JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 120.29.152.242

120.29.152.242 was found in our database!

This IP was reported 308 times. Confidence of Abuse is 31%: ?

31%

ISP	PT HIPERNET INDODATA
Usage Type	Fixed Line ISP
ASN	AS38758
Domain Name	hyper.net.id
Country	🇮🇩 Indonesia
City	Jakarta, Jakarta

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 120.29.152.242

Whois 120.29.152.242

IP Abuse Reports for 120.29.152.242:

This IP address has been reported a total of 308 times from 29 distinct sources. 120.29.152.242 was first reported on February 11th 2023, and the most recent report was 12 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 diego	2026-09-01 09:53:29 (12 hours ago)	[rede-arem1] 09/01/2026-06:53:29.570080, 120.29.152.242, Protocol: 6, ET SCAN Suspicious inbound to ... show more [rede-arem1] 09/01/2026-06:53:29.570080, 120.29.152.242, Protocol: 6, ET SCAN Suspicious inbound to mySQL port 3306 show less	Hacking
🇫🇷 Hiigara	2026-08-20 17:01:24 (1 week ago)	connection attempt : 120.29.152.242 on port : tcp/1433 (MSSQL)	Port Scan
🇲🇾 Rizzy	2026-08-20 03:01:23 (1 week ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-08-19 07:52:24 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 120.29.152.242 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 120.29.152.242 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 19 03:52:12.876104 2026] [security2:error] [pid 27813:tid 27813] [client 120.29.152.242:49187] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 120.29.152.242 (+1 hits since last alert)\|gaeltv.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "gaeltv.com"] [uri "/xmlrpc.php"] [unique_id "aoVgrKZwx81s1NA45or1fQAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-19 07:18:23 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 120.29.152.242 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 120.29.152.242 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 19 03:18:13.552873 2026] [security2:error] [pid 3987:tid 3987] [client 120.29.152.242:62539] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 120.29.152.242 (+1 hits since last alert)\|newlifecommunitycare.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "newlifecommunitycare.org"] [uri "/xmlrpc.php"] [unique_id "aoVYtbQZks6x875t2kRs4gAAACI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-19 05:19:46 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 120.29.152.242 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 120.29.152.242 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 19 01:19:32.015498 2026] [security2:error] [pid 20728:tid 20728] [client 120.29.152.242:57880] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 120.29.152.242 (+1 hits since last alert)\|surviquo.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "surviquo.com"] [uri "/xmlrpc.php"] [unique_id "aoU85BsD6dMcNFwn98jjjAAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Lee Daniel	2026-08-19 04:45:32 (1 week ago)	[19/Aug/2026:00:45:12.568681 --0400] aoU02FQ98brdKN2xuVGfJAAAAAs 120.29.152.242 45880 127.0.0.1 7081 ... show more [19/Aug/2026:00:45:12.568681 --0400] aoU02FQ98brdKN2xuVGfJAAAAAs 120.29.152.242 45880 127.0.0.1 7081 [19/Aug/2026:00:45:20.920245 --0400] aoU04HmUH7IoIY5aebK0ngAAAEc 120.29.152.242 59770 127.0.0.1 7081 [19/Aug/2026:00:45:31.600351 --0400] aoU06ynZNDMilg32VzQ9PgAAAg0 120.29.152.242 32816 127.0.0.1 7081 ... show less	DDoS Attack Brute-Force
🇹🇷 rtbh.com.tr	2026-03-09 20:11:58 (5 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2026-03-06 20:11:55 (5 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇧🇷 diego	2026-02-19 01:49:10 (6 months ago)	[rede-arem1] 02/18/2026-22:49:10.636312, 120.29.152.242, Protocol: 6, ET SCAN Suspicious inbound to ... show more [rede-arem1] 02/18/2026-22:49:10.636312, 120.29.152.242, Protocol: 6, ET SCAN Suspicious inbound to mySQL port 3306 show less	Hacking
🇦🇹 FightAgainstAssholes!	2026-02-12 08:26:48 (6 months ago)	Bruteforce on SIP UDP 5060	Brute-Force
🇺🇸 Teknikal_Domain	2026-02-11 12:07:34 (6 months ago)	[Feb 11 07:07:33] NOTICE[53326] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:345@72. ... show more [Feb 11 07:07:33] NOTICE[53326] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '120.29.152.242:5060' (callid: e5f4a931393725e4f7a345) - No matching endpoint found [Feb 11 07:07:33] NOTICE[53326] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '120.29.152.242:5060' (callid: e5f4a931393725e4f7a345) - No matching endpoint found [Feb 11 07:07:33] NOTICE[53326] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '120.29.152.242:5060' (callid: e5f4a931393725e4f7a345) - Failed to authenticate ... show less	Fraud VoIP Brute-Force
🇨🇦 Aleigo Abuse	2026-02-11 09:54:49 (6 months ago)	Brute-Force SIP authentication failure detected	Fraud VoIP Hacking Brute-Force Exploited Host
🇺🇸 Teknikal_Domain	2026-02-09 07:01:21 (6 months ago)	[Feb 9 02:01:20] NOTICE[44077] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:905@72. ... show more [Feb 9 02:01:20] NOTICE[44077] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '120.29.152.242:5060' (callid: e5f4a689207357e4f7a905) - No matching endpoint found [Feb 9 02:01:20] NOTICE[44077] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '120.29.152.242:5060' (callid: e5f4a689207357e4f7a905) - No matching endpoint found [Feb 9 02:01:20] NOTICE[44077] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '120.29.152.242:5060' (callid: e5f4a689207357e4f7a905) - Failed to authenticate [Feb 9 02:01:20] NOTICE[44077] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '120.29.152.242:5060' (callid: e5f4a689207357e4f7a905) - No matching endpoint found ... show less	Fraud VoIP Brute-Force
🇫🇷 Provost-info	2026-02-06 07:58:57 (6 months ago)	Attack attempt on SIP server	Fraud VoIP Brute-Force

Showing 1 to 15 of 308 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 162.216.149.17

🇨🇳 111.22.79.35

🇨🇳 101.206.107.245

🇳🇱 91.92.241.79

🇳🇱 193.47.62.69

🇫🇮 193.32.204.199

🇳🇱 185.93.89.23

🇸🇬 168.144.41.166

🇮🇩 103.151.140.79

🇮🇩 103.118.82.254

🇷🇴 92.118.39.71

🇫🇷 91.231.89.89

🇺🇸 66.132.186.139

🇭🇰 35.241.94.116

🇪🇸 34.175.102.3

🇨🇦 20.220.227.7

🇰🇿 217.196.26.102

🇺🇸 173.236.246.239

🇭🇰 101.79.165.43

🇩🇪 94.130.148.24