JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 23.249.29.150

23.249.29.150 was found in our database!

This IP was reported 104 times. Confidence of Abuse is 100%: ?

100%

ISP	Naruto
Usage Type	Data Center/Web Hosting/Transit
ASN	AS152156
Domain Name	narutocloud.com
Country	🇭🇰 Hong Kong
City	Kowloon Bay, Kwun Tong District

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 23.249.29.150

Whois 23.249.29.150

IP Abuse Reports for 23.249.29.150:

This IP address has been reported a total of 104 times from 81 distinct sources. 23.249.29.150 was first reported on June 25th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 evicky2002	2026-07-17 06:00:00 (2 days ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇿🇦 conure	2026-07-17 02:53:15 (2 days ago)	csagent: score 20.0: secrets grab x2; 1 domain(s) in 5s	Web App Attack
🇩🇪 ger-stg-sifi1	2026-07-17 01:40:11 (2 days ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
Anonymous	2026-07-16 23:53:26 (2 days ago)	(caddyscan) Scanner path probe from 23.249.29.150 (HK/Hong Kong/-): 5 in the last 3600 secs; Ports: ... show more (caddyscan) Scanner path probe from 23.249.29.150 (HK/Hong Kong/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 23.249.29.150 - - [16/Jul/2026:23:53:19 +0000] "GET /wp-config.php.bak HTTP/1.1" [REDACTED] 200 2627 23.249.29.150 - - [16/Jul/2026:23:53:20 +0000] "GET /wp-config.php.old HTTP/1.1" [REDACTED] 200 2627 23.249.29.150 - - [16/Jul/2026:23:53:20 +0000] "GET /wp-config.php.save HTTP/1.1" [REDACTED] 200 2627 23.249.29.150 - - [16/Jul/2026:23:53:23 +0000] "GET /wp-config.php.txt HTTP/1.1" [REDACTED] 200 2627 23.249.29.150 - - [16/Jul/2026:23:53:24 +0000] "GET /wp-config.php~ HTTP/1.1" show less	Port Scan
Anonymous	2026-07-16 22:05:47 (2 days ago)	(caddyscan) Scanner path probe from 23.249.29.150 (HK/Hong Kong/-): 5 in the last 3600 secs; Ports: ... show more (caddyscan) Scanner path probe from 23.249.29.150 (HK/Hong Kong/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 23.249.29.150 - - [16/Jul/2026:22:05:40 +0000] "GET /.env.backup HTTP/1.1" [REDACTED] 200 2627 23.249.29.150 - - [16/Jul/2026:22:05:42 +0000] "GET /.env.save HTTP/1.1" [REDACTED] 200 2627 23.249.29.150 - - [16/Jul/2026:22:05:43 +0000] "GET /.env.old HTTP/1.1" [REDACTED] 200 2627 23.249.29.150 - - [16/Jul/2026:22:05:45 +0000] "GET /.env.bak HTTP/1.1" [REDACTED] 200 2627 23.249.29.150 - - [16/Jul/2026:22:05:46 +0000] "GET /.env.tmp HTTP/1.1" show less	Port Scan
🇩🇪 Prodscape	2026-07-16 20:33:34 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 23.249.29.150 (HK/Hong Kong/-): 5 in the last 8 ... show more (mod_security) mod_security (id:210492) triggered by 23.249.29.150 (HK/Hong Kong/-): 5 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_MODSEC show less	Port Scan
🇩🇪 lespbaj	2026-07-16 19:24:07 (2 days ago)	{"time":"2026-07-16T19:24:05+00:00","ip":"23.249.29.150","method":"GET","uri":"/.env","ua":"Mozilla/ ... show more {"time":"2026-07-16T19:24:05+00:00","ip":"23.249.29.150","method":"GET","uri":"/.env","ua":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 (Silvy X Ran; +https://silvyxran.love; +https://silver.inc)","referer":""} ... show less	Bad Web Bot Web App Attack
🇩🇪 FeG Deutschland	2026-07-16 17:20:34 (2 days ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
🇲🇾 Rizzy	2026-07-16 16:43:22 (2 days ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇳🇴 Bots.go.to.hell	2026-07-14 13:53:28 (5 days ago)	This IP was detected by CrowdSec triggering crowdsecurity/vpatch-env-access	Web App Attack Hacking
🇸🇪 Per-Erik Runebert	2026-07-07 08:39:46 (1 week ago)	Excessive unauthorized requests	Hacking
🇸🇪 vaia.cloud	2026-07-06 22:53:01 (1 week ago)	trying wp-login.php/xmlrpc.php 31 times in 1 minutes	Brute-Force Web App Attack
🇫🇮 as211431.net	2026-07-06 19:45:33 (1 week ago)	Triggered Cloudflare WAF (firewallCustom) from HK. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from HK. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /secrets.yaml UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 (Silvy X Ran) This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇫🇮 000rosiu	2026-07-06 17:55:53 (1 week ago)	Triggered Cloudflare WAF (firewallCustom) from HK. Action: BLOCK \| Protocol: HTTP/1.1 (GET) \| Endpoi ... show more Triggered Cloudflare WAF (firewallCustom) from HK. Action: BLOCK \| Protocol: HTTP/1.1 (GET) \| Endpoint: /config/gcp.json \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 (Silvy X Ran) • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇳🇱 e.fierstra	2026-07-06 17:53:21 (1 week ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack

Showing 1 to 15 of 104 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 219.248.65.30

🇰🇷 211.247.127.250

🇿🇦 165.165.108.147

🇮🇳 159.65.148.158

🇮🇳 143.110.181.226

🇮🇳 117.218.75.251

🇷🇺 78.37.9.103

🇭🇰 58.152.42.174

🇺🇸 45.39.115.173

🇺🇸 193.56.116.202

🇺🇸 147.185.132.21

🇳🇱 91.92.40.52

🇺🇸 45.39.115.172

🇹🇼 34.80.159.120

🇬🇧 2400:cb00:989:1000:f151:7248:f3eb:b80a

🇬🇧 2400:cb00:989:1000:9c16:406f:6a79:5875

🇨🇳 223.198.166.89

🇺🇸 198.1.93.192

🇧🇷 131.100.242.102

🇨🇳 110.80.136.230