JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 149.130.173.142

149.130.173.142 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 15%: ?

15%

ISP	Oracle Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS31898
Domain Name	oracle.com
Country	🇨🇴 Colombia
City	Cota, Cundinamarca

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 149.130.173.142

Whois 149.130.173.142

IP Abuse Reports for 149.130.173.142:

This IP address has been reported a total of 10 times from 4 distinct sources. 149.130.173.142 was first reported on October 21st 2025, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇯🇵 SentinalX by uzumaru	2026-07-25 00:50:33 (2 hours ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: country.dstatbot.win:443:443 show less	Open Proxy Port Scan
🇯🇵 demonsword	2026-07-23 12:04:59 (1 day ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: country2.dstatbot.win:443:443 show less	Open Proxy Port Scan
🇯🇵 demonsword	2026-07-22 12:01:34 (2 days ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: request.countbot.win:443:443 show less	Open Proxy Port Scan
🇯🇵 demonsword	2026-07-21 12:00:31 (3 days ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: gac.gov.in:443:443 show less	Open Proxy Port Scan
🇯🇵 demonsword	2026-07-20 11:31:48 (4 days ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: www.chinadaily.com.cn:443:443 show less	Open Proxy Port Scan
🇯🇵 SentinalX by uzumaru	2026-07-19 05:50:00 (5 days ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: forum.cfx.re:443:443 show less	Open Proxy Port Scan
🇯🇵 demonsword	2026-07-17 12:52:28 (1 week ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: www.hukumonline.com:443:443 show less	Open Proxy Port Scan
🇯🇵 demonsword	2026-07-16 12:49:18 (1 week ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: www.traveloka.com:443:443 show less	Open Proxy Port Scan
Anonymous	2025-10-22 12:55:00 (9 months ago)	Proxy Squid scanning	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-10-21 16:06:48 (9 months ago)	(mod_security) mod_security (id:217210) triggered by 149.130.173.142 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:217210) triggered by 149.130.173.142 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 21 12:06:40.489404 2025] [security2:error] [pid 9317:tid 9317] [client 149.130.173.142:36612] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?i:(?:[a-z]{3,10}\\\\s+(?:\\\\w{3,7}?://[\\\\w\\\\-\\\\./](?::\\\\d+)?)?/[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S])?\|connect (?:\\\\d{1,3}\\\\.){3}\\\\d{1,3}\\\\.?(?::\\\\d+)?\|options \\\\)\\\\s+[\\\\w\\\\./]+\|get /[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "114"] [id "217210"] [rev "1"] [msg "COMODO WAF: Invalid HTTP Request Line\|\|www.serv00.com:443\|F\|4"] [data "CONNECT www.serv00.com:443 HTTP/1.1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.serv00.com"] [uri "/"] [unique_id "aPevkFsMRn8QcvVWl8nYWwAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 213.249.175.20

🇮🇩 202.51.214.99

🇹🇼 198.235.24.88

🇩🇪 194.88.98.105

🇩🇪 185.220.101.12

🇺🇸 172.71.254.140

🇧🇷 143.202.228.50

🇫🇷 91.231.89.112

🇺🇸 45.194.67.29

🇳🇱 45.156.128.77

🇷🇺 45.91.64.7

🇬🇧 35.203.211.178

🇵🇪 2800:200:ebc0:d1:3df1:cb61:68ad:4139

🇹🇼 198.235.24.119

🇺🇸 198.98.56.227

🇹🇭 182.52.243.246

🇩🇪 167.94.146.47

🇧🇳 119.160.163.217

🇨🇳 116.181.10.234

🇿🇦 102.66.149.162