JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

192.253.209.129

Recent Activity

Abuse confidence score ?

69% Elevated

132 reports

56 reporters · latest 50 minutes ago

ISP	VPN Consumer New Jersey, United States of America
Usage Type	Data Center/Web Hosting/Transit
ASN	AS137409
Domain Name	vpnconsumer.com
Country	🇺🇸 United States of America
City	Jersey City, New Jersey

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 192.253.209.129

Export CSV

This IP address has been reported a total of 132 times from 56 distinct sources. 192.253.209.129 was first reported on February 17th 2025, and the most recent report was 50 minutes ago. In the last 60 days, the top reporter locations were: France with 4 reports; Netherlands with 4 reports; Germany with 2 reports. The most common categories in these recent reports were: Web App Attack 10 times; Brute-Force 6 times; Bad Web Bot 5 times; SQL Injection 1 time; Hacking 1 time; Other 2 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 dynamix	2026-10-02 10:36:58 (50 minutes ago)	Multiple WAF Violations	Web App Attack
🇨🇭 zynex	2026-10-02 08:34:31 (2 hours ago)	URL Probing: /core.php	Web App Attack
🇩🇪 AetherFox	2026-10-02 03:21:59 (8 hours ago)	AetherFox VoidGuard detected: [Fri Oct 02 03:21:59.078949 2026] [authz_core:error] [pid 935376:tid 9 ... show more AetherFox VoidGuard detected: [Fri Oct 02 03:21:59.078949 2026] [authz_core:error] [pid 935376:tid 935388] [client 192.253.209.129:53161] AH01630: client denied by server configuration: proxy:http://[MASKED]/bless.php [Fri Oct 02 03:21:59.079135 2026] [authz_core:error] [pid 935376:tid 935388] [client 192.253.209.129:53161] AH01630: client denied by server configuration: /var/www/html/ERRORpages/403.html [Fri Oct 02 03:21:59.193564 2026] [authz_core:error] [pid 935376:tid 935387] [client 192.253.209.129:53161] AH01630: client denied by server configuration: proxy:http://[MASKED]/O-Simple.php [Fri Oct 02 03:21:59.193738 2026] [authz_core:error] [pid 935376:tid 935387] [client 192.253.209.129:53161] AH01630: client denied by server configuration: /var/www/html/ERRORpages/403.html [Fri Oct 02 03:21:59.324363 2026] [authz_core:error] [pid 935376:tid 935394] [client 192.253.209.129:53161] AH01630: client denied by server configuration: proxy:http://[MASKED]/lock ... show less	Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-10-01 17:18:42 (18 hours ago)	Excessive multi-domain requests	Brute-Force
🇳🇱 DrLex0	2026-10-01 14:44:56 (20 hours ago)	Probing for WordPress and other various exploits, distributed attack from shitty 192.253.209.0/24 ne ... show more Probing for WordPress and other various exploits, distributed attack from shitty 192.253.209.0/24 network range . 192.253.209.129 80 - [01/Oct/2026:14:40:45 +0000] "GET /wp-admin/css/colors/midnight/admin.php HTTP/1.1" 404 2383 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 192.253.209.129 80 - [01/Oct/2026:14:43:30 +0000] "GET /wp-admin/maint/index.php HTTP/1.1" 404 2383 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 192.253.209.129 80 - [01/Oct/2026:14:44:56 +0000] "GET /wp-content/plugins/pwnd-1/ HTTP/1.1" 404 2383 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" show less	DDoS Attack Brute-Force Bad Web Bot Web App Attack
🇬🇧 consul.to	2026-10-01 10:44:01 (1 day ago)	Web attack/malicious scanning detected	Web App Attack
🇳🇱 Site.eu	2026-09-30 22:00:33 (1 day ago)	Excessive 404/403 errors	Brute-Force
🇫🇷 dynamix	2026-09-30 21:05:17 (1 day ago)	Multiple WAF Violations	Web App Attack
Anonymous	2026-09-30 15:50:13 (1 day ago)	\| [Normal/Canada] Aggressive IP 192.253.209.129 (~350 hits). Type: DoS Defender- Web server 400 erro ... show more \| [Normal/Canada] Aggressive IP 192.253.209.129 (~350 hits). Type: DoS Defender- Web server 400 error code show less	Web App Attack Hacking SQL Injection
🇫🇷 Baking333	2026-09-30 04:59:49 (2 days ago)	[redacted] 192.253.209.129 - - [30/Sep/2026:05:59:45 +0100] "GET /wp-admin/[redacted] HTTP/1.1" 301 ... show more [redacted] 192.253.209.129 - - [30/Sep/2026:05:59:45 +0100] "GET /wp-admin/[redacted] HTTP/1.1" 301 556 0/172 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" [redacted] 192.253.209.129 - - [30/Sep/2026:05:59:47 +0100] "GET /wp-content/plugins/[redacted] HTTP/1.1" 301 576 0/132 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" show less	Bad Web Bot Web App Attack
🇩🇪 netclix.gr	2026-09-30 04:49:18 (2 days ago)	(c5_web_scan) Custom5 Aggressive Web Scan 192.253.209.129 (US/United States/-): 3 in the last 4600 s ... show more (c5_web_scan) Custom5 Aggressive Web Scan 192.253.209.129 (US/United States/-): 3 in the last 4600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: default:80 192.253.209.129 - - [30/Sep/2026:07:49:13 +0300] "GET /bless.php HTTP/1.1" 404 409 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" default:80 192.253.209.129 - - [30/Sep/2026:07:49:13 +0300] "GET /O-Simple.php HTTP/1.1" 404 409 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" default:80 192.253.209.129 - - [30/Sep/2026:07:49:13 +0300] "GET /lock360.php HTTP/1.1" 404 409 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" show less	Port Scan
🇧🇪 cmbplf	2026-09-30 01:40:09 (2 days ago)	206 requests with url.path /.well-known/acme-challenge/.php	Brute-Force Bad Web Bot
🇳🇱 Site.eu	2026-09-29 10:39:15 (3 days ago)	Excessive 404/403 errors	Brute-Force
🇺🇸 TPI-Abuse	2026-09-29 09:15:25 (3 days ago)	(mod_security) mod_security (id:240000) triggered by 192.253.209.129 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240000) triggered by 192.253.209.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 05:15:19.182468 2026] [security2:error] [pid 28227:tid 29034] [client 192.253.209.129:53395] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|montanatribes.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "montanatribes.org"] [uri "/images/stories/themes.php"] [unique_id "aruBp_tutBTQST4iEtAn8wAAAJI"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-09-28 19:57:42 (3 days ago)	Multiple WAF Violations	Web App Attack

Showing 1 to 15 of 132 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 189.29.145.254

🇺🇸 100.50.17.159

🇺🇸 43.173.111.217

🇳🇱 193.176.31.238

🇳🇱 185.242.226.93

🇨🇳 111.36.63.105

🇳🇱 109.160.32.46

🇩🇪 102.220.161.64

🇳🇱 77.239.124.158

🇳🇱 77.91.71.3

🇮🇷 45.159.197.253

🇺🇸 45.156.129.57

🇺🇸 43.159.140.236

🇧🇷 34.95.155.200

🇩🇪 2a02:c202:2359:6931::1

🇺🇸 216.25.89.103

🇺🇿 213.230.92.55

🇨🇳 120.48.80.70

🇨🇳 117.72.108.255

🇺🇸 104.207.47.219