JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 192.81.129.47

192.81.129.47 was found in our database!

This IP was reported 25 times. Confidence of Abuse is 100%: ?

100%

ISP	Linode
Usage Type	Data Center/Web Hosting/Transit
ASN	AS63949
Domain Name	linode.com
Country	🇺🇸 United States of America
City	Fremont, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 192.81.129.47

Whois 192.81.129.47

IP Abuse Reports for 192.81.129.47:

This IP address has been reported a total of 25 times from 25 distinct sources. 192.81.129.47 was first reported on August 31st 2026, and the most recent report was 7 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-09-01 13:28:30 (7 hours ago)	Backdrop CMS module - malicious activity detected	Bad Web Bot Web App Attack
🇱🇻 garmtech.com	2026-09-01 11:04:16 (10 hours ago)	Attempted access to sensitive endpoint (/wp-login.php) detected. Automated scan or unauthorized prob ... show more Attempted access to sensitive endpoint (/wp-login.php) detected. Automated scan or unauthorized probing. show less	Web App Attack
🇩🇪 AetherFox	2026-09-01 09:49:33 (11 hours ago)	AetherFox VoidGuard detected: [Tue Sep 01 09:49:30.866553 2026] [authz_core:error] [pid 191234:tid 1 ... show more AetherFox VoidGuard detected: [Tue Sep 01 09:49:30.866553 2026] [authz_core:error] [pid 191234:tid 191241] [client 192.81.129.47:57158] AH01630: client denied by server configuration: proxy:https://[MASKED]/, referer: https://dranet.de [Tue Sep 01 09:49:31.340799 2026] [authz_core:error] [pid 191234:tid 191236] [client 192.81.129.47:57158] AH01630: client denied by server configuration: proxy:https://[MASKED]/administrator/, referer: https://dranet.de/administrator/ [Tue Sep 01 09:49:32.157672 2026] [authz_core:error] [pid 191234:tid 191244] [client 192.81.129.47:60092] AH01630: client denied by server configuration: proxy:https://[MASKED]/administrator/manifests/files/joomla.xml, referer: https://dranet.de/administrator/manifests/files/joomla.xml [Tue Sep 01 09:49:32.631300 2026] [authz_core:error] [pid 191234:tid 191247] [client 192.81.129.47:60092] AH01630: client denied by server configuration: proxy:https://[MASKED]/language/en-GB/en-GB.xml, referer ... show less	Bad Web Bot Web App Attack
Anonymous	2026-09-01 09:00:45 (12 hours ago)	Aggressive web scan	Bad Web Bot Web App Attack
🇩🇪 patrisei	2026-09-01 08:58:21 (12 hours ago)	You are now banned for 10 years by Schiffdorf-West Patrol. Trigger: crowdsecurity/http-admin-interfa ... show more You are now banned for 10 years by Schiffdorf-West Patrol. Trigger: crowdsecurity/http-admin-interface-probing show less	Port Scan Web App Attack
Anonymous	2026-09-01 08:50:32 (12 hours ago)	nginx-444 from fail2ban ...	Web App Attack
Anonymous	2026-09-01 08:50:08 (12 hours ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-admin-interface-probing	Web App Attack Hacking
Anonymous	2026-09-01 08:49:57 (12 hours ago)	Web probing (154 hits in 24h) on default-vhost: sensitive-path scans and/or 404 bursts. Reported by ... show more Web probing (154 hits in 24h) on default-vhost: sensitive-path scans and/or 404 bursts. Reported by CRMON. show less	Web App Attack
🇬🇧 Smish	2026-09-01 07:36:36 (13 hours ago)	HONEYPOT HIT --> Fail2ban time=1788248194 log=2026-09-01T08:36:34+01:00 ip=192.81.129.47 host=as2106 ... show more HONEYPOT HIT --> Fail2ban time=1788248194 log=2026-09-01T08:36:34+01:00 ip=192.81.129.47 host=as210667.net method=GET uri="/administrator/" status=404 ua="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ref="-" rid=16094550d8215b71e3eeec6b45d30479 show less	Web App Attack
Anonymous	2026-09-01 04:05:30 (17 hours ago)	192.81.129.47 - - [01/Sep/2026:01:05:29 -0300] "GET /administrator/ HTTP/2.0" 404 548 "-" "Mozilla/5 ... show more 192.81.129.47 - - [01/Sep/2026:01:05:29 -0300] "GET /administrator/ HTTP/2.0" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 192.81.129.47 - - [01/Sep/2026:01:05:29 -0300] "GET /administrator/manifests/files/joomla.xml HTTP/2.0" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Port Scan
🇪🇸 scaballe	2026-09-01 03:46:37 (17 hours ago)		Web App Attack
Anonymous	2026-09-01 03:07:58 (18 hours ago)	Unauthorized access (443/tcp/https)	Port Scan Web App Attack
🇩🇪 Vegascosmetics	2026-09-01 02:56:07 (18 hours ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after first-seen suspicion / AbuseIPDB repu ... show more Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after first-seen suspicion / AbuseIPDB reputation policy (no URL signature). Evidence: Suspicion-Ban (Score 69>=65, Abuse 68, NonEU, first-seen) show less	Hacking Exploited Host Web App Attack
🇨🇭 YF	2026-09-01 01:00:51 (20 hours ago)	Distributed subnet attack — coordinated scanning from multiple IPs in the same /24	DDoS Attack Web App Attack
🇩🇪 conseilgouz	2026-09-01 00:47:13 (20 hours ago)	ave-7 : Trying access unauthorized files/dir=>/wp-includes/js/wp-emoji.js	Hacking

Showing 1 to 15 of 25 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 136.108.15.119

🇳🇱 195.178.110.232

🇫🇷 193.31.126.90

🇻🇳 171.244.98.28

🇭🇷 194.56.72.204

🇺🇸 205.210.31.79

🇫🇮 170.168.175.171

🇮🇩 103.148.208.146

🇺🇸 64.121.66.69

🇰🇷 59.24.3.231

🇧🇪 198.235.24.220

🇫🇮 147.185.133.202

🇳🇱 45.148.10.157

🇬🇧 35.203.210.181

🇧🇪 198.235.24.201

🇺🇸 156.235.89.172

🇨🇳 125.122.39.118

🇸🇪 83.255.210.166

🇺🇸 71.6.167.142

🇮🇳 52.172.177.191