JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.239.168.29

20.239.168.29 was found in our database!

This IP was reported 30 times. Confidence of Abuse is 0%: ?

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇭🇰 Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.239.168.29

Whois 20.239.168.29

IP Abuse Reports for 20.239.168.29:

This IP address has been reported a total of 30 times from 19 distinct sources. 20.239.168.29 was first reported on July 29th 2022, and the most recent report was 4 years ago.

Old Reports: The most recent abuse report for this IP address is from 4 years ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇷 Yannis Ipsa	2022-08-06 19:01:52 (4 years ago)	Central, Hong Kong was blocked by firewall for Known malicious User-Agents at https://...//wp-conten ... show more Central, Hong Kong was blocked by firewall for Known malicious User-Agents at https://...//wp-content/plugins/wp-user-avatar/changelog.txt 8/1/2022 1:51:55 PM (5 days 12 hours ago) IP: 20.239.168.29 Hostname: 20.239.168.29 Human/Bot: Bot Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36 show less	Hacking Web App Attack
🇯🇵 koji	2022-08-04 16:49:36 (4 years ago)		Web Spam Email Spam Blog Spam Bad Web Bot Web App Attack
🇸🇪 webbfabriken	2022-08-04 11:30:38 (4 years ago)	Attack reported by Webbfabiken Security API - WFSecAPI	Brute-Force
🇪🇸 10dencehispahard SL	2022-08-03 21:22:38 (4 years ago)	Suspicious activity detected by Modsecurity [Application attack RCE]	Hacking Web App Attack
🇯🇵 koji	2022-08-03 16:49:36 (4 years ago)		Web Spam Email Spam Blog Spam Bad Web Bot Web App Attack
🇧🇷 AC - Team	2022-08-03 10:32:30 (4 years ago)	20.239.168.29 - - [03/Aug/2022:11:32:29 -0300] "GET //wp-content/plugins/wpcargo/includes/barcode.ph ... show more 20.239.168.29 - - [03/Aug/2022:11:32:29 -0300] "GET //wp-content/plugins/wpcargo/includes/barcode.php?text=x1x1111x1xx1xx111xx11111xx1x111x1x1x1xxx11x1111xx1x11xxxx1xx1xxxxx1x1x1xx1x1x11xx1xxxx1x11xx111xxx1xx1xx1x1x1xxx11x1111xxx1xxx1xx1x111xxx1x1xx1xxx1x1x1xx1x1x11xxx11xx1x11xx111xx1xxx1xx11x1x11x11x1111x1x11111x1x1xxxx&sizefactor=.090909090909&size=1&filepath=../../../x.php HTTP/1.1" 307 5045 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" ... show less	Exploited Host Web App Attack
🇺🇸 SleepyHosting	2022-08-03 06:06:12 (4 years ago)	(mod_security) mod_security (id:400010) triggered by 20.239.168.29 (US/United States/-): 5 in the la ... show more (mod_security) mod_security (id:400010) triggered by 20.239.168.29 (US/United States/-): 5 in the last 3600 secs show less	Brute-Force
Anonymous	2022-08-03 01:26:51 (4 years ago)	(mod_security) mod_security triggered on hostname [redacted] 20.239.168.29 (HK/Hong Kong/-)	SQL Injection
🇺🇸 octageeks.com	2022-08-03 00:06:06 (4 years ago)	Wordpress malicious attack:[octascan]	Web App Attack
🇮🇪 RoboSOC	2022-08-02 22:12:07 (4 years ago)	WordPress WPCargo Track and Trace Plugin Code Execution Vulnerability, PTR: PTR record not found	Hacking
🇩🇪 mxinfra	2022-08-02 17:47:07 (4 years ago)	Fail2Ban triggered by plesk-modsecurity Tue 02 Aug 2022 11:47:07 PM CEST	Hacking Brute-Force Web App Attack
🇧🇷 AC - Team	2022-08-02 11:24:47 (4 years ago)	20.239.168.29 - - [02/Aug/2022:12:24:52 -0300] "GET //wp-content/plugins/wpcargo/includes/barcode.ph ... show more 20.239.168.29 - - [02/Aug/2022:12:24:52 -0300] "GET //wp-content/plugins/wpcargo/includes/barcode.php?text=x1x1111x1xx1xx111xx11111xx1x111x1x1x1xxx11x1111xx1x11xxxx1xx1xxxxx1x1x1xx1x1x11xx1xxxx1x11xx111xxx1xx1xx1x1x1xxx11x1111xxx1xxx1xx1x111xxx1x1xx1xxx1x1x1xx1x1x11xxx11xx1x11xx111xx1xxx1xx11x1x11x11x1111x1x11111x1x1xxxx&sizefactor=.090909090909&size=1&filepath=../../../x.php HTTP/1.1" 301 4725 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" ... show less	Exploited Host Web App Attack
🇺🇸 ut-addicted.com	2022-08-02 10:58:49 (4 years ago)	\[Tue Aug 02 16:58:48.159582 2022\] \[:error\] \[pid 28562:tid 139915320850176\] \[client 20.239.168 ... show more \[Tue Aug 02 16:58:48.159582 2022\] \[:error\] \[pid 28562:tid 139915320850176\] \[client 20.239.168.29:59726\] \[client 20.239.168.29\] ModSecurity: Access denied with code 403 \(phase 2\). Operator GE matched 5 at TX:anomaly_score. \[file "/usr/local/apache/modsecurity-owasp-latest/rules/REQUEST-949-BLOCKING-EVALUATION.conf"\] \[line "57"\] \[id "949110"\] \[msg "Inbound Anomaly Score Exceeded \(Total Score: 5\)"\] \[severity "CRITICAL"\] \[tag "application-multi"\] \[tag "language-multi"\] \[tag "platform-multi"\] \[tag "attack-generic"\] \[hostname "www.ut-addicted.com"\] \[uri "/wp-content/plugins/ioptimizations/IOptimizes.php"\] \[unique_id "Yuk7qEquHAOb@VJPLtIRDwAAAMk"\], referer: www.google.com show less	Brute-Force Web App Attack
🇧🇷 AC - Team	2022-08-02 08:42:35 (4 years ago)	20.239.168.29 - - [02/Aug/2022:09:42:34 -0300] "GET //wp-content/plugins/wpcargo/includes/barcode.ph ... show more 20.239.168.29 - - [02/Aug/2022:09:42:34 -0300] "GET //wp-content/plugins/wpcargo/includes/barcode.php?text=x1x1111x1xx1xx111xx11111xx1x111x1x1x1xxx11x1111xx1x11xxxx1xx1xxxxx1x1x1xx1x1x11xx1xxxx1x11xx111xxx1xx1xx1x1x1xxx11x1111xxx1xxx1xx1x111xxx1x1xx1xxx1x1x1xx1x1x11xxx11xx1x11xx111xx1xxx1xx11x1x11x11x1111x1x11111x1x1xxxx&sizefactor=.090909090909&size=1&filepath=../../../x.php HTTP/1.1" 301 4870 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" ... show less	Exploited Host Web App Attack
🇨🇿 plzenskypruvodce.cz	2022-08-01 22:43:26 (4 years ago)	[Tue Aug 02 04:43:23.466212 2022] [authz_core:error] [pid 3125020:tid 140052251051776] [client 20.23 ... show more [Tue Aug 02 04:43:23.466212 2022] [authz_core:error] [pid 3125020:tid 140052251051776] [client 20.239.168.29:54056] AH01630: client denied by server configuration: /var/www/tzb-chmelarova.cz/www/wp-content/x.php, referer: www.google.com [Tue Aug 02 04:43:24.266838 2022] [authz_core:error] [pid 3125020:tid 140052088706816] [client 20.239.168.29:54529] AH01630: client denied by server configuration: /var/www/tzb-chmelarova.cz/www/wp-content/king.php, referer: www.google.com ... show less	Web App Attack

Showing 1 to 15 of 30 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇦 193.33.189.37

🇺🇸 152.32.205.153

🇫🇷 207.180.253.181

🇮🇩 202.158.19.179

🇻🇪 190.202.87.179

🇳🇱 185.223.235.60

🇫🇷 138.199.16.131

🇰🇷 121.137.29.114

🇷🇺 83.242.247.50

🇺🇸 48.214.144.135

🇺🇸 47.251.118.34

🇿🇦 41.24.169.142

🇺🇸 34.208.194.230

🇵🇭 2001:4455:648:7200:6c48:8872:644d:c503

🇨🇴 190.29.27.34

🇧🇷 186.208.81.252

🇩🇪 178.105.31.42

🇸🇪 171.25.158.58

🇧🇷 168.75.103.97

🇨🇳 113.117.46.83