JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 129.204.125.142

129.204.125.142 was found in our database!

This IP was reported 53 times. Confidence of Abuse is 0%: ?

ISP	Tencent Cloud Computing (Beijing) Co., Ltd
Usage Type	Data Center/Web Hosting/Transit
ASN	AS45090
Domain Name	tencentcloud.com
Country	🇨🇳 China
City	Guangzhou, Guangdong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 129.204.125.142

Whois 129.204.125.142

IP Abuse Reports for 129.204.125.142:

This IP address has been reported a total of 53 times from 33 distinct sources. 129.204.125.142 was first reported on July 15th 2025, and the most recent report was 6 months ago.

Old Reports: The most recent abuse report for this IP address is from 6 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇳 ThreatBook.io	2026-01-26 23:05:21 (6 months ago)	ThreatBook Intelligence: Scanner,IDC more details on https://threatbook.io/ip/129.204.125.142 2026-0 ... show more ThreatBook Intelligence: Scanner,IDC more details on https://threatbook.io/ip/129.204.125.142 2026-01-26 01:17:43 / show less	Web App Attack
🇨🇳 ThreatBook.io	2026-01-05 22:44:18 (6 months ago)	ThreatBook Intelligence: Scanner,IDC more details on https://threatbook.io/ip/129.204.125.142	SSH
🇨🇳 ThreatBook.io	2025-12-15 22:55:45 (7 months ago)	ThreatBook Intelligence: Scanner,IDC more details on https://threatbook.io/ip/129.204.125.142	SSH
🇨🇳 ThreatBook.io	2025-12-14 22:50:25 (7 months ago)	ThreatBook Intelligence: Scanner,IDC more details on https://threatbook.io/ip/129.204.125.142	SSH
🇨🇳 ThreatBook.io	2025-12-13 22:43:15 (7 months ago)	ThreatBook Intelligence: Scanner,IDC more details on https://threatbook.io/ip/129.204.125.142	SSH
🇨🇳 ThreatBook.io	2025-12-06 22:39:01 (7 months ago)	ThreatBook Intelligence: Scanner,IDC more details on https://threatbook.io/ip/129.204.125.142 2025-1 ... show more ThreatBook Intelligence: Scanner,IDC more details on https://threatbook.io/ip/129.204.125.142 2025-12-06 03:43:08 /old.rar 2025-12-06 03:43:05 /27.128.198.62.rar 2025-12-06 03:43:07 /index.rar 2025-12-06 03:43:07 /wwwroot.rar 2025-12-06 03:43:09 /upload.rar 2025-12-06 03:43:10 /wangzhan.rar 2025-12-06 03:43:06 /wz.rar 2025-12-06 03:43:06 /2712819862.rar 2025-12-06 03:43:09 /web.rar 2025-12-06 03:43:06 /sql.rar show less	Web App Attack
🇨🇳 ThreatBook.io	2025-11-17 22:46:05 (8 months ago)	ThreatBook Intelligence: IDC more details on http://threatbook.io/ip/129.204.125.142 2025-11-17 11:1 ... show more ThreatBook Intelligence: IDC more details on http://threatbook.io/ip/129.204.125.142 2025-11-17 11:13:18 / 2025-11-17 11:13:18 / show less	SSH
🇫🇷 COMAITE	2025-10-29 20:22:22 (8 months ago)	Multiple web server 400 error codes from same source ip 129.204.125.142.	Web App Attack
🇪🇸 robotstxt	2025-10-29 02:33:31 (8 months ago)	129.204.125.142 - - [29/Oct/2025:02:25:45 +0000] "HEAD /mail.rar HTTP/1.1" 404 0 "-" rt="0.125" "pyt ... show more 129.204.125.142 - - [29/Oct/2025:02:25:45 +0000] "HEAD /mail.rar HTTP/1.1" 404 0 "-" rt="0.125" "python-requests/2.31.0" "-" h="82.152.2.179" sn="blog.aromasdecafe.es" ru="/mail.rar" u="/index.php" ucs="-" ua="unix:/var/run/php/aromasdecafe82.sock" us="404" uct="0.000" urt="0.125" 129.204.125.142 - - [29/Oct/2025:02:25:45 +0000] "HEAD /mail.rar HTTP/1.1" 404 0 "-" "python-requests/2.31.0" "-" 129.204.125.142 - - [29/Oct/2025:02:29:27 +0000] "HEAD /mail.zip HTTP/1.1" 404 0 "-" rt="0.130" "python-requests/2.31.0" "-" h="82.152.2.179" sn="blog.aromasdecafe.es" ru="/mail.zip" u="/index.php" ucs="-" ua="unix:/var/run/php/aromasdecafe82.sock" us="404" uct="0.000" urt="0.130" 129.204.125.142 - - [29/Oct/2025:02:29:27 +0000] "HEAD /mail.zip HTTP/1.1" 404 0 "-" "python-requests/2.31.0" "-" 129.204.125.142 - - [29/Oct/2025:02:33:13 +0000] "HEAD /mail.tar.gz HTTP/1.1" 404 0 "-" rt="3.114" "python-requests/2.31.0" "-" h="82.152.2.179" sn="blog.aromasdecafe.es" ru="/mail.tar.gz" u="/index.php" ucs= ... show less	Bad Web Bot
🇫🇷 mouafiq	2025-10-28 20:37:14 (8 months ago)	2025-10-28 20:37:12,653 30013 INFO ? werkzeug: 129.204.125.142 - - [28/Oct/2025 20:37:12] "HEAD /51. ... show more 2025-10-28 20:37:12,653 30013 INFO ? werkzeug: 129.204.125.142 - - [28/Oct/2025 20:37:12] "HEAD /51.254.126.163.rar HTTP/1.0" 404 - 1 0.002 0.007 2025-10-28 20:37:12,920 17125 INFO ? werkzeug: 129.204.125.142 - - [28/Oct/2025 20:37:12] "HEAD /51254126163.rar HTTP/1.0" 404 - 1 0.002 0.007 2025-10-28 20:37:13,185 30013 INFO ? werkzeug: 129.204.125.142 - - [28/Oct/2025 20:37:13] "HEAD /wz.rar HTTP/1.0" 404 - 1 0.002 0.005 2025-10-28 20:37:13,547 17125 INFO ? werkzeug: 129.204.125.142 - - [28/Oct/2025 20:37:13] "HEAD /sql.rar HTTP/1.0" 404 - 1 0.002 0.009 2025-10-28 20:37:13,830 30013 INFO ? werkzeug: 129.204.125.142 - - [28/Oct/2025 20:37:13] "HEAD /wwwroot.rar HTTP/1.0" 404 - 1 0.002 0.005 show less	Brute-Force SSH
🇦🇺 2000cn.com.au	2025-10-26 08:30:33 (9 months ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing	Hacking Web App Attack
🇨🇭 YF	2025-10-25 15:05:02 (9 months ago)	Attempted access to sensitive files	Web App Attack
🇩🇪 uhlhosting	2025-10-25 10:33:43 (9 months ago)	elements.uhl.cloud 129.204.125.142 - - [25/Oct/2025:12:33:41.197409 +0200] "HEAD /elements.uhl.cloud ... show more elements.uhl.cloud 129.204.125.142 - - [25/Oct/2025:12:33:41.197409 +0200] "HEAD /elements.uhl.cloud.rar HTTP/1.1" 403 0 "-" "-" aPynhQGM15vaCXNidp5SMgAAAEk "-" /apache/20251025/20251025-1233/20251025-123341-aPynhQGM15vaCXNidp5SMgAAAEk 0 1675 md5:78a5ea482c7bc55517d5747934d8757f elements.uhl.cloud 129.204.125.142 - - [25/Oct/2025:12:33:42.219277 +0200] "HEAD /elementsuhlcloud.rar HTTP/1.1" 403 0 "-" "-" aPynhgGM15vaCXNidp5SMwAAAEw "-" /apache/20251025/20251025-1233/20251025-123342-aPynhgGM15vaCXNidp5SMwAAAEw 0 1670 md5:bd5fd0f101440f83c454aa41d90149c4 elements.uhl.cloud 129.204.125.142 - - [25/Oct/2025:12:33:43.032297 +0200] "HEAD /wz.rar HTTP/1.1" 403 0 "-" "-" aPynhwGM15vaCXNidp5SNQAAAEg "-" /apache/20251025/20251025-1233/20251025-123343-aPynhwGM15vaCXNidp5SNQAAAEg 0 1642 md5:7aa37dbeefebaa25c79e61b7d8d294ac elements.uhl.cloud 129.204.125.142 - - [25/Oct/2025:12:33:43.247619 +0200] "HEAD /sql.rar HTTP/1.1" 403 0 "-" "-" aPynhwGM15vaCXNidp5SNgAAAE0 "-" /apache/20251025/20251025-123 ... show less	DDoS Attack Brute-Force
🇦🇺 2000cn.com.au	2025-10-25 02:20:13 (9 months ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing	Hacking Web App Attack
🇦🇺 QT	2025-10-23 14:20:21 (9 months ago)	Website hack attempted at 2025-10-24 00:20:19 +1000	Web App Attack

Showing 1 to 15 of 53 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 186.209.52.199

🇧🇷 172.69.39.106

🇺🇸 143.42.1.84

🇨🇳 124.31.107.152

🇺🇸 104.28.202.179

🇹🇷 78.189.126.113

🇳🇱 45.156.128.61

🇦🇺 223.27.17.37

🇺🇦 194.44.119.55

🇩🇰 185.135.10.232

🇬🇷 176.92.101.133

🇧🇷 172.71.6.237

🇳🇱 160.119.71.135

🇺🇸 136.117.48.197

🇺🇸 128.203.200.182

🇨🇳 116.179.37.58

🇺🇸 104.207.43.22

🇷🇺 89.31.188.154

🇩🇪 87.156.185.61

🇨🇳 60.13.7.24