129.121.52.181

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
97 reports
91 reporters · latest 20 hours ago
ISP
Oso Grande IP Services, LLC
Usage Type
Data Center/Web Hosting/Transit
ASN
AS31898
Hostname(s)
129-121-52-181.unifiedlayer.com
Domain Name
newfold.com
Country
🇧🇷 Brazil
City
Vinhedo, Sao Paulo
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
97 from 91 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 19 🇩🇪 Germany 17 🇳🇱 Netherlands 13
Most common categories Web App Attack 76 Bad Web Bot 27 Brute-Force 26 Hacking 20 Port Scan 16
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇳🇱 homeshowdomain.nl
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-11-04.
Web App Attack SSH Hacking
🇬🇧 sc user
Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad bot behaviour. Technical log details and local server identifiers intentionally omitted for privacy.
Bad Web Bot Web App Attack Port Scan
🇩🇪 Holger
WordPress WebAttack
Brute-Force Web App Attack
Anonymous
"GET /xmlrpc.php HTTP/1.1"
Hacking Web App Attack
🇧🇪 taivas.nl
Many_bad_calls
Web App Attack
🇲🇽 octageeks.com
Wordpress malicious attack:[octaflood]
Web App Attack
Anonymous
Banned by Fail2Ban on server
Web App Attack
🇬🇷 setupgr
Port Scan
🇳🇱 BlueWire Hosting
Probing websites for vulnerabilities
Web App Attack SQL Injection
🇧🇪 cmbplf
12.335 requests from abuseipdb.com blacklisted IP (1w6d23h)
Brute-Force Bad Web Bot
🇺🇸 mnsf
Login Too Frequent (15) Too many Status 40X (13)
Brute-Force Web App Attack
🇮🇹 VHosting
Detected WordPress attack from different servers
Brute-Force Web App Attack
Anonymous
129.121.52.181 - - [05/Nov/2026:03:53:15 +0100] "GET / HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
Web App Attack
🇫🇷 masterguru
Too much 404 requests in 1 minute. Operator GE matched 10 at IP:block_script. (46020-201)
Hacking
🇩🇪 neckaralb-admin.de
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 185.218.86.33
🇺🇸 176.20.201.249
🇩🇪 139.162.170.116
🇮🇩 103.187.162.225
🇧🇩 103.135.134.153
🇻🇪 38.10.254.95
🇺🇸 172.253.1.27
🇺🇸 136.70.198.188
🇮🇳 122.160.221.219
🇻🇳 103.98.152.181
🇫🇷 51.68.111.209
🇬🇧 35.203.210.5
🇸🇦 31.167.162.224
🇺🇸 216.180.246.76
🇪🇹 196.190.181.14
🇺🇸 192.241.170.226
🇧🇷 177.131.109.146
🇩🇪 162.158.111.48
🇺🇸 143.110.139.76
🇨🇳 59.63.166.218
feedback