JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 70.153.129.43

70.153.129.43 was found in our database!

This IP was reported 905 times. Confidence of Abuse is 67%: ?

67%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇮🇩 Indonesia
City	Jakarta, Jakarta

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 70.153.129.43

Whois 70.153.129.43

IP Abuse Reports for 70.153.129.43:

This IP address has been reported a total of 905 times from 228 distinct sources. 70.153.129.43 was first reported on February 27th 2026, and the most recent report was 8 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-10-27 09:02:51 (8 minutes ago)	Blocked by UFW (TCP on 3000) Source port: 43651 TTL: 239 Packet length: 40 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 3000) Source port: 43651 TTL: 239 Packet length: 40 TOS: 0x00 This report (for 70.153.129.43) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 FeG Deutschland	2026-10-18 15:40:25 (1 week ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247	Exploited Host Web App Attack
🇺🇸 1cyb3rpunk	2026-10-16 18:30:00 (1 week ago)	Honeypot interaction [EXPLOIT]: php_webshell_probe on /wp-content/plugins/tinymce-advanced/block-edi ... show more Honeypot interaction [EXPLOIT]: php_webshell_probe on /wp-content/plugins/tinymce-advanced/block-editor/bd.php. MITRE: T1204 (User Execution). UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:155.0) Gecko/20100101 Firefox/155.0. Observed on sectrace.org honeypot surface — automated scanner/attacker activity. show less	Exploited Host Hacking
🇬🇧 gigatech	2026-10-13 05:50:03 (2 weeks ago)	Webserver Probing	Web App Attack
🇬🇷 setupgr	2026-10-13 05:11:42 (2 weeks ago)	(wplogin_block) Blocked WP-Login Access Attempt 70.153.129.43 (ID/Indonesia/Jakarta/Jakarta/-/[AS807 ... show more (wplogin_block) Blocked WP-Login Access Attempt 70.153.129.43 (ID/Indonesia/Jakarta/Jakarta/-/[AS8075 Microsoft Corporation]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 70.153.129.43 - - [13/Oct/2026:08:10:39 +0300] "POST /wp-login.php HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.43 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36 OPR/121.0.0.0" show less	Port Scan
🇬🇷 setupgr	2026-10-12 23:17:47 (2 weeks ago)	(wplogin_block) Blocked WP-Login Access Attempt 70.153.129.43 (ID/Indonesia/Jakarta/Jakarta/-/[AS807 ... show more (wplogin_block) Blocked WP-Login Access Attempt 70.153.129.43 (ID/Indonesia/Jakarta/Jakarta/-/[AS8075 Microsoft Corporation]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 70.153.129.43 - - [13/Oct/2026:02:12:47 +0300] "POST /wp-login.php HTTP/1.1" 200 9871 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36 Edg/141.0.0.0" show less	Port Scan
🇫🇷 pm33	2026-10-12 19:55:38 (2 weeks ago)	Wordpress login attempts	Brute-Force
🇬🇧 ebandwagon	2026-10-12 18:15:33 (2 weeks ago)	WordPress login brute force: 2 failed logins across 2 independent sites in 24h (BeeLine Login Sentin ... show more WordPress login brute force: 2 failed logins across 2 independent sites in 24h (BeeLine Login Sentinel) show less	Brute-Force Web App Attack
🇫🇷 masterguru	2026-10-12 17:40:33 (2 weeks ago)	wp-login request blocked, no referer. Pattern match "wp-login.php" at REQUEST_URI. (88020-197)	Hacking
🇫🇷 masterguru	2026-10-12 13:58:04 (2 weeks ago)	wp-login request blocked, no referer. Pattern match "wp-login.php" at REQUEST_URI. (88020-193)	Hacking
🇫🇷 LRob	2026-10-12 04:45:50 (2 weeks ago)	WordPress login brute force \| path: /wp-login.php \| ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv ... show more WordPress login brute force \| path: /wp-login.php \| ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Firefox/140.0 show less	Brute-Force Web App Attack
🇭🇺 bcsaba	2026-10-12 02:58:14 (2 weeks ago)	CMS (WordPress or Joomla) login attempt. 70.153.129.43 - - [12/Oct/2026:04:58:13 +0200] "POST /wp-lo ... show more CMS (WordPress or Joomla) login attempt. 70.153.129.43 - - [12/Oct/2026:04:58:13 +0200] "POST /wp-login.php HTTP/1.1" 200 4313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.43 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 OPR/123.0.0.0" show less	Hacking Brute-Force Web App Attack
🇫🇮 6kilowatti	2026-10-11 22:32:43 (2 weeks ago)	70.153.129.43 - - [12/Oct/2026:01:32:42 +0300] "POST /wp-login.php HTTP/1.1" 404 13469 "-" "Mozilla/ ... show more 70.153.129.43 - - [12/Oct/2026:01:32:42 +0300] "POST /wp-login.php HTTP/1.1" 404 13469 "-" "Mozilla/5.0 (Windows NT 10.0; rv:145.0) Gecko/20100101 Firefox/145.0" 70.153.129.43 - [12/Oct/2026:01:32:42 +0300] "POST /wp-login.php HTTP/1.1" 404 20480 "-" "Mozilla/5.0 (Windows NT 10.0; rv:145.0) Gecko/20100101 Firefox/145.0" ... show less	Web App Attack
🇺🇸 cwytech	2026-10-11 20:48:49 (2 weeks ago)	Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/wp-us-login-only-high.	Bad Web Bot Web App Attack
Anonymous	2026-10-11 15:36:41 (2 weeks ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack

Showing 1 to 15 of 905 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇦 213.59.165.127

🇳🇱 138.226.239.19

🇲🇾 203.121.40.210

🇫🇷 144.91.103.172

🇨🇳 112.51.5.102

🇧🇩 103.159.2.113

🇫🇷 91.196.152.189

🇳🇱 23.97.182.38

🇺🇸 13.86.117.219

🇰🇷 211.104.198.147

🇳🇱 190.2.154.238

🇦🇷 186.159.120.8

🇸🇬 150.109.16.200

🇺🇸 109.105.210.59

🇨🇦 85.217.149.51

🇷🇺 85.158.184.173

🇩🇪 64.89.160.21

🇺🇸 38.148.20.75

🇭🇰 36.255.220.145

🇫🇷 164.68.123.246