /web/login HTTP/1.1" 499 0 "https://future.net/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 202.129.206.239 - - [05/Apr/2026:16:30:37 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.pinterest.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 202.129.206.239 - - [05/Apr/2026:16:30:37 +0200] "GET /web/login HTTP/1.1" 499 0 "https://www.linkedin.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 202.129.206.239 - - [05/Apr/2026:16:30:37 +0200] "GET /web/login HTTP/1.1" 499 0 "https://app.super.co/blog" "Mozilla/5.0 (Macintosh; Intel ... show less	DDoS Attack
Anonymous	2026-04-05 05:00:04 (2 months ago)	BruteForce IMAP/POP3/SMTP	Brute-Force
Anonymous	2026-04-05 04:30:07 (2 months ago)	Failed login attempt detected by Fail2Ban in plesk-postfix jail	Brute-Force
🇩🇪 DocNetzwerk	2026-04-04 22:16:40 (2 months ago)	(smtpauth) Failed SMTP AUTH login from 202.129.206.239 (TH/Thailand/vpn.ns.co.th)	Brute-Force
🇮🇹 VHosting	2026-04-04 05:31:13 (2 months ago)	Detected mail brute force attack from 4 different servers	Brute-Force
🇨🇿 lp	2026-04-04 04:50:36 (2 months ago)	Email account brute force: 1 attempts were recorded from 202.129.206.239 2026-04-04T05:31:42+02:00 w ... show more Email account brute force: 1 attempts were recorded from 202.129.206.239 2026-04-04T05:31:42+02:00 warning: vpn.ns.co.th[202.129.206.239]: SASL PLAIN authentication failed: authentication failure, [email protected] show less	Brute-Force
🇮🇹 IRT@Unisi	2026-03-28 03:45:29 (2 months ago)	anomaly:tcp_dst_session,1001>threshold1000,repeats11989timessincelastlog	DDoS Attack
🇮🇳 liveaspankaj	2026-03-18 01:25:25 (2 months ago)	DDoS attack: 61 requests in 5m (GET / or repair.php).	DDoS Attack
🇮🇹 cheatmaster.store	2026-02-25 10:21:13 (3 months ago)	Automated report: This IP address has been identified as an active public open proxy. Classification ... show more Automated report: This IP address has been identified as an active public open proxy. Classification: Open Proxy \| Spoofing \| VPN/Anonymizer \| Bad Web Bot. Country: Thailand Threat level: High. This host is listed across multiple public proxy databases and poses a risk of abuse, credential stuffing, scraping, and spoofed traffic. Reported by automated threat intelligence pipeline. Do not whitelist without manual verification. show less	Web Spam Port Scan Web App Attack
🇨🇿 lp	2026-02-24 07:33:41 (3 months ago)	Email account brute force: 1 attempts were recorded from 202.129.206.239 2026-02-24T07:59:16+01:00 w ... show more Email account brute force: 1 attempts were recorded from 202.129.206.239 2026-02-24T07:59:16+01:00 warning: vpn.ns.co.th[202.129.206.239]: SASL PLAIN authentication failed: authentication failure, [email protected] show less	Brute-Force

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.180.246.11

🇫🇷 80.241.219.199

🇺🇸 64.62.156.162

🇬🇧 2a06:4880:2000::2a

🇩🇪 198.186.130.38

🇧🇷 181.232.243.100

🇩🇪 164.92.161.148

🇺🇸 91.230.168.173

🇳🇱 45.148.10.141

🇺🇸 45.79.104.47

🇧🇪 34.156.235.122

🇪🇸 217.160.226.51

🇻🇳 203.113.174.95

🇧🇷 177.9.214.96

🇺🇸 104.243.35.120

🇧🇩 103.245.96.93

🇭🇰 103.103.245.61

🇲🇦 81.192.46.36

🇺🇸 52.186.178.175

🇸🇬 47.79.11.219