AbuseIPDB » 23.129.252.120
23.129.252.120
This IP was reported 6 times. Confidence of
Abuse
is 17% : ?
ISP
Webhosting Holdings LLC
Usage Type
Data Center/Web Hosting/Transit
ASN
AS965
Domain Name
webhostingholdings.com
Country
🇧🇷
Brazil
City
Sao Paulo, Sao Paulo
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 23.129.252.120 :
This IP address has been reported a total of
6
times from
5 distinct
sources.
23.129.252.120 was first reported on
November 4th 2024 , and the most recent report was
3 days ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
Blue Pumpkin
2026-07-05 23:42:06
(3 days ago)
23.129.252.120 - - [05/Jul/2026:23:42:03 +0000] "GET /cb-profile/57817-johnprogrock HTTP/1.1" 200 13 ...
show more
23.129.252.120 - - [05/Jul/2026:23:42:03 +0000] "GET /cb-profile/57817-johnprogrock HTTP/1.1" 200 13126 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
...
show less
Brute-Force
🇵🇹
Subnet Shadow Specter
2026-06-27 01:05:52
(1 week ago)
[Security] [Category: Bot Masquerading] FCrDNS mismatch detected. [IP Address]: 23.129.252.120 claim ...
show more
[Security] [Category: Bot Masquerading] FCrDNS mismatch detected. [IP Address]: 23.129.252.120 claimed a fake identity but failed forward-confirmed reverse DNS verification. Automated scraping via spoofed User-Agent `compatible; Googlebot/2.1`. [Action]: IP block initiated. [User-Agent]: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) [Date]: 2026-06-27 02:05:51 UTC.
show less
Bad Web Bot
Web App Attack
🇦🇺
paulshipley.com.au
2026-06-16 00:58:23
(3 weeks ago)
[Tue Jun 16 10:58:22.870811 2026] [security2:error] [pid 189671] [client 23.129.252.120:58769] [clie ...
show more
[Tue Jun 16 10:58:22.870811 2026] [security2:error] [pid 189671] [client 23.129.252.120:58769] [client 23.129.252.120] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.com.au"] [uri "/wp-content/plugins/updraftplus/central/js/central.js"] [unique_id "ajCfro0BjqXSDVU_9v5wYAAAAAQ"]
...
show less
Web App Attack
🇫🇷
polido
2026-01-02 17:29:17
(6 months ago)
Unauthorized connection attempt to port 443 from 23.129.252.120
Port Scan
🇩🇪
nyuuzyou
2024-11-08 11:42:06
(1 year ago)
Intensive scraping: /web?s=%22Designer%3A%20Astralinks%20Directory%22%20needs&country=de-de&scraper= ...
show more
Intensive scraping: /web?s=%22Designer%3A%20Astralinks%20Directory%22%20needs&country=de-de&scraper=mojeek. User-Agent: Mozilla/5.0 (Linux x86_64; rv:114.0) Gecko/20100101 Firefox/114.0.
show less
Bad Web Bot
🇩🇪
nyuuzyou
2024-11-04 23:30:36
(1 year ago)
Intensive scraping: /web?s=%22is%20a%20micro-blogging%20service%20based%20on%20the%20Free%20Software ...
show more
Intensive scraping: /web?s=%22is%20a%20micro-blogging%20service%20based%20on%20the%20Free%20Software%20StatusNet%20tool.%22%20vermeiden&country=de-de&scraper=mojeek. User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 YaBrowser/22.7.0 Yowser/2.5 Safari/537.36.
show less
Bad Web Bot
Showing 1 to
6
of 6 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: