JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 135.129.160.47

135.129.160.47 was found in our database!

This IP was reported 63 times. Confidence of Abuse is 100%: ?

100%

ISP	All West Communications, Inc.
Usage Type	Fixed Line ISP
ASN	AS13614
Domain Name	awusa.net
Country	🇺🇸 United States of America
City	Farmington, Utah

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 135.129.160.47

Whois 135.129.160.47

IP Abuse Reports for 135.129.160.47:

This IP address has been reported a total of 63 times from 57 distinct sources. 135.129.160.47 was first reported on September 17th 2026, and the most recent report was 37 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇰🇷 winter	2026-09-20 15:52:22 (37 minutes ago)	Connection attemp from 135.129.160.47 to port 22	Brute-Force SSH
🇨🇦 outment	2026-09-20 15:52:08 (37 minutes ago)	2026-09-20T11:51:30.713338-04:00 ca-project-furina sshd[4013557]: Invalid user admin from 135.129.16 ... show more 2026-09-20T11:51:30.713338-04:00 ca-project-furina sshd[4013557]: Invalid user admin from 135.129.160.47 port 47924 2026-09-20T11:51:30.981642-04:00 ca-project-furina sshd[4013557]: Connection closed by invalid user admin 135.129.160.47 port 47924 [preauth] 2026-09-20T11:52:08.092884-04:00 ca-project-furina sshd[4014181]: Invalid user user from 135.129.160.47 port 53456 ... show less	Brute-Force SSH
🇪🇸 librebit	2026-09-20 15:41:08 (48 minutes ago)	Bad guys doing bad things, bad crawling	Bad Web Bot
Anonymous	2026-09-20 14:55:50 (1 hour ago)	2026-09-20T10:53:42.014371-04:00 seryfast sshd[2739096]: Invalid user admin from 135.129.160.47 port ... show more 2026-09-20T10:53:42.014371-04:00 seryfast sshd[2739096]: Invalid user admin from 135.129.160.47 port 36498 2026-09-20T10:54:24.446355-04:00 seryfast sshd[2739113]: Invalid user user from 135.129.160.47 port 51936 2026-09-20T10:55:49.875780-04:00 seryfast sshd[2739154]: Invalid user user from 135.129.160.47 port 38326 ... show less	Brute-Force SSH
🇺🇸 TPI-Abuse	2026-09-20 14:54:48 (1 hour ago)	(mod_security) mod_security (id:218420) triggered by 135.129.160.47 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:218420) triggered by 135.129.160.47 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 10:54:41.470699 2026] [security2:error] [pid 22817:tid 22817] [client 135.129.160.47:49564] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in\|out\|err)\|(in\|out)put\|fd\|memory\|temp\|filter)" at ARGS_NAMES:\\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found\|\|192.64.150.7:443\|F\|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "192.64.150.7"] [uri "/hello.world"] [unique_id "aq_zseMtTBaidpJwjOSH5AAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 bescared	2026-09-20 14:39:01 (1 hour ago)	F2B - Malicious activity detected. URL Probing. -c0423ad6-	Hacking Web App Attack
🇧🇬 OHOST.BG	2026-09-20 14:34:47 (1 hour ago)	2026-09-20T17:33:58.187570+03:00 fastdl sshd[2676973]: Invalid user user from 135.129.160.47 port 52 ... show more 2026-09-20T17:33:58.187570+03:00 fastdl sshd[2676973]: Invalid user user from 135.129.160.47 port 52240 2026-09-20T17:33:58.195536+03:00 fastdl sshd[2676973]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=135.129.160.47 2026-09-20T17:34:00.096870+03:00 fastdl sshd[2676973]: Failed password for invalid user user from 135.129.160.47 port 52240 ssh2 2026-09-20T17:34:43.929291+03:00 fastdl sshd[2677057]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=135.129.160.47 user=root 2026-09-20T17:34:46.006885+03:00 fastdl sshd[2677057]: Failed password for root from 135.129.160.47 port 56382 ssh2 ... show less	Brute-Force SSH
🇺🇸 xmission.com	2026-09-20 14:26:18 (2 hours ago)	Blocked by UFW (TCP on 23) Source port: 60514 TTL: 54 Packet length: 40 TOS: 0x08 This report (for ... show more Blocked by UFW (TCP on 23) Source port: 60514 TTL: 54 Packet length: 40 TOS: 0x08 This report (for 135.129.160.47) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Hacking Brute-Force
🇳🇱 host.slimatic.be	2026-09-20 14:22:58 (2 hours ago)	Fail2Ban SSH report from slimatic.slimatic.be:\n\n2026-09-20T10:22:45.900378-04:00 slimatic sshd-ses ... show more Fail2Ban SSH report from slimatic.slimatic.be:\n\n2026-09-20T10:22:45.900378-04:00 slimatic sshd-session[2744053]: Connection from 135.129.160.47 port 60558 on 94.176.214.98 port 22 rdomain "" 2026-09-20T10:22:57.426398-04:00 slimatic sshd-session[2744053]: Invalid user admin from 135.129.160.47 port 60558 show less	SSH
🇩🇪 lenz	2026-09-20 13:09:33 (3 hours ago)	135.129.160.47 - - [20/Sep/2026:15:09:29 +0200] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.% ... show more 135.129.160.47 - - [20/Sep/2026:15:09:29 +0200] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 226 "-" "libredtail-http" 135.129.160.47 - - [20/Sep/2026:15:09:33 +0200] "POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh HTTP/1.1" 400 226 "-" "libredtail-http" ... show less	Web App Attack Hacking
🇫🇮 iamxorum	2026-09-20 13:02:02 (3 hours ago)	Port scan / reconnaissance probe on closed infrastructure service ports. Log: 2026-09-20T13:02:01.24 ... show more Port scan / reconnaissance probe on closed infrastructure service ports. Log: 2026-09-20T13:02:01.242998+00:00 XRM-01 kernel: [62945.955931] [TRAP:HONEYPORT] IN=eth0 OUT= MAC=REDACTED SRC=135.129.160.47 DST=REDACTED LEN=40 TOS=0x00 PREC=0x00 TTL=41 ID=56509 PROTO=TCP SPT=54196 DPT=2375 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 yzfdude1	2026-09-20 12:57:23 (3 hours ago)	Sep 20 06:57:19 lighthope sshd[233775]: Invalid user user from 135.129.160.47 port 36378 Sep 20 06:5 ... show more Sep 20 06:57:19 lighthope sshd[233775]: Invalid user user from 135.129.160.47 port 36378 Sep 20 06:57:19 lighthope sshd[233775]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=135.129.160.47 Sep 20 06:57:22 lighthope sshd[233775]: Failed password for invalid user user from 135.129.160.47 port 36378 ssh2 ... show less	Brute-Force SSH
🇩🇪 DAUGDE	2026-09-20 12:32:47 (3 hours ago)	Sep 20 12:30:32 mail-mx2 sshd[38959]: Invalid user admin from 135.129.160.47 port 43460 Sep 20 12:31 ... show more Sep 20 12:30:32 mail-mx2 sshd[38959]: Invalid user admin from 135.129.160.47 port 43460 Sep 20 12:31:16 mail-mx2 sshd[38967]: Invalid user user from 135.129.160.47 port 33240 Sep 20 12:32:46 mail-mx2 sshd[38973]: Invalid user user from 135.129.160.47 port 58724 ... show less	Brute-Force SSH
🇫🇷 security.rdmc.fr	2026-09-20 12:30:37 (3 hours ago)	Port Scan Attack proto:TCP src:51820 dst:23	Port Scan
🇨🇭 GAS	2026-09-20 12:23:32 (4 hours ago)	Direct IP access. 135.129.160.47 - - [20/Sep/2026:14:23:27 +0200] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e ... show more Direct IP access. 135.129.160.47 - - [20/Sep/2026:14:23:27 +0200] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 392 "-" "libredtail-http" "REDACTED:80" "-" 135.129.160.47 - - [20/Sep/2026:14:23:31 +0200] "POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh HTTP/1.1" 400 392 "-" "libredtail-http" "REDACTED:80" "-" ... show less	Port Scan Web App Attack

Showing 1 to 15 of 63 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇪🇹 196.188.33.25

🇺🇸 173.239.240.253

🇨🇦 85.217.149.64

🇬🇧 31.171.130.27

🇦🇷 148.222.194.7

🇺🇿 144.124.193.168

🇫🇷 85.217.140.52

🇺🇸 66.132.172.236

🇳🇱 45.148.10.201

🇳🇱 45.148.10.183

🇺🇸 34.94.241.165

🇺🇸 212.28.184.195

🇲🇴 182.93.50.90

🇩🇪 167.94.146.39

🇧🇷 164.152.36.29

🇺🇸 143.244.185.69

🇬🇧 118.26.104.212

🇪🇸 79.117.241.60

🇺🇸 66.132.172.131

🇦🇺 34.40.216.138