JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 129.153.194.16

129.153.194.16 was found in our database!

This IP was reported 33 times. Confidence of Abuse is 61%: ?

61%

ISP	Oracle Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS31898
Domain Name	oracle.com
Country	🇺🇸 United States of America
City	Phoenix, Arizona

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 129.153.194.16

Whois 129.153.194.16

IP Abuse Reports for 129.153.194.16:

This IP address has been reported a total of 33 times from 26 distinct sources. 129.153.194.16 was first reported on April 1st 2024, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 BestFans.com	2026-06-08 01:01:24 (1 week ago)	Credential brute-force attacks on webpage logins	Brute-Force
Anonymous	2026-06-04 16:12:05 (2 weeks ago)	2026-06-04T17:12:02.467118+01:00 Mail auth[61837]: pam_unix(dovecot:auth): authentication failure; l ... show more 2026-06-04T17:12:02.467118+01:00 Mail auth[61837]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=redacted rhost=129.153.194.16 user=redacted ... show less	Hacking Brute-Force
🇩🇪 ksol-hostmaster	2026-06-03 06:14:46 (2 weeks ago)	Jun 3 08:14:46 ksol dovecot[791]: auth-worker(69034): conn unix:auth-worker (uid=143): auth-worker< ... show more Jun 3 08:14:46 ksol dovecot[791]: auth-worker(69034): conn unix:auth-worker (uid=143): auth-worker<4>: sql(anonymized@email,129.153.194.16,<S3aGV1NT/6qBmcIQ>): Password mismatch (given password: I-AM-A-SUCKER-USING-A-WRONG-PASSWORD) ... show less	Brute-Force
🇦🇺 Powston	2026-05-29 19:18:52 (3 weeks ago)	Cowrie Honeypot: 10 unauthorised SSH/Telnet login attempts between 2026-05-29T19:06:13Z and 2026-05- ... show more Cowrie Honeypot: 10 unauthorised SSH/Telnet login attempts between 2026-05-29T19:06:13Z and 2026-05-29T19:18:52Z show less	Brute-Force SSH
🇵🇱 stareradia.pl	2026-05-29 17:22:07 (3 weeks ago)	[Fri May 29 19:21:00.871747 2026] [php:error] [pid 1583977:tid 1583977] [client 129.153.194.16:0] sc ... show more [Fri May 29 19:21:00.871747 2026] [php:error] [pid 1583977:tid 1583977] [client 129.153.194.16:0] script '/var/www/html/profile.php' not found or unable to stat, referer: https://forum-trioda.pl/ [Fri May 29 19:21:20.010060 2026] [php:error] [pid 1564994:tid 1564994] [client 129.153.194.16:0] script '/var/www/html/profile.php' not found or unable to stat, referer: https://forum-trioda.pl/ [Fri May 29 19:21:22.022128 2026] [php:error] [pid 1602917:tid 1602917] [client 129.153.194.16:0] script '/var/www/html/profile.php' not found or unable to stat, referer: https://forum-trioda.pl/ucp.php?mode=register&agreed=true&iscanyesno=yeswecan&step=2&coppa=0 [Fri May 29 19:22:06.215901 2026] [php:error] [pid 1606414:tid 1606414] [client 129.153.194.16:0] script '/var/www/html/profile.php' not found or unable to stat, referer: https://forum-trioda.pl/ ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-05-28 18:23:29 (3 weeks ago)	(mod_security) mod_security (id:210730) triggered by 129.153.194.16 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 129.153.194.16 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 28 14:23:26.105352 2026] [security2:error] [pid 31067:tid 31067] [client 129.153.194.16:58295] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|qualityelevatorcabs.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "qualityelevatorcabs.com"] [uri "/[email protected]"] [unique_id "ahiIHj-_6u-eoH4zcx7IuAAAAAQ"], referer: http://qualityelevatorcabs.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 oncord	2026-05-28 18:19:15 (3 weeks ago)	Form spam	Web Spam
🇺🇸 nowyouknow	2026-05-25 00:58:55 (3 weeks ago)	(From [email protected]) Hi there, I'm Victoria with Vetted VAs. I’m reaching out because ... show more (From [email protected]) Hi there, I'm Victoria with Vetted VAs. I’m reaching out because we offer Virtual Assistants that utilize our custom-built AI tool, MAVIS (My Advanced Virtual Intelligent System), that easily replaces a 20-man team. We overtake and handle all of your marketing, administrative tasks, graphic design, video animations, accounting, and even all your prospecting with our system. This isn't a software you have to learn, and all you have to do is delegate to a human Virtual Assistant to get everything done! Reply YES to schedule a Zoom meeting or STOP to unsubscribe. show less	Phishing Web Spam
🇧🇪 cmbplf	2026-05-24 22:11:46 (3 weeks ago)	3.226 requests from abuseipdb.com blacklisted IP (1yr2mos2w)	Brute-Force Bad Web Bot
🇫🇷 masterguru	2026-05-24 18:24:12 (3 weeks ago)	Backdoor cookie parameter with URL detected. Pattern match "^ (5070-197)	Hacking
🇮🇩 xveil	2026-05-23 22:25:37 (4 weeks ago)	2026-05-24T05:25:34.734145 mail-honeypot postfix/submission/smtpd[6208]: warning: unknown[129.153.19 ... show more 2026-05-24T05:25:34.734145 mail-honeypot postfix/submission/smtpd[6208]: warning: unknown[129.153.194.16]: SASL PLAIN authentication failed: authentication failure ... show less	Brute-Force
🇩🇪 FeG Deutschland	2026-05-23 01:36:01 (4 weeks ago)	Mail: - login with unknown user - bruteforce	Brute-Force
🇺🇸 xmission.com	2026-05-22 17:06:39 (4 weeks ago)	Blocked by UFW (TCP on 9101) Source port: 42198 TTL: 53 Packet length: 60 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 9101) Source port: 42198 TTL: 53 Packet length: 60 TOS: 0x08 This report (for 129.153.194.16) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 BestFans.com	2026-05-22 10:57:04 (4 weeks ago)	Credential brute-force attacks on webpage logins	Brute-Force
🇷🇺 DZBOT	2026-05-22 09:44:18 (4 weeks ago)	DZBOT: Brute-force users IMAP/POP3	Brute-Force

Showing 1 to 15 of 33 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 172.253.221.120

🇺🇸 135.237.125.155

🇸🇬 43.134.167.218

🇬🇧 2a00:23c8:d082:d201:8927:233e:abf1:1cb0

🇳🇱 176.65.139.181

🇺🇸 147.185.132.143

🇧🇩 103.183.62.3

🇺🇸 66.132.224.21

🇮🇳 27.123.111.118

🇺🇸 172.70.100.51

🇩🇪 167.94.146.48

🇨🇳 111.167.108.89

🇺🇸 108.162.216.131

🇲🇾 49.124.153.64

🇸🇬 47.128.36.109

🇺🇸 20.42.92.153

🇬🇧 194.74.196.10

🇺🇸 178.95.105.200

🇺🇦 154.6.41.163

🇸🇬 138.199.60.24