JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

129.226.131.6

Neutral Activity

Abuse confidence score ?

0% Low Risk

58 reports

13 reporters · latest 1 year ago

ISP	Tencent Building, Kejizhongyi Avenue
Usage Type	Data Center/Web Hosting/Transit
ASN	AS132203
Domain Name	tencent.com
Country	🇭🇰 Hong Kong
City	Hong Kong

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

129.226.131.6 has been reported 58 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 129.226.131.6

Export CSV

This IP address has been reported a total of 58 times from 13 distinct sources. 129.226.131.6 was first reported on September 6th 2023, and the most recent report was 1 year ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 SCHAPPY	2025-03-27 18:15:01 (1 year ago)	Brute-force attack to identify web exploits	Brute-Force Web App Attack
🇩🇪 SCHAPPY	2025-03-25 01:45:03 (1 year ago)	Brute-force attack to identify web exploits	Brute-Force Web App Attack
🇩🇪 SCHAPPY	2025-03-21 17:45:03 (1 year ago)	Brute-force attack to identify web exploits	Brute-Force Web App Attack
🇧🇪 ipcrusader	2024-08-28 07:42:52 (2 years ago)	./www/wp-content/uploads/Intercambio-con-Portugal-150x150.bmp	Exploited Host
Anonymous	2024-08-28 05:12:41 (2 years ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇩🇪 SCHAPPY	2024-08-27 05:45:05 (2 years ago)	Brute-force attack to identify web exploits	Brute-Force Web App Attack
Anonymous	2024-08-05 10:53:20 (2 years ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇺🇸 thefoofighter	2024-08-04 13:05:51 (2 years ago)	[Sun Aug 04 13:05:50.371669 2024] [:error] [pid 1170444] [client 129.226.131.6:30912] [client 129.22 ... show more [Sun Aug 04 13:05:50.371669 2024] [:error] [pid 1170444] [client 129.226.131.6:30912] [client 129.226.131.6] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.sourcemodding.com"] [uri "/img/history/valve/vh_0012.webp"] [unique_id "Zq98roEmkzBMRK0V0AqbWgAAAAc"] [Sun Aug 04 13:05:51.252507 2024] [:error] [pid 1170486] [client 129.226.131.6:45109] [client 129.226.131.6] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "C ... show less	Bad Web Bot Web App Attack
Anonymous	2024-08-04 07:12:40 (2 years ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇨🇦 polycoda	2024-08-03 19:44:00 (2 years ago)	Lots of 404 requests	Web App Attack
🇺🇸 thefoofighter	2024-08-03 06:32:43 (2 years ago)	[Sat Aug 03 06:32:29.942569 2024] [:error] [pid 1152007] [client 129.226.131.6:21183] [client 129.22 ... show more [Sat Aug 03 06:32:29.942569 2024] [:error] [pid 1152007] [client 129.226.131.6:21183] [client 129.226.131.6] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.sourcemodding.com"] [uri "/img/history/valve/vh_0093.webp"] [unique_id "Zq3O_VQXMIDqTiXEHf4cXAAAABA"] [Sat Aug 03 06:32:30.856115 2024] [:error] [pid 1152032] [client 129.226.131.6:7799] [client 129.226.131.6] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CR ... show less	Bad Web Bot Web App Attack
Anonymous	2024-08-03 05:21:02 (2 years ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2024-08-01 04:04:43 (2 years ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇺🇸 thefoofighter	2024-07-31 22:57:05 (2 years ago)	[Wed Jul 31 22:57:04.082447 2024] [:error] [pid 1112216] [client 129.226.131.6:25535] [client 129.22 ... show more [Wed Jul 31 22:57:04.082447 2024] [:error] [pid 1112216] [client 129.226.131.6:25535] [client 129.226.131.6] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.sourcemodding.com"] [uri "/img/blog/tuts/thumbs/wip_tut001.webp"] [unique_id "ZqrBQMg0177Td5W7oi37mQAAAAM"] [Wed Jul 31 22:57:04.985566 2024] [:error] [pid 1112247] [client 129.226.131.6:21856] [client 129.226.131.6] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [sever ... show less	Bad Web Bot Web App Attack
Anonymous	2024-07-31 02:42:16 (2 years ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH

Showing 1 to 15 of 58 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 20.163.12.208

🇺🇸 216.45.75.104

🇨🇳 193.112.192.91

🇮🇳 119.252.198.33

🇨🇳 117.173.156.172

🇧🇬 79.124.62.126

🇳🇱 77.239.124.45

🇸🇬 47.79.13.242

🇯🇵 40.74.68.248

🇧🇪 35.241.132.20

🇬🇧 35.203.210.132

🇨🇳 27.8.44.168

🇺🇸 20.163.10.217

🇺🇸 20.14.94.50

🇺🇸 2604:a880:400:d1:0:5:35ad:f001

🇨🇳 218.202.209.62

🇬🇧 200.138.46.157

🇳🇱 193.176.31.198

🇳🇱 193.47.62.69

🇬🇧 165.227.229.113