This IP address has been reported a total of
46
times from
45 distinct
sources.
20.29.116.172 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
(php_susp_dir) srv102 PHP in suspicious dir 20.29.116.172 (US/United States/-): 1 in the last 3600 s ...
show more(php_susp_dir) srv102 PHP in suspicious dir 20.29.116.172 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Cluster member 148.251.176.225 (DE/Germany/antares.webyouridea.ro) said, DENY 20.29.116.172, Reason: ...
show moreCluster member 148.251.176.225 (DE/Germany/antares.webyouridea.ro) said, DENY 20.29.116.172, Reason:[(shell) SHELL shell.php Attack 20.29.116.172 (US/United States/-): 3 in the last 3600 secs]; Ports: *; Direction: inout; Trigger: LF_CLUSTER; Logs:
show less
[Sat Jun 20 16:52:21.313603 2026] [php7:error] [pid 1343806:tid 1343806] [client 20.29.116.172:40247 ...
show more[Sat Jun 20 16:52:21.313603 2026] [php7:error] [pid 1343806:tid 1343806] [client 20.29.116.172:40247] script '/var/www/html/blog.solution.it/this_is_a_new_hello_world.php' not found or unable to stat
show less
{"level":"info","ts":1781964441.354635,"logger":"http.log.access.log0","msg":"handled request","requ ...
show more{"level":"info","ts":1781964441.354635,"logger":"http.log.access.log0","msg":"handled request","request":{"remote_ip":"20.29.116.172","remote_port":"54222","client_ip":"20.29.116.172","proto":"HTTP/1.1","method":"GET","host":"kwci.status.updown.io","uri":"/wp-content/plugins/hellopress/wp_filemanager.php","headers":{}},"bytes_read":0,"user_id":"","duration":0.000080754,"size":0,"status":308,"resp_headers":{"Location":["https://kwci.status.updown.io/wp-content/plugins/hellopress/wp_filemanager.php"],"Content-Type":[],"Server":["Caddy"],"Connection":["close"]}}
{"level":"info","ts":1781964448.2471678,"logger":"http.log.access.log0","msg":"handled request","request":{"remote_ip":"20.29.116.172","remote_port":"51390","client_ip":"20.29.116.172","proto":"HTTP/1.1","method":"GET","host":"kwci.status.updown.io","uri":"/this_is_a_new_hello_world.php","headers":{}},"bytes_read":0,"user_id":"","duration":0.000074341,"size":0,"status":308,"resp_headers":{"Connection":["close"],"Location":["https:
...
show less
(ScanningForFiles) Scanning for files triggerd 20.29.116.172 (US/United States/-): 10 in the last 60 ...
show more(ScanningForFiles) Scanning for files triggerd 20.29.116.172 (US/United States/-): 10 in the last 600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
Anonymous
PSCSERV WPSCAN 20.29.116.172
Bad Web Bot
Web App Attack
Showing 1 to
15
of 46 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩