JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 149.232.129.230

149.232.129.230 was found in our database!

This IP was reported 28 times. Confidence of Abuse is 35%: ?

35%

ISP	Huawei-Cloud-MX
Usage Type	Data Center/Web Hosting/Transit
ASN	AS136907
Domain Name	huawei.com
Country	🇲🇽 Mexico
City	Mexico City, Mexico City

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 149.232.129.230

Whois 149.232.129.230

IP Abuse Reports for 149.232.129.230:

This IP address has been reported a total of 28 times from 18 distinct sources. 149.232.129.230 was first reported on January 24th 2026, and the most recent report was 18 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇬 mypatricks	2026-06-11 12:19:11 (18 hours ago)	149.232.129.230 \| Port: 10159 \| DNS: ecs-149-232-129-230.compute.hwclouds-dns.com 2026-06-11T20:19:1 ... show more 149.232.129.230 \| Port: 10159 \| DNS: ecs-149-232-129-230.compute.hwclouds-dns.com 2026-06-11T20:19:10+08:00 America/Mexico_City \| HWCLOUDS-DNS Data Center/Web Hosting/Transit Spam list \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 HTTP/1.1 443 GET \| URL: /zh/%e5%88%9d%e5%ad%a6%e8%80%85%e6%8c%87%e5%8d%97/%e5%93%aa%e7%a7%8d%e9%a3%9f%e7%94%a8%e8%89%b2%e7%b4%a0%e6%9b%b4%e9%80%82%e5%90%88gumpaste/?c1cc1bbdfedaf2b3cb \| Ref: - \| Country: MX/Mexico/−06:00 IP City: Mexico City Windows a0a08ffb7ce455c1-DFW/Dallas, TX, United States 1 hits/0 secs Browser 1 show less	Brute-Force Web App Attack Blog Spam Web Spam Exploited Host
Anonymous	2026-06-06 18:45:03 (5 days ago)	Botnet activity. Attribution: Angara Technologies Group / mikhail-smirnov-79830322 \| Killer paramete ... show more Botnet activity. Attribution: Angara Technologies Group / mikhail-smirnov-79830322 \| Killer parameter blocked \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 \| (Magento Site) show less	Hacking Bad Web Bot
🇺🇸 nodepile	2026-05-28 05:50:41 (2 weeks ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/static/version1775170088/fr ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/static/version1775170088/frontend/Smartwave/porto/en_US/js-translation.json ua='Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36') show less	Web App Attack Exploited Host
🇫🇷 Sklurk	2026-05-16 08:50:47 (3 weeks ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-05-15 07:04:40 (4 weeks ago)	Web App Attack	Web App Attack
🇫🇷 vtchost.com	2026-05-13 16:41:50 (4 weeks ago)	requested honeypot page - ignored robots.txt - scraping botnet or virus ...	Bad Web Bot Exploited Host
🇺🇸 nodepile	2026-05-07 09:31:28 (1 month ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/media/catalog/product/cache ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/media/catalog/product/cache/0bc7e8298c705bb0d1bb16a5dfbdb6bc/1/_/1_2773_28.jpg ua='Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36') show less	Web App Attack Exploited Host
🇫🇮 YF	2026-05-05 22:01:45 (1 month ago)	WordPress content enumeration	Web App Attack
🇫🇷 vtchost.com	2026-05-04 03:19:58 (1 month ago)	requested honeypot page - ignored robots.txt - scraping botnet or virus ...	Bad Web Bot Exploited Host
🇩🇪 pltcldvlpr	2026-05-03 21:25:33 (1 month ago)	Unidentified crawler ignoring robots.txt: 149.232.129.230 - - [03/May/2026:23:25:29 +0200] "GET /sea ... show more Unidentified crawler ignoring robots.txt: 149.232.129.230 - - [03/May/2026:23:25:29 +0200] "GET /search?page=search&term=Autoverkehr&affiliation=spd&minDate=2019-01-01&maxDate=2019-12-31&exportParagraphs=1 HTTP/2.0" 200 5563 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" asn=136907 org="HUAWEI INTERNATIONAL PTE. LTD." 149.232.129.230 - - [03/May/2026:23:25:30 +0200] "HEAD /search?page=search&term=Autoverkehr&affiliation=spd&minDate=2019-01-01&maxDate=2019-12-31&exportParagraphs=1 HTTP/1.1" 403 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" asn=136907 org="HUAWEI INTERNATIONAL PTE. LTD." 149.232.129.230 - - [03/May/2026:23:25:32 +0200] "GET /search?page=search&term=Autoverkehr&affiliation=spd&minDate=2019-01-01&maxDate=2019-12-31&exportParagraphs=1 HTTP/1.1" 200 5582 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like ... show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-05-02 11:57:47 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 149.232.129.230 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 149.232.129.230 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 02 07:57:44.732139 2026] [security2:error] [pid 15656:tid 15656] [client 149.232.129.230:39500] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|nrvoutdoors.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "nrvoutdoors.com"] [uri "/SNOWDOE/Thumbs.db"] [unique_id "afXmuC3uIRIz_Ja0zVc-OgAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 nodepile	2026-04-28 01:30:15 (1 month ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/static/version1775170088/fr ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/static/version1775170088/frontend/Smartwave/porto/en_US/Magento_Ui/templates/modal/modal-popup.html ua='Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36') show less	Web App Attack Exploited Host
🇺🇸 nodepile	2026-04-11 21:27:04 (2 months ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/static/version1775170088/fr ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/static/version1775170088/frontend/Smartwave/porto/en_US/js-translation.json ua='Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36') show less	Web App Attack Exploited Host
🇪🇸 el-brujo	2026-04-09 04:52:32 (2 months ago)	Cloudflare WAF: Request Path: /programacion_general/poner_sonido_a_snake_html5-t475071.0.html;msg214 ... show more Cloudflare WAF: Request Path: /programacion_general/poner_sonido_a_snake_html5-t475071.0.html;msg2141498 Request Query: Host: foro.elhacker.net userAgent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Action: managed_challenge Source: firewallCustom ASN Description: HWCLOUDS-AS-AP HUAWEI CLOUDS Country: MX Method: GET Timestamp: 2026-04-09T04:52:32Z ruleId: 561d6e73a48e41d18a1a014356a284e1. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
🇺🇸 johnkarlhill	2026-04-02 19:30:23 (2 months ago)	WebKnight blocked malicious web request on johnkarlhill.com	Brute-Force SSH

Showing 1 to 15 of 28 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 198.11.179.46

🇩🇪 167.94.146.78

🇺🇸 162.216.149.157

🇺🇸 70.37.89.177

🇺🇸 65.49.1.226

🇺🇸 195.184.76.108

🇺🇸 195.184.76.29

🇫🇮 147.185.133.41

🇨🇳 120.253.33.107

🇫🇷 92.205.184.118

🇫🇷 91.196.152.110

🇫🇷 91.196.152.108

🇩🇪 43.228.157.152

🇩🇪 5.83.136.184

🇬🇧 194.50.235.147

🇰🇷 175.207.225.36

🇫🇷 163.172.105.125

🇭🇰 134.122.188.83

🇩🇪 64.89.163.131

🇺🇸 64.62.156.162