JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 57.129.81.152

57.129.81.152 was found in our database!

This IP was reported 192 times. Confidence of Abuse is 57%: ?

57%

ISP	OVH GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16276
Hostname(s)	vps-baed09d1.vps.ovh.net
Domain Name	ovh.net
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 57.129.81.152

Whois 57.129.81.152

IP Abuse Reports for 57.129.81.152:

This IP address has been reported a total of 192 times from 53 distinct sources. 57.129.81.152 was first reported on March 29th 2025, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Sklurk	2026-06-13 16:27:36 (2 hours ago)	Web App Attack	Web App Attack
🇬🇷 setupgr	2026-06-12 19:38:09 (23 hours ago)	(mod_security) mod_security (id:11000011) triggered by 57.129.81.152: 1 in the last 86400 secs; Port ... show more (mod_security) mod_security (id:11000011) triggered by 57.129.81.152: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Fri Jun 12 22:38:07.025017 2026] [security2:error] [pid 351529:tid 351556] [client 57.129.81.152:60472] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "ovh.net" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "128"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: vps-baed09d1.vps.ovh.net"] [hostname "ftiaxtomonosou.gr"] [uri "/%CF%84%CE%B1_%CE%B5%CE%AF%CE%B4%CE%B7_%CF%84%CE%BF%CF%85_%CE%BE%CF%8D%CE%BB%CE%BF%CF%85/oregon-pine/"] [unique_id "aixgH2m9gdo9fuJjoHg8zAAAAUA"] show less	Port Scan
🇬🇷 setupgr	2026-06-11 10:43:24 (2 days ago)	(mod_security) mod_security (id:11000011) triggered by 57.129.81.152: 1 in the last 86400 secs; Port ... show more (mod_security) mod_security (id:11000011) triggered by 57.129.81.152: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Jun 11 13:43:22.271171 2026] [security2:error] [pid 2152061:tid 2152236] [client 57.129.81.152:57854] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "ovh.net" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "128"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: vps-baed09d1.vps.ovh.net"] [hostname "ftiaxtomonosou.gr"] [uri "/%CE%B5%CF%80%CE%B1%CE%B3%CE%B3%CE%B5%CE%BB%CE%BC%CE%B1%CF%84%CE%B9%CE%BA%CE%BF%CE%AF_%CF%87%CF%8E%CF%81%CE%BF%CE%B9/%CE%B8%CF%85%CF%81%CE%AF%CE%B4%CE%B1-%CE%BA%CE%B9%CE%BD%CE%B7%CF%84%CF%8E%CE%BD/"] [unique_id "aiqRSr6g179B6nG0Xi64cAAAAQI"] show less	Port Scan
🇬🇷 setupgr	2026-06-11 01:16:40 (2 days ago)	(mod_security) mod_security (id:11000011) triggered by 57.129.81.152: 1 in the last 86400 secs; Port ... show more (mod_security) mod_security (id:11000011) triggered by 57.129.81.152: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Jun 11 04:16:38.313224 2026] [security2:error] [pid 1859165:tid 1859325] [client 57.129.81.152:47652] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "ovh.net" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "128"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: vps-baed09d1.vps.ovh.net"] [hostname "ftiaxtomonosou.gr"] [uri "/%CF%84%CE%B1_%CE%B5%CE%AF%CE%B4%CE%B7_%CF%84%CE%BF%CF%85_%CE%BE%CF%8D%CE%BB%CE%BF%CF%85/meranti-light-red/"] [unique_id "aioMdvPtIMXg7WfnJtDUbwAAAIo"] show less	Port Scan
🇩🇪 HandyTreff.de	2026-06-10 19:13:25 (3 days ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -67.939 (Bad < -10 / Very Bad < -20 ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -67.939 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Sa show less	Web App Attack Bad Web Bot
🇫🇷 Sklurk	2026-06-10 13:27:44 (3 days ago)	Web App Attack	Web App Attack
Anonymous	2026-06-09 21:02:31 (3 days ago)	Repeated automated scraping and high-volume requests against a secured web server following multiple ... show more Repeated automated scraping and high-volume requests against a secured web server following multiple rate limit violations. show less	Web App Attack
🇩🇪 philipplindner	2026-06-08 14:32:48 (5 days ago)	Vulnerability scan on philipp-lindner.de	Hacking
🇺🇸 TPI-Abuse	2026-05-31 01:21:47 (1 week ago)	(mod_security) mod_security (id:210730) triggered by 57.129.81.152 (vps-baed09d1.vps.ovh.net): 1 in ... show more (mod_security) mod_security (id:210730) triggered by 57.129.81.152 (vps-baed09d1.vps.ovh.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 30 21:21:40.495209 2026] [security2:error] [pid 16087:tid 16087] [client 57.129.81.152:58326] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.gracefaerie.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.gracefaerie.com"] [uri "/Assets/2p/Thumbs.db"] [unique_id "ahuNJFLKs5k9H8aeqwqZ2gAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 A000Z	2026-05-30 11:18:58 (2 weeks ago)	Fail2Ban: 57.129.81.152 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5. ... show more Fail2Ban: 57.129.81.152 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 show less	Bad Web Bot
🇩🇪 Vegascosmetics	2026-05-27 21:58:33 (2 weeks ago)	Kingcopy(AI-IDS): IP is wandering around the site and acting suspiciously.	Bad Web Bot
🇮🇹 A000Z	2026-05-27 19:39:43 (2 weeks ago)	Fail2Ban: 57.129.81.152 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5. ... show more Fail2Ban: 57.129.81.152 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 show less	Bad Web Bot
🇫🇷 solution.it	2026-05-20 08:33:11 (3 weeks ago)	[Wed May 20 10:33:10.863885 2026] [php7:error] [pid 887948:tid 887948] [client 57.129.81.152:56750] ... show more [Wed May 20 10:33:10.863885 2026] [php7:error] [pid 887948:tid 887948] [client 57.129.81.152:56750] script '/var/www/html/internetriders.org/wp-login.php' not found or unable to stat show less	Web App Attack
🇮🇹 A000Z	2026-05-19 17:25:29 (3 weeks ago)	Fail2Ban: 57.129.81.152 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5. ... show more Fail2Ban: 57.129.81.152 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 show less	Bad Web Bot
🇮🇹 [email protected]	2026-05-17 08:35:20 (3 weeks ago)	57.129.81.152 - - [17/May/2026:09:25:24 +0200] "GET /index.php?action=calendar%3Bviewlist%3Byear%3D2 ... show more 57.129.81.152 - - [17/May/2026:09:25:24 +0200] "GET /index.php?action=calendar%3Bviewlist%3Byear%3D2026%3Bmonth%3D6%3Bday%3D12 HTTP/1.1" 404 6877 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36" show less	Web App Attack

Showing 1 to 15 of 192 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 162.216.150.109

🇺🇸 147.185.132.63

🇱🇹 92.112.182.141

🇭🇰 45.142.154.39

🇸🇬 43.156.61.33

🇬🇧 35.203.211.124

🇺🇦 185.159.162.133

🇨🇳 180.167.128.203

🇺🇸 172.245.16.13

🇺🇸 162.216.150.103

🇺🇸 162.216.149.53

🇳🇱 160.119.69.14

🇭🇰 156.245.239.180

🇮🇳 103.248.94.27

🇰🇿 95.59.79.133

🇳🇱 85.11.167.11

🇦🇱 79.106.125.159

🇸🇦 51.235.145.92

🇬🇧 51.68.207.118

🇧🇷 45.178.155.221