JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 23.97.62.129

23.97.62.129 was found in our database!

This IP was reported 504 times. Confidence of Abuse is 64%: ?

64%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 23.97.62.129

Whois 23.97.62.129

IP Abuse Reports for 23.97.62.129:

This IP address has been reported a total of 504 times from 250 distinct sources. 23.97.62.129 was first reported on August 10th 2024, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 dwmosaics	2026-06-07 16:39:43 (1 day ago)	"GET /cgi-bin/luci/;stok=/locale HTTP/1.1" 404 4918 "http://145.40.186.22:8...	Brute-Force Web App Attack
🇸🇰 KZP	2026-06-07 16:00:19 (1 day ago)	Automatic report from KZP firewall log.	Port Scan Hacking Brute-Force
Anonymous	2026-06-07 15:40:22 (1 day ago)	23.97.62.129 - - [07/Jun/2026:15:40:20 +0000] "GET /cgi-bin/luci/;stok=/locale HTTP/1.1" 404 3238 "- ... show more 23.97.62.129 - - [07/Jun/2026:15:40:20 +0000] "GET /cgi-bin/luci/;stok=/locale HTTP/1.1" 404 3238 "-" "-" ... show less	Bad Web Bot Web App Attack
🇹🇼 tye	2026-06-07 15:39:27 (1 day ago)	Wazuh Alert Evidence: 23.97.62.129 (23.97.62.129) - - [07/Jun/2026:23:39:26 +0800] "GET /cgi-bin/luc ... show more Wazuh Alert Evidence: 23.97.62.129 (23.97.62.129) - - [07/Jun/2026:23:39:26 +0800] "GET /cgi-bin/luci/;stok=/locale HTTP/1.1" 404 3508 "-" "-" show less	Web App Attack
🇧🇬 Stoyko Stoykov	2026-06-07 15:38:30 (1 day ago)	23.97.62.129 - - [07/Jun/2026:18:38:30 +0300] "GET /cgi-bin/luci/;stok=/locale HTTP/1.1" 301 162 "-" ... show more 23.97.62.129 - - [07/Jun/2026:18:38:30 +0300] "GET /cgi-bin/luci/;stok=/locale HTTP/1.1" 301 162 "-" "-" ... show less	Hacking Web App Attack
🇺🇸 xmission.com	2026-06-07 15:00:26 (1 day ago)	Blocked by UFW (TCP on 80) Source port: 8288 TTL: 242 Packet length: 40 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 80) Source port: 8288 TTL: 242 Packet length: 40 TOS: 0x00 This report (for 23.97.62.129) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇪🇸 librebit	2026-06-06 01:34:43 (2 days ago)	Brute force	Brute-Force
🇳🇱 ByeByte API	2026-06-05 05:56:28 (3 days ago)	Port scan from this IP. Firewall dropped every packet. Targeted TCP ports: 80. Single burst at 2026- ... show more Port scan from this IP. Firewall dropped every packet. Targeted TCP ports: 80. Single burst at 2026-06-05 05:56 UTC. show less	Port Scan
🇩🇪 pltcldvlpr	2026-06-05 05:44:20 (3 days ago)	CMS/framework probe: 23.97.62.129 - - [05/Jun/2026:07:44:19 +0200] "GET / HTTP/1.1" 301 178 "http:// ... show more CMS/framework probe: 23.97.62.129 - - [05/Jun/2026:07:44:19 +0200] "GET / HTTP/1.1" 301 178 "http://45.157.179.231:80/cgi-bin/index2.asp" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" asn=8075 org="Microsoft Corporation" country=SG ... show less	Web App Attack
🇯🇵 demonsword	2026-05-31 08:31:56 (1 week ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: review-thammy.com:443:443 show less	Open Proxy Port Scan
🇯🇵 demonsword	2026-05-29 12:37:24 (1 week ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: 128.116.120.3:443 show less	Open Proxy Port Scan
🇯🇵 demonsword	2026-05-27 12:46:29 (1 week ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: minesive.com:443 show less	Open Proxy Port Scan
🇬🇧 thetomtaylor.co.uk	2026-05-05 01:09:13 (1 month ago)	Fail2Ban - [SSH]Brute-force login attempts on sshd ... [mx03]	Brute-Force SSH
🇯🇵 demonsword	2026-05-01 08:47:42 (1 month ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: wpanel.vn:443:443 show less	Open Proxy Port Scan
🇮🇳 evicky2002	2026-04-30 13:04:29 (1 month ago)	Confirmed malicious by STILWaters CTI platform (score=99, sources=1)	Hacking Brute-Force SSH

Showing 1 to 15 of 504 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇴 92.118.39.236

🇹🇭 83.118.107.37

🇪🇸 212.30.33.100

🇩🇪 194.88.98.101

🇨🇳 182.88.133.144

🇳🇱 176.65.139.130

🇫🇷 173.249.0.223

🇺🇸 172.217.37.218

🇰🇷 119.209.12.20

🇩🇪 91.107.255.76

🇳🇱 81.19.216.76

🇨🇳 59.52.101.6

🇸🇬 188.166.215.16

🇬🇧 185.195.13.179

🇧🇷 177.94.206.205

🇨🇳 111.228.14.125

🇮🇳 103.204.167.14

🇺🇸 103.124.106.213

🇷🇺 81.177.101.45

🇩🇪 46.249.99.46