JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 129.121.60.136

129.121.60.136 was found in our database!

This IP was reported 40 times. Confidence of Abuse is 100%: ?

100%

ISP	Oso Grande IP Services, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS31898
Hostname(s)	129-121-60-136.unifiedlayer.com
Domain Name	asmallorange.com
Country	🇲🇽 Mexico
City	Triana, Nuevo Leon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 129.121.60.136

Whois 129.121.60.136

IP Abuse Reports for 129.121.60.136:

This IP address has been reported a total of 40 times from 31 distinct sources. 129.121.60.136 was first reported on August 27th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 taivas.nl	2026-09-03 04:33:59 (1 hour ago)	Many_bad_calls	Web App Attack
🇪🇸 alferez	2026-09-02 18:27:30 (11 hours ago)	wp2shell bug exploit	Hacking Exploited Host Web App Attack
🇸🇪 vaia.cloud	2026-09-02 17:30:01 (12 hours ago)	crowdsecurity/http-probing	Brute-Force Web App Attack
🇮🇹 VHosting	2026-09-02 17:20:03 (12 hours ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-09-02 16:56:40 (13 hours ago)	(mod_security) mod_security (id:210492) triggered by 129.121.60.136 (129-121-60-136.unifiedlayer.com ... show more (mod_security) mod_security (id:210492) triggered by 129.121.60.136 (129-121-60-136.unifiedlayer.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 12:56:33.421328 2026] [security2:error] [pid 13446:tid 13446] [client 129.121.60.136:40372] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.brazilianbottom.com"] [uri "/wp-config.php.bak"] [unique_id "aphVQSkciZlY4oe-DoNgEgAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇦 URAN Publishing Service	2026-09-02 16:30:11 (13 hours ago)	[02/Sep/2026:19:30:10 +0300] -- 129.121.60.136 Ban reason: Scanner [CMS_GENERIC] \| Request: POST /wp ... show more [02/Sep/2026:19:30:10 +0300] -- 129.121.60.136 Ban reason: Scanner [CMS_GENERIC] \| Request: POST /wp-json/batch/v1 HTTP/1.1 show less	Bad Web Bot Web App Attack
🇩🇪 LRob	2026-09-02 16:25:16 (13 hours ago)	Enumerating paths that do not exist (scanning) \| method: GET (+1 more) \| path: / (+3 more) \| 2026-09 ... show more Enumerating paths that do not exist (scanning) \| method: GET (+1 more) \| path: / (+3 more) \| 2026-09-02 16:25 UTC show less	Port Scan Web App Attack
🇵🇱 strefapi_com	2026-09-02 16:03:40 (14 hours ago)	Brute-force, web ...	Hacking Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-09-02 15:24:44 (14 hours ago)	(mod_security) mod_security (id:210492) triggered by 129.121.60.136 (129-121-60-136.unifiedlayer.com ... show more (mod_security) mod_security (id:210492) triggered by 129.121.60.136 (129-121-60-136.unifiedlayer.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 11:24:41.670273 2026] [security2:error] [pid 22403:tid 22403] [client 129.121.60.136:43122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.english.art.mavikalem.org"] [uri "/wp-config.php.bak"] [unique_id "apg_uUj7PiBarnHKv8MgeAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 Apache	2026-09-02 14:53:22 (15 hours ago)	(mod_security) mod_security (id:210492) triggered by 129.121.60.136 (MX/Mexico/129-121-60-136.unifie ... show more (mod_security) mod_security (id:210492) triggered by 129.121.60.136 (MX/Mexico/129-121-60-136.unifiedlayer.com): 5 in the last 300 secs (CF_ENABLE) show less	Brute-Force Web App Attack
🇩🇪 LRob	2026-09-02 14:50:37 (15 hours ago)	Enumerating paths that do not exist (scanning) \| method: GET (+1 more) \| path: / (+3 more) \| 2026-09 ... show more Enumerating paths that do not exist (scanning) \| method: GET (+1 more) \| path: / (+3 more) \| 2026-09-02 14:50 UTC show less	Port Scan Web App Attack
🇺🇸 TPI-Abuse	2026-09-02 14:40:58 (15 hours ago)	(mod_security) mod_security (id:210492) triggered by 129.121.60.136 (129-121-60-136.unifiedlayer.com ... show more (mod_security) mod_security (id:210492) triggered by 129.121.60.136 (129-121-60-136.unifiedlayer.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 10:40:54.797855 2026] [security2:error] [pid 10811:tid 10811] [client 129.121.60.136:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "package.cloudex.click"] [uri "/.env"] [unique_id "apg1dswJrM6E6aYo2mJjRgAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇷 Halux	2026-09-02 14:14:59 (15 hours ago)	129.121.60.136 Probing protected path or service	Web App Attack
🇺🇸 TPI-Abuse	2026-09-02 14:08:49 (15 hours ago)	(mod_security) mod_security (id:210492) triggered by 129.121.60.136 (129-121-60-136.unifiedlayer.com ... show more (mod_security) mod_security (id:210492) triggered by 129.121.60.136 (129-121-60-136.unifiedlayer.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 10:08:41.356896 2026] [security2:error] [pid 2142:tid 2142] [client 129.121.60.136:34070] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "prayers4america.com"] [uri "/wp-config.php.bak"] [unique_id "apgt6dC-36XXm2PyaInedQAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-02 14:03:34 (16 hours ago)	CPOWCO WEBEXPLOIT 129.121.60.136 (129-121-60-136.unifiedlayer.com)	Web App Attack

Showing 1 to 15 of 40 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2607:f8b0:4004:1002::12c

🇬🇧 193.32.209.232

🇨🇳 175.170.144.17

🇰🇷 175.118.127.138

🇨🇳 175.12.108.55

🇺🇸 152.32.182.41

🇨🇳 118.196.92.141

🇨🇳 106.35.130.66

🇨🇳 106.4.9.90

🇮🇳 103.183.83.42

🇳🇱 91.92.47.11

🇳🇱 91.92.40.66

🇺🇸 64.62.197.122

🇱🇹 62.60.130.201

🇺🇸 52.165.92.140

🇨🇴 38.156.230.154

🇸🇬 35.247.168.30

🇳🇱 34.91.0.68

🇺🇸 23.22.8.171

🇬🇧 2.57.17.224