JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 129.146.107.132

129.146.107.132 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 57%: ?

57%

ISP	Oracle Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS31898
Domain Name	oracle.com
Country	🇺🇸 United States of America
City	Phoenix, Arizona

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 129.146.107.132

Whois 129.146.107.132

IP Abuse Reports for 129.146.107.132:

This IP address has been reported a total of 14 times from 9 distinct sources. 129.146.107.132 was first reported on August 27th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 mnsf	2026-08-31 21:05:06 (2 days ago)	Too many Status 40X (15)	Brute-Force Web App Attack
🇩🇪 LRob	2026-08-31 10:38:29 (2 days ago)	Malicious web request: probing for secrets, traversal or a known exploit path \| method: GET \| path: ... show more Malicious web request: probing for secrets, traversal or a known exploit path \| method: GET \| path: /xmlrpc.php \| query: rsd= \| ua: AteveSearchSourceUrlDiscovery/0.1 (+mailto:[email protected]) \| 2026-08-31 10:38 UTC show less	Hacking Web App Attack
🇨🇭 4server	2026-08-31 08:58:02 (2 days ago)	[MonAug3110:57:55.5848142026][security2:error][pid2112002:tid2112181][client129.146.107.132:0]ModSec ... show more [MonAug3110:57:55.5848142026][security2:error][pid2112002:tid2112181][client129.146.107.132:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"614\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"www.support-ticino.ch\"][uri\"/xmlrpc.php\"][unique_id\"apVCE6kgO-XFigPJoWBuOwAAAFI\"] show less	Hacking Web App Attack
🇩🇪 LRob	2026-08-31 06:42:43 (2 days ago)	Malicious web request: probing for secrets, traversal or a known exploit path \| method: GET \| path: ... show more Malicious web request: probing for secrets, traversal or a known exploit path \| method: GET \| path: /xmlrpc.php \| 2026-08-31 06:42 UTC show less	Hacking Web App Attack
🇧🇪 taivas.nl	2026-08-31 04:33:54 (3 days ago)	Many_bad_calls	Web App Attack
🇺🇸 TPI-Abuse	2026-08-31 03:48:07 (3 days ago)	(mod_security) mod_security (id:225170) triggered by 129.146.107.132 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:225170) triggered by 129.146.107.132 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 30 23:48:02.734437 2026] [security2:error] [pid 13751:tid 13751] [client 129.146.107.132:48187] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.versallis.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.versallis.com"] [uri "/wp-json/wp/v2/users/1"] [unique_id "apT5covkqcX6N9p4PklMUAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 taivas.nl	2026-08-30 13:32:01 (3 days ago)	Wordpress_Attack	Web App Attack
🇭🇺 miszterx.hu	2026-08-30 11:01:45 (3 days ago)	XORP (haproxy): 10x HTTP 404/403/500 or handshake failure in 24h. Automated report from log_check_ip ... show more XORP (haproxy): 10x HTTP 404/403/500 or handshake failure in 24h. Automated report from log_check_iptables_generator.sh (xorp.hu) show less	Web App Attack
🇺🇸 mnsf	2026-08-30 03:05:29 (4 days ago)	Too many Status 40X (16)	Brute-Force Web App Attack
🇩🇪 LRob	2026-08-30 01:46:06 (4 days ago)	Malicious web request: probing for secrets, traversal or a known exploit path \| method: GET \| path: ... show more Malicious web request: probing for secrets, traversal or a known exploit path \| method: GET \| path: /xmlrpc.php \| 2026-08-30 01:46 UTC show less	Hacking Web App Attack
🇬🇧 elleray	2026-08-29 04:43:15 (5 days ago)	Banned by Fail2Ban on interproj-org jail	Brute-Force
🇨🇭 YF	2026-08-29 00:05:34 (5 days ago)	Malicious web activity confirmed — IP previously flagged as suspicious (automated re-check, score: 1 ... show more Malicious web activity confirmed — IP previously flagged as suspicious (automated re-check, score: 16%) show less	Web App Attack
🇺🇸 mnsf	2026-08-28 08:05:30 (5 days ago)	Too many Status 40X (11)	Brute-Force Web App Attack
🇮🇹 VHosting	2026-08-27 18:15:08 (6 days ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 199.91.221.58

🇮🇩 182.255.6.132

🇪🇨 177.234.208.83

🇨🇴 152.200.181.42

🇮🇩 103.111.98.163

🇨🇳 101.132.98.86

🇺🇸 98.26.197.94

🇷🇺 91.194.252.126

🇮🇳 66.116.224.129

🇺🇸 43.159.152.4

🇺🇸 40.119.43.9

🇺🇸 35.254.247.212

🇫🇮 35.228.34.102

🇨🇦 34.118.154.221

🇧🇪 34.53.172.11

🇳🇱 34.6.52.46

🇹🇷 5.11.162.163

🇺🇸 216.219.95.116

🇰🇷 210.104.222.189

🇺🇸 209.87.169.127