JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 172.202.29.124

172.202.29.124 was found in our database!

This IP was reported 156 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Des Moines, Iowa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 172.202.29.124

Whois 172.202.29.124

IP Abuse Reports for 172.202.29.124:

This IP address has been reported a total of 156 times from 144 distinct sources. 172.202.29.124 was first reported on July 17th 2026, and the most recent report was 1 second ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 4server	2026-07-17 19:37:34 (1 second ago)	[FriJul1721:37:31.5787262026][security2:error][pid1528785:tid1529031][client172.202.29.124:0]ModSecu ... show more [FriJul1721:37:31.5787262026][security2:error][pid1528785:tid1529031][client172.202.29.124:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\"wp-config\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"365\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"cpcontacts.lemox.ch\"][uri\"/wp-configer.php\"][unique_id\"alqEe8cHXMjdBHCiik7T5wAAAFA\"] show less	Hacking Web App Attack
🇩🇪 Viveronese	2026-07-17 19:35:11 (2 minutes ago)	HTTP vulnerability scanning	Web App Attack
Anonymous	2026-07-17 19:29:40 (7 minutes ago)	Fail2Ban repeated offender detected	Brute-Force
🇩🇪 0x44	2026-07-17 19:23:27 (14 minutes ago)	Web probing - backdoors/webshells with missing User-Agent	Bad Web Bot Web App Attack
🇩🇪 KiekerJan	2026-07-17 19:21:54 (15 minutes ago)	172.202.29.124 - - [17/Jul/2026:21:21:52 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 172.202.29.124 - - [17/Jul/2026:21:21:52 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 172.202.29.124 - - [17/Jul/2026:21:21:53 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 146 "-" "-" ... show less	Web App Attack
🇸🇬 pusathosting.com	2026-07-17 19:20:05 (17 minutes ago)	24ds22 bruteforce	Brute-Force Web App Attack
🇬🇧 OptimusGO	2026-07-17 19:19:51 (17 minutes ago)	Malicious activity detected: web_attack Server: commstackbc (185.127.18.66) Attack: web_attack Time ... show more Malicious activity detected: web_attack Server: commstackbc (185.127.18.66) Attack: web_attack Timestamp: 2026-07-17 20:19:50 UTC Log evidence: 172.202.29.124 - - [17/Jul/2026:20:18:13 +0100] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 146 "-" "-" 172.202.29.124 - - [17/Jul/2026:20:18:14 +0100] "GET /wp-check.php HTTP/1.1" 404 146 "-" "-" 172.202.29.124 - - [17/Jul/2026:20:18:14 +0100] "GET /wp-logins.php HTTP/1.1" 404 146 "-" "-" show less	Port Scan Brute-Force
🇳🇱 ReyhZhao	2026-07-17 19:14:28 (23 minutes ago)	Bunkerweb ModSecurity alert: Potential Remote Command Execution (RCE) detected. Unix shell code was ... show more Bunkerweb ModSecurity alert: Potential Remote Command Execution (RCE) detected. Unix shell code was identified within the request arguments, triggering a security rule designed to prevent application attacks. show less	Brute-Force
Anonymous	2026-07-17 19:14:18 (23 minutes ago)	Aggressive Robot or Attack DDOS	DDoS Attack
🇺🇸 itsnixk	2026-07-17 19:11:32 (26 minutes ago)	(mod_security) mod_security (id:930130) triggered by 172.202.29.124 (US/United States/-): 1 in the l ... show more (mod_security) mod_security (id:930130) triggered by 172.202.29.124 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Fri Jul 17 15:11:27.305229 2026] [security2:error] [pid 354237:tid 354350] [client 172.202.29.124:64364] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "config.php" at REQUEST_FILENAME. [file "/etc/modsecurity.d/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "150"] [id "930130"] [msg "Restricted File Access Attempt"] [redacted] [severity "CRITICAL"] [ver "OWASP_CRS/4.27.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/ATTACK-LFI"] [tag "capec/1000/255/153/126"] [redacted] [uri "/config.php7"] [unique_id "alp-X0GGbuXiZY0u9vNqKAAAAB4"] show less	Port Scan
Anonymous	2026-07-17 19:06:57 (30 minutes ago)	172.202.29.124 detected on srv01	Brute-Force
🇫🇷 lindi	2026-07-17 19:05:00 (32 minutes ago)	Probing for resource vulnerabilities ...	Web Spam Brute-Force Bad Web Bot Exploited Host Web App Attack
🇺🇸 lavnet.net	2026-07-17 19:00:56 (36 minutes ago)	172.202.29.124 - - [17/Jul/2026:19:00:55 +0000] "GET /202.0.php HTTP/1.1" 404 6073 "-" "-" 172.202.2 ... show more 172.202.29.124 - - [17/Jul/2026:19:00:55 +0000] "GET /202.0.php HTTP/1.1" 404 6073 "-" "-" 172.202.29.124 - - [17/Jul/2026:19:00:55 +0000] "GET /rss.php HTTP/1.1" 404 2050 "-" "-" 172.202.29.124 - - [17/Jul/2026:19:00:55 +0000] "GET /rss.php HTTP/1.1" 404 2050 "-" "-" 172.202.29.124 - - [17/Jul/2026:19:00:55 +0000] "GET /alexus-mailer.php HTTP/1.1" 404 2050 "-" "-" 172.202.29.124 - - [17/Jul/2026:19:00:55 +0000] "GET /alexus-mailer.php HTTP/1.1" 404 2050 "-" "-" ... show less	Brute-Force
🇩🇪 ger-stg-sifi1	2026-07-17 19:00:35 (37 minutes ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
🇮🇩 sockominfo	2026-07-17 19:00:28 (37 minutes ago)	Reported by TangerangKota-CSIRT. Status: MALICIOUS	Hacking Email Spam

Showing 1 to 15 of 156 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 220.184.25.101

🇰🇷 125.143.244.159

🇨🇦 54.39.210.85

🇳🇴 4.235.96.243

🇩🇪 2.26.51.29

🇩🇪 2a09:bac5:2f19:18fa::27d:7a

🇧🇷 2804:8480:1317:ca01:a551:89e2:62b2:8e8c

🇺🇸 173.46.91.247

🇨🇳 118.81.200.36

🇨🇦 85.217.149.15

🇨🇦 54.39.210.44

🇨🇦 54.39.89.72

🇱🇹 45.227.254.170

🇺🇸 40.77.167.159

🇩🇪 23.88.50.193

🇰🇷 203.252.10.4

🇺🇸 159.89.227.210

🇺🇸 130.51.22.28

🇸🇬 103.189.234.96

🇨🇦 54.39.203.102