This IP address has been reported a total of
5
times from
3 distinct
sources.
129.94.175.119 was first reported on
October 22nd 2026 , and the most recent report was
1 day ago Australia
with 5
reports.
The most common categories in these recent reports were:
Web App Attack
4
times;
Bad Web Bot
1
time;
Email Spam
1
time;
Port Scan
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇦🇺
rubixstudios
2026-10-23 14:00:02
(1 day ago)
Suspicious SMTP activity detected. Type: Repeated dropped SMTP connections (7 hits).
Email Spam
Port Scan
🇦🇺
paulshipley.com.au
2026-10-22 14:57:40
(2 days ago)
[Fri Oct 23 01:57:40.358979 2026] [security2:error] [pid 23409] [client 129.94.175.119:50558] [clien ...
show more
[Fri Oct 23 01:57:40.358979 2026] [security2:error] [pid 23409] [client 129.94.175.119:50558] [client 129.94.175.119] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "iaki.com.au"] [uri "/"] [unique_id "atokZP77vW5PCsTOzJIGAgAAAAk"]
...
show less
Web App Attack
🇦🇺
paulshipley.com.au
2026-10-22 14:34:01
(2 days ago)
[Fri Oct 23 01:34:00.561430 2026] [security2:error] [pid 21171] [client 129.94.175.119:57688] [clien ...
show more
[Fri Oct 23 01:34:00.561430 2026] [security2:error] [pid 21171] [client 129.94.175.119:57688] [client 129.94.175.119] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.com.au"] [uri "/"] [unique_id "atoe2Dxj2EGKC8dSHopX2QAAAAs"]
...
show less
Web App Attack
🇦🇺
paulshipley.com.au
2026-10-22 14:17:36
(2 days ago)
[Fri Oct 23 01:17:35.372262 2026] [security2:error] [pid 18568] [client 129.94.175.119:45716] [clien ...
show more
[Fri Oct 23 01:17:35.372262 2026] [security2:error] [pid 18568] [client 129.94.175.119:45716] [client 129.94.175.119] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "valueaddedpromotions.com.au"] [uri "/"] [unique_id "atoa_4azWGed9HE6T2fMPgAAABM"]
...
show less
Web App Attack
🇦🇺
2000cn.com.au
2026-10-22 13:46:23
(2 days ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-bad-user-agent
Web App Attack
Bad Web Bot
Showing 1 to
5
of 5 reports
