JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 129.150.48.135

129.150.48.135 was found in our database!

This IP was reported 39 times. Confidence of Abuse is 100%: ?

100%

ISP	Oracle Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS31898
Domain Name	oracle.com
Country	🇸🇬 Singapore
City	Kampong Loyang

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 129.150.48.135

Whois 129.150.48.135

IP Abuse Reports for 129.150.48.135:

This IP address has been reported a total of 39 times from 28 distinct sources. 129.150.48.135 was first reported on September 19th 2026, and the most recent report was 35 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 madeit	2026-09-21 06:32:54 (35 minutes ago)		Web App Attack
🇳🇱 Alt255	2026-09-21 02:39:07 (4 hours ago)	[ti-24al] WordPress login brute-force: 4 suspicious requests detected by fail2ban jail apache-wordpr ... show more [ti-24al] WordPress login brute-force: 4 suspicious requests detected by fail2ban jail apache-wordpress. Example: 129.150.48.135 - - [21/Sep/2026:04:38:37 +0200] "POST /wp-login.php HTTP/1.1" 403 647 "https://helpangolafoundation.org/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.63 Safari/537.36" 129.150.48.135 - - [21/Sep/2026:04:38:38 +0200] "POST /wp-login.php HTTP/1.1" 403 647 "https://helpangolafoundation.org/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:93.0) Gecko/20100101 Firefox/93.0" 129.150.48.135 - - [21/Sep/2026:04:38:44 +0200] "POST /wp-login.php HTTP/1.1" 503 19890 "https://helpangolafoundation.org/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.2 ... show less	Brute-Force Web App Attack
🇩🇪 4server	2026-09-21 02:16:26 (4 hours ago)	[MonSep2104:16:21.1097992026][security2:error][pid2846838:tid2846860][client129.150.48.135:0]ModSecu ... show more [MonSep2104:16:21.1097992026][security2:error][pid2846838:tid2846860][client129.150.48.135:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\\|wget\\|python\\|nikto\\|sqlmap\\|acunetix\\|fimap\\|dirbuster\\|cmsmap\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"217\"][id\"990210\"][msg\"Suspicioususer-agentblocked\"][hostname\"massimilianoparquet.ch\"][uri\"/\"][unique_id\"arCTdffrkYPFEUKWg3VcQwAAAAs\"] show less	Port Scan Brute-Force Web App Attack
🇳🇱 Site.eu	2026-09-21 01:44:29 (5 hours ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
Anonymous	2026-09-21 00:50:04 (6 hours ago)	\| [Dangerous/Singapore] Aggressive IP 129.150.48.135 (~30 hits). Type: DoS Defender- Web server 400 ... show more \| [Dangerous/Singapore] Aggressive IP 129.150.48.135 (~30 hits). Type: DoS Defender- Web server 400 error code show less	Web App Attack Hacking SQL Injection
🇨🇭 4server	2026-09-20 21:19:00 (9 hours ago)	[SunSep2023:18:53.7149922026][security2:error][pid882150:tid882179][client129.150.48.135:0]ModSecuri ... show more [SunSep2023:18:53.7149922026][security2:error][pid882150:tid882179][client129.150.48.135:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"prodotti.comarcosa.com\"][uri\"/wp-login.php\"][unique_id\"arBNvSfKZPqIgp31A0tPNQAAAVY\"]\,referer:https://prodotti.comarcosa.com/wp-login.php show less	Hacking Web App Attack
🇩🇪 LRob	2026-09-20 19:25:24 (11 hours ago)	Malicious web request: probing for secrets, traversal or a known exploit path \| method: GET \| path: ... show more Malicious web request: probing for secrets, traversal or a known exploit path \| method: GET \| path: /wp-login.php \| 2026-09-20 19:25 UTC show less	Hacking Web App Attack
🇮🇹 alessio loto	2026-09-20 17:09:18 (13 hours ago)	WAF Detection: Security_Scanner_Blocked (High Risk IP). AI Confirmed Attack Payload.	Bad Web Bot
🇺🇸 TPI-Abuse	2026-09-20 16:36:22 (14 hours ago)	(mod_security) mod_security (id:225170) triggered by 129.150.48.135 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 129.150.48.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 12:36:14.920265 2026] [security2:error] [pid 14846:tid 14846] [client 129.150.48.135:53287] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|jtagulator.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jtagulator.com"] [uri "/wp-json/wp/v2/users"] [unique_id "arALfmTaRlZmyAEV4IAB4AAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇵🇱 gandaflux	2026-09-20 11:58:56 (19 hours ago)	129.150.48.135 [redacted-domain] - [20/Sep/2026:13:58:42 +0200] "POST /wp-login.php HTTP/1.1" 403 15 ... show more 129.150.48.135 [redacted-domain] - [20/Sep/2026:13:58:42 +0200] "POST /wp-login.php HTTP/1.1" 403 158 "[redacted-url]/wp-login.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36" 129.150.48.135 [redacted-domain] - [20/Sep/2026:13:58:45 +0200] "POST /wp-login.php HTTP/1.1" 403 158 "[redacted-url]/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36" 129.150.48.135 [redacted-domain] - [20/Sep/2026:13:58:48 +0200] "POST /wp-login.php HTTP/1.1" 403 158 "[redacted-url]/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36" 129.150.48.135 [redacted-domain] - [20/Sep/2026:13:58:51 +0200] "POST /wp-login.php HTTP/1.1" 403 158 "[redacted-url]/wp-login.php" "Mozilla/5. show less	Brute-Force Web App Attack
🇪🇸 masterguru	2026-09-20 10:31:36 (20 hours ago)	(wplogin) Failed WordPress login from 129.150.48.135 (SG/Singapore/-): 5 in the last 3600 secs (0-12 ... show more (wplogin) Failed WordPress login from 129.150.48.135 (SG/Singapore/-): 5 in the last 3600 secs (0-122) show less	Hacking
🇩🇪 Didier Lagaert	2026-09-20 08:27:55 (22 hours ago)	lie-6 : Trying access system files=>/wp-login.php(wp-login.php)	Hacking
🇫🇷 Kenshin869	2026-09-20 08:19:36 (22 hours ago)	Wordpress unauthorized access attempt	Brute-Force
🇮🇹 VHosting	2026-09-20 07:20:03 (23 hours ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇧🇪 taivas.nl	2026-09-20 03:32:12 (1 day ago)	Wordpress_login_attempts	Bad Web Bot

Showing 1 to 15 of 39 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇷 217.219.188.96

🇩🇪 195.182.16.23

🇭🇰 101.36.116.155

🇨🇿 78.44.192.210

🇺🇸 70.166.134.214

🇮🇩 202.152.204.159

🇵🇰 182.190.212.231

🇺🇸 172.172.23.209

🇻🇳 103.28.37.12

🇳🇱 91.92.40.172

🇺🇸 66.132.195.105

🇷🇴 193.32.162.84

🇦🇷 191.103.21.45

🇨🇱 190.100.7.250

🇰🇷 152.32.139.76

🇵🇰 103.186.22.134

🇺🇸 75.220.234.144

🇭🇰 45.115.26.203

🇺🇸 34.181.160.182

🇹🇼 1.169.202.228