129.151.76.152
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Oracle Corporation
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS31898
- Domain Name
- oracle.com
- Country
- 🇬🇧 United Kingdom of Great Britain and Northern Ireland
- City
- Cardiff, Wales
Abuse Reports
Total reports
118 from
82 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇪🇨 CYBER-SECURITY-MM |
Detected and banned by CrowdSec. Scenario: crowdsecurity/http-sensitive-files. HTTP 403. Path: /.env. Evidence: 1 matching alerts.
|
Web App Attack | |
| Anonymous |
RdpGuard detected brute-force attempt on HTTP
|
Brute-Force | |
| 🇺🇸 gamabe |
Detected crowdsecurity/http-sensitive-files attack pattern. Reported by CrowdSec IDS.
|
Hacking | |
| Anonymous |
129.151.76.152 - - [09/Nov/2026:01:00:39 +0100] "GET /.env HTTP/1.1" 403 2368 "-" "Mozilla/5.0"
...
|
Brute-Force Web App Attack | |
| 🇺🇸 HamSammich |
Automated sensor: 2 HTTP, MySQL connection/probe attempts over the last 24h (latest 2026-11-08T21:06Z).
|
Port Scan Hacking Web App Attack | |
| Anonymous |
(mod_security) mod_security triggered on hostname [redacted]): (CF_ENABLE)
|
SQL Injection | |
| 🇧🇪 voormedia |
Accessed trap at '/.env'
|
Web App Attack | |
| Anonymous |
|
Bad Web Bot Web App Attack | |
| 🇺🇸 www.winos.me |
Shield: Layer4 Port 9 Trap
|
Port Scan Hacking | |
| 🇫🇷 Petre 21_ip |
|
Port Scan | |
| 🇫🇷 0d0a |
Automated brute-force report from Fail2Ban
|
Web App Attack | |
| 🇺🇸 Som1ght3n |
The IP attempted to access a sensitive configuration file (/.env) on the web server, matching a 'http-sensitive-files' detection scenario.
|
Web App Attack | |
| 🇨🇳 鹏鹏 |
monitor: on VM-0-7-ubuntu | port: 8080 | ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇬🇧 sonot |
Blocked by UFW on tunneluk01 [8080/tcp] | SPT: 54490 | TTL: 244 | LEN: 40 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇫🇷 security.rdmc.fr |
Activity from blacklisted IP
|
Hacking |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown