JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 161.123.130.149

161.123.130.149 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 0%: ?

ISP	Wirels Connect (PTY) Ltd
Usage Type	Data Center/Web Hosting/Transit
ASN	AS203020
Domain Name	telafrica.net
Country	🇺🇸 United States of America
City	Romulus, Michigan

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 161.123.130.149

Whois 161.123.130.149

IP Abuse Reports for 161.123.130.149:

This IP address has been reported a total of 21 times from 5 distinct sources. 161.123.130.149 was first reported on May 14th 2024, and the most recent report was 5 months ago.

Old Reports: The most recent abuse report for this IP address is from 5 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2025-12-29 17:49:44 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 161.123.130.149 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 161.123.130.149 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 12:49:33.032356 2025] [security2:error] [pid 30292:tid 30605] [client 161.123.130.149:48193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kettlehill.net"] [uri "/media../.git/config"] [unique_id "aVK_LYGwzh_8AlcRvOiFTgAAARY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-13 14:13:37 (6 months ago)	(mod_security) mod_security (id:212620) triggered by 161.123.130.149 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:212620) triggered by 161.123.130.149 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 13 09:13:29.970076 2025] [security2:error] [pid 32544:tid 32544] [client 161.123.130.149:49265] ModSecurity: Access denied with code 403 (phase 2). Pattern match "<script\\\\b" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/07_XSS_XSS.conf"] [line "65"] [id "212620"] [rev "4"] [msg "COMODO WAF: Cross-site Scripting (XSS) Attack\|\|ftp.nbcnewsradio.com\|F\|2"] [data "Matched Data: <script found within REQUEST_URI: /?ct_mobile_keyword&ct_keyword&ct_city&ct_zipcode&search-listings=true&ct_price_from&ct_price_to&ct_beds_plus&ct_baths_plus&ct_sqft_from&ct_sqft_to&ct_lotsize_from&ct_lotsize_to&ct_year_from&ct_year_to&ct_community=<script>alert(document.domain);</script>&ct_mls&ct_brokerage=0&lat&lng"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "ftp.nbcnewsradio.com"] [uri "/"] [unique_id "aRXnieFr3Y75o8U7G7M43wAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-07-27 02:06:05 (10 months ago)	(mod_security) mod_security (id:210492) triggered by 161.123.130.149 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 161.123.130.149 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 26 22:06:03.818035 2025] [security2:error] [pid 783496:tid 783511] [client 161.123.130.149:45211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autoconfig.kettlehill.net"] [uri "/wp-config.php.old"] [unique_id "aIWJi0BIVxi3CeAsEkABFgAAAUc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-05-29 17:33:42 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 161.123.130.149 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 161.123.130.149 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 29 13:33:32.725296 2025] [security2:error] [pid 3084046:tid 3084046] [client 161.123.130.149:56305] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|ftp.farmers123.com\|F\|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ftp.farmers123.com"] [uri "/database.php.bak"] [unique_id "aDiabDbOgEJacZUW2VXdEAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-01-15 08:30:53 (1 year ago)	\| Common web attack.	Hacking SQL Injection Web App Attack
🇦🇺 oncord	2024-06-07 16:46:36 (2 years ago)	Form spam	Web Spam
🇺🇸 oncord	2024-06-03 10:48:27 (2 years ago)	Form spam	Web Spam
🇺🇸 oncord	2024-06-01 15:15:36 (2 years ago)	Form spam	Web Spam
🇺🇸 nowyouknow	2024-05-27 14:27:44 (2 years ago)	(From [email protected]) Do you want to take your business to the next level? We offer tailor ... show more (From [email protected]) Do you want to take your business to the next level? We offer tailored financing options meant to help businesses that have: * A minimum credit score: 450 * Over six months in business * Monthly revenue of $35k+ Whether you need capital for growth, new tools, or working capital, our flexible loan choices can provide the aid you need. Ready to look into your funding options? Begin your application process: https://bit.ly/4bKqJJb Please contact us if you have any questions. Our team is here to help your business thrive! Funding Officer [email protected] Unsubscribe here if you don't want to get these great messages: https://bit.ly/cflunsubs 3843 Pine Street, Ogdensburg, NY, US, T0c 0x0 show less	Phishing Web Spam
🇺🇸 nowyouknow	2024-05-27 01:55:41 (2 years ago)	(From [email protected]) Are you looking to boost your business growth? We have specialized fin ... show more (From [email protected]) Are you looking to boost your business growth? We have specialized financing solutions designed to help businesses that have: * Minimum credit score: 450 * More than six months in business * Monthly revenue of $35k+ If you need financing for scaling up, new equipment, or working capital, our flexible loan plans can provide the assistance you need. Excited to look into your funding options? Start your application today: https://bit.ly/4bKqJJb Please contact us if you have any queries. We're here to help your business grow! Funding Officer [email protected] Unsubscribe here if you don't want to get these fantastic deals: https://bit.ly/cflunsubs 3040 Twin Willow Lane, North Tonawanda, New York, US, 27209 show less	Phishing Web Spam
🇺🇸 nowyouknow	2024-05-26 19:04:02 (2 years ago)	(From [email protected]) Are you looking to boost your business growth? We offer customiz ... show more (From [email protected]) Are you looking to boost your business growth? We offer customized financing solutions designed to help businesses that have: * A minimum credit score: 450 * Over six months in business * Monthly revenue of $35k+ If you need funds for expansion, new tools, or working capital, our versatile loan options can offer the aid you need. Ready to discover your funding options? Apply now: https://bit.ly/4bKqJJb Don't hesitate to contact us if you have any questions. We're here to help your business thrive! Funding Officer [email protected] Unsubscribe here if you don't want to get these awesome offers: https://bit.ly/cflunsubs Rua Henrique Jorge Vogelsanger 1401, Saratoga Springs, NY, USA, 89201-610 show less	Phishing Web Spam
🇺🇸 nowyouknow	2024-05-26 17:06:34 (2 years ago)	(From [email protected]) Would you like to take your business to the next level? We offer cust ... show more (From [email protected]) Would you like to take your business to the next level? We offer customized financing solutions meant to help businesses that have: * Minimum credit score: 450 * Over six months in business * Monthly revenue of $35k+ Whether you need funds for expansion, new tools, or working capital, our versatile loan plans can offer the assistance you need. Excited to explore your funding options? Begin your application process: https://bit.ly/3yrxrFB Please contact us if you have any queries. We're here to help your business grow! Funding Officer [email protected] Unsubscribe here if you don't want to get these great deals: https://bit.ly/cflunsubs Morgenster 101, Watertown, New York, USA, 2201 Sz show less	Phishing Web Spam
Anonymous	2024-05-25 03:09:22 (2 years ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇺🇸 nowyouknow	2024-05-23 11:47:13 (2 years ago)	(From [email protected]) Would you like to take your business to the next level? We offer ... show more (From [email protected]) Would you like to take your business to the next level? We offer customized financing options meant to help businesses that have: * Minimum credit score: 450 * More than six months in business * Monthly revenue of $35k+ Whether you need financing for growth, new machinery, or working capital, our adaptable loan plans can offer the assistance you need. Ready to explore your funding options? Start your application today: https://bit.ly/3yrxrFB Please contact us if you have any questions. We are ready to help your business thrive! Funding Officer [email protected] Unsubscribe here if you don't want to get these awesome newsletters: https://docs.google.com/forms/d/e/1FAIpQLSfqamyB6byPaAwgcS6ofGmo4N4Pqkn2ZutAk6aInDQ_WhohRg/viewform Jurriaan Kokstraat 185, Port Chester, New York, US, 2586 Se show less	Phishing Web Spam
Anonymous	2024-05-23 01:26:44 (2 years ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 199.45.155.64

🇲🇽 186.96.145.241

🇺🇸 162.216.150.55

🇺🇸 147.185.132.227

🇺🇸 98.26.115.52

🇨🇦 85.217.149.2

🇹🇬 41.207.188.29

🇮🇳 183.82.111.224

🇫🇮 147.185.133.177

🇺🇸 107.170.247.81

🇺🇸 104.168.162.165

🇺🇦 82.21.224.130

🇱🇹 81.30.98.49

🇱🇹 45.227.254.170

🇮🇩 43.243.142.42

🇷🇺 5.167.70.253

🇮🇩 223.25.108.2

🇵🇰 202.163.107.57

🇻🇪 201.249.87.203

🇦🇷 200.32.52.150