JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 116.204.169.2

116.204.169.2 was found in our database!

This IP was reported 467 times. Confidence of Abuse is 100%: ?

100%

ISP	MOACK DC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS138195
Domain Name	moack.co.kr
Country	🇰🇷 Korea (the Republic of)
City	Seoul, Seoul

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 116.204.169.2

Whois 116.204.169.2

IP Abuse Reports for 116.204.169.2:

This IP address has been reported a total of 467 times from 241 distinct sources. 116.204.169.2 was first reported on May 20th 2026, and the most recent report was 18 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Execoop	2026-08-24 09:45:53 (18 hours ago)	API LLMjacking (Ollama) (observed): 30 HTTP, 9s; attempted cryptomining; Ollama: /api/chat,/api/gene ... show more API LLMjacking (Ollama) (observed): 30 HTTP, 9s; attempted cryptomining; Ollama: /api/chat,/api/generate show less	Hacking Web App Attack
🇺🇸 heyzg	2026-08-24 09:40:03 (18 hours ago)	API LLMjacking (Ollama) (observed): 30 HTTP, 15s; attempted cryptomining; Ollama: /api/chat,/api/gen ... show more API LLMjacking (Ollama) (observed): 30 HTTP, 15s; attempted cryptomining; Ollama: /api/chat,/api/generate show less	Hacking Web App Attack
🇯🇵 Execoop	2026-08-24 09:30:49 (18 hours ago)	API LLMjacking (Ollama) (observed): 30 HTTP, 5s; attempted cryptomining; Ollama: /api/chat,/api/gene ... show more API LLMjacking (Ollama) (observed): 30 HTTP, 5s; attempted cryptomining; Ollama: /api/chat,/api/generate show less	Hacking Web App Attack
🇸🇬 heyzg	2026-08-24 07:21:54 (21 hours ago)	API LLMjacking (Ollama) (observed): 30 HTTP, 5s; attempted cryptomining; Ollama: /api/chat,/api/gene ... show more API LLMjacking (Ollama) (observed): 30 HTTP, 5s; attempted cryptomining; Ollama: /api/chat,/api/generate show less	Hacking Web App Attack
🇩🇪 heyzg	2026-08-24 07:06:54 (21 hours ago)	API LLMjacking (Ollama) (observed): 30 HTTP, 14s; attempted cryptomining; Ollama: /api/chat,/api/gen ... show more API LLMjacking (Ollama) (observed): 30 HTTP, 14s; attempted cryptomining; Ollama: /api/chat,/api/generate show less	Hacking Web App Attack
🇵🇱 Budyn	2026-08-24 02:38:51 (1 day ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: 0bit.budyn.ovh \| URI: /.env \| UA: Mozilla/5.0 (compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot) \| BODY: [Empty / GET Request] show less	Hacking Web App Attack
🇵🇱 Budyn	2026-08-22 15:58:34 (2 days ago)	Budyn SOC Canary Trap: AWS Key Compromised! \| Memo: AWS_Token_12 \| Action: AWS API Call \| Token: akf ... show more Budyn SOC Canary Trap: AWS Key Compromised! \| Memo: AWS_Token_12 \| Action: AWS API Call \| Token: akf9s74n5eldbzbpzbzf5lt45 \| Client Tool: python-requests/2.34.2 show less	Hacking Bad Web Bot Web App Attack
🇦🇹 joe-abuse	2026-08-22 01:40:33 (3 days ago)	Automated report from fail2ban on www.fitzgerald.eu. Jail: recidive. First seen: 2026-08-20 01:31:46 ... show more Automated report from fail2ban on www.fitzgerald.eu. Jail: recidive. First seen: 2026-08-20 01:31:46. Events: 15. Reported by ipdb-security/fitzgerald.eu show less	Email Spam Brute-Force
🇩🇪 wpadm4	2026-08-20 15:53:26 (4 days ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇩🇪 tikket	2026-08-18 22:42:44 (6 days ago)	Automated honeypot report: fail2ban 'caddy-honeypot' ban. Source probed honeypot/recon endpoints on ... show more Automated honeypot report: fail2ban 'caddy-honeypot' ban. Source probed honeypot/recon endpoints on void.xn--q9jyb4c. show less	Bad Web Bot Web App Attack
🇧🇪 boxed-it	2026-08-18 16:42:09 (6 days ago)	GET /.git/config (Tarpitted for 4m20s, wasted 15.35kB)	Web App Attack
🇺🇸 k3rn3l109	2026-08-18 10:03:39 (6 days ago)	Sentinel honeypot: exploit-attempt hit on minio.edgecdnhub.com UA=Mozilla/5.0	Hacking
🇫🇷 GabrielJST	2026-08-16 15:22:55 (1 week ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 116.204.169.2 (KR/So ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 116.204.169.2 (KR/South Korea/-) show less	Bad Web Bot
🇨🇦 Mediashaker	2026-08-16 12:28:50 (1 week ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 116.204.169.2 (KR/So ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 116.204.169.2 (KR/South Korea/-) show less	Bad Web Bot
🇬🇧 consul.to	2026-08-16 09:30:44 (1 week ago)	Web attack/malicious scanning detected	Web App Attack

Showing 1 to 15 of 467 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 193.176.31.233

🇦🇷 181.104.43.225

🇨🇳 180.76.202.69

🇵🇰 110.38.3.26

🇿🇦 102.129.61.125

🇺🇦 95.46.143.39

🇳🇱 94.154.43.234

🇫🇷 91.231.89.235

🇫🇷 91.231.89.174

🇫🇷 85.217.140.47

🇵🇰 72.255.18.157

🇺🇸 69.73.187.130

🇳🇱 45.148.10.157

🇬🇧 35.203.210.25

🇰🇷 222.116.48.103

🇩🇪 209.38.237.29

🇺🇸 205.210.31.71

🇳🇱 195.178.110.218

🇺🇸 172.86.114.38

🇩🇪 149.224.49.50