JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 129.212.235.63

129.212.235.63 was found in our database!

This IP was reported 36 times. Confidence of Abuse is 100%: ?

100%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 129.212.235.63

Whois 129.212.235.63

IP Abuse Reports for 129.212.235.63:

This IP address has been reported a total of 36 times from 22 distinct sources. 129.212.235.63 was first reported on December 7th 2025, and the most recent report was 53 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 4server	2026-09-01 12:57:42 (53 minutes ago)	[TueSep0114:57:36.4887152026][security2:error][pid3359314:tid3359406][client129.212.235.63:0]ModSecu ... show more [TueSep0114:57:36.4887152026][security2:error][pid3359314:tid3359406][client129.212.235.63:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".env\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"610\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"whatsdecor.ch\"][uri\"/.env\"][unique_id\"apbLwPkGhTosraTB9GlUswAAAYI\"] show less	Hacking Web App Attack
🇩🇪 LRob	2026-09-01 00:35:29 (13 hours ago)	Probing for secret files (.git, .env, credentials, database dumps, wp-config) \| method: GET \| path: ... show more Probing for secret files (.git, .env, credentials, database dumps, wp-config) \| method: GET \| path: /.env (+1 more) \| 2026-09-01 00:35 UTC show less	Hacking Web App Attack
🇩🇪 outputblog.de	2026-08-31 15:04:37 (22 hours ago)	apache-wp-probephp	Port Scan Hacking Brute-Force
🇺🇸 TPI-Abuse	2026-08-31 07:16:58 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 129.212.235.63 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 129.212.235.63 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 03:16:50.608205 2026] [security2:error] [pid 23043:tid 23043] [client 129.212.235.63:52288] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.bickleton.org"] [uri "/.env"] [unique_id "apUqYkd5__nV41I2fIL6hgAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-08-31 05:06:56 (1 day ago)	[da.kdns.gr] httpd-config-scan: sites=www.webfly.gr; logs=/var/log/httpd/domains/webfly.gr.log; samp ... show more [da.kdns.gr] httpd-config-scan: sites=www.webfly.gr; logs=/var/log/httpd/domains/webfly.gr.log; samples=/.env \| /vendor/.env \| /storage/.env show less	Hacking Web App Attack
🇩🇪 yvoictra	2026-08-30 22:37:07 (1 day ago)	Bloqueado automáticamente por CrowdSec. Escenario: crowdsecurity/http-sensitive-files	Web App Attack
🇺🇸 TPI-Abuse	2026-08-30 20:15:33 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 129.212.235.63 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 129.212.235.63 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 30 16:15:26.503834 2026] [security2:error] [pid 27737:tid 27737] [client 129.212.235.63:51738] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.brianwhitty.com"] [uri "/.env"] [unique_id "apSPXlGgtuF6Rg99IX4lQQAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-30 18:18:06 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 129.212.235.63 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 129.212.235.63 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 30 14:17:57.943422 2026] [security2:error] [pid 22217:tid 22217] [client 129.212.235.63:57016] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.rochesterhistorical.org"] [uri "/.env"] [unique_id "apRz1dldpdjd4HpywWM8kwAAAAE"], referer: https://google.com show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Gwyneth Llewelyn	2026-08-30 16:41:40 (1 day ago)	2026/08/30 17:41:38 [error] 380594#380594: 1624583 access forbidden by rule, client: 129.212.235.63 ... show more 2026/08/30 17:41:38 [error] 380594#380594: 1624583 access forbidden by rule, client: 129.212.235.63, server: betatechnologies.info, request: "GET /.env HTTP/2.0", host: "betatechnologies.info" 129.212.235.63 - - [30/Aug/2026:17:41:38 +0100] "GET /.env HTTP/2.0" 403 1045 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.67 Safari/537.36" 2026/08/30 17:41:39 [error] 380594#380594: *1624588 access forbidden by rule, client: 129.212.235.63, server: betatechnologies.info, request: "GET /vendor/.env HTTP/2.0", host: "betatechnologies.info", referrer: "https://google.com" show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-08-30 13:55:46 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 129.212.235.63 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 129.212.235.63 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 30 09:55:40.099199 2026] [security2:error] [pid 21254:tid 21266] [client 129.212.235.63:58673] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "conservativelabor.com"] [uri "/.env"] [unique_id "apQ2XGcgh2Bxd9hfwJRd4AAAAEU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-30 12:52:43 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 129.212.235.63 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 129.212.235.63 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 30 08:52:39.809669 2026] [security2:error] [pid 2278992:tid 2278997] [client 129.212.235.63:59338] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "condo.management"] [uri "/.env"] [unique_id "apQnlxsQqq80vuDctK6cGwAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-30 07:31:52 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 129.212.235.63 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 129.212.235.63 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 30 03:31:48.582019 2026] [security2:error] [pid 13260:tid 13260] [client 129.212.235.63:62542] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.anus.net"] [uri "/.env"] [unique_id "apPcZMf7W-Hl_hN0G-aNJwAAAAM"], referer: https://google.com show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 aranguren.org	2026-08-30 06:08:26 (2 days ago)	129.212.235.63 - - [30/Aug/2026:16:08:25 +1000] "GET /.env HTTP/1.1" 404 1102 "https://google.com" " ... show more 129.212.235.63 - - [30/Aug/2026:16:08:25 +1000] "GET /.env HTTP/1.1" 404 1102 "https://google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.75 Safari/537.36" 129.212.235.63 - - [30/Aug/2026:16:08:25 +1000] "GET /vendor/.env HTTP/1.1" 404 981 "-" "Mozilla/5.0 (Windows NT 6.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.167 Safari/537.36" 129.212.235.63 - - [30/Aug/2026:16:08:25 +1000] "GET /storage/.env HTTP/1.1" 404 1102 "https://google.com" "Mozilla/5.0 (Windows NT 6.3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.91 Safari/537.36" 129.212.235.63 - - [30/Aug/2026:16:08:25 +1000] "GET /public/.env HTTP/1.1" 404 1102 "https://google.com" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.162 Safari/537.36" 129.212.235.63 - - [30/Aug/2026:16:08:25 +1000] "GET /api/.env HTTP/1.1" 404 1102 "https://google.com" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/ ... show less	Bad Web Bot
🇪🇸 alferez	2026-08-30 05:42:51 (2 days ago)	Searching .(env\|sql\|zip\|tar\|rar) files	Hacking Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-08-30 02:56:05 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 129.212.235.63 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 129.212.235.63 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 29 22:55:59.271305 2026] [security2:error] [pid 6647:tid 6647] [client 129.212.235.63:61041] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.ucommsi.com"] [uri "/.env"] [unique_id "apObv-Epw_AMYk_Zw2lxkgAAAA4"], referer: https://google.com show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 36 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 193.47.62.69

🇮🇩 182.253.237.100

🇫🇷 157.143.132.32

🇭🇰 156.225.20.213

🇻🇳 103.75.183.43

🇬🇧 35.203.210.109

🇺🇸 35.196.4.105

🇭🇰 34.92.100.86

🇫🇮 2.26.136.243

🇺🇸 172.236.126.127

🇩🇪 167.94.145.25

🇳🇱 34.90.89.130

🇺🇸 34.41.244.140

🇳🇱 34.12.86.20

🇮🇹 188.74.143.119

🇫🇮 147.185.133.88

🇨🇳 123.15.134.166

🇸🇬 84.75.150.65

🇺🇸 71.27.86.44

🇯🇵 61.192.187.159