JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 161.123.34.245

161.123.34.245 was found in our database!

This IP was reported 49 times. Confidence of Abuse is 4%: ?

ISP	Wirels Connect (PTY) Ltd
Usage Type	Data Center/Web Hosting/Transit
ASN	AS203020
Domain Name	telafrica.net
Country	🇮🇳 India
City	Mumbai, Maharashtra

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 161.123.34.245

Whois 161.123.34.245

IP Abuse Reports for 161.123.34.245:

This IP address has been reported a total of 49 times from 5 distinct sources. 161.123.34.245 was first reported on July 4th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 MAGIC	2026-06-09 00:32:41 (1 day ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇦🇺 MAGIC	2026-04-22 02:09:06 (1 month ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇫🇷 SpaceHost-Server	2026-04-10 22:25:46 (1 month ago)		Brute-Force Web App Attack
🇩🇪 macrob	2026-04-10 20:30:11 (1 month ago)	2026/04/10 20:30:10 [error] 4161747#4161747: 142396023 access forbidden by rule, client: 161.123.34 ... show more 2026/04/10 20:30:10 [error] 4161747#4161747: 142396023 access forbidden by rule, client: 161.123.34.245, server: binixo.com.ar, request: "GET /wp-includes/css/dist/block-library/style.min.css?ver=5.3.7 HTTP/2.0", host: "binixo.com.ar", referrer: "https://binixo.com.ar/prestamos-personales-en-mendoza/" 2026/04/10 20:30:10 [error] 4161747#4161747: 142396024 access forbidden by rule, client: 161.123.34.245, server: binixo.com.ar, request: "GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=4.9.1 HTTP/2.0", host: "binixo.com.ar", referrer: "https://binixo.com.ar/prestamos-personales-en-mendoza/" 2026/04/10 20:30:10 [error] 4161747#4161747: 142396025 access forbidden by rule, client: 161.123.34.245, server: binixo.com.ar, request: "GET /wp-content/plugins/cookie-notice/css/front.min.css?ver=5.3.7 HTTP/2.0", host: "binixo.com.ar", referrer: "https://binixo.com.ar/prestamos-personales-en-mendoza/" ... show less	Web App Attack
🇮🇩 hermawan	2026-03-18 07:26:48 (2 months ago)	2026-03-18T14:26:11.853169+07:00 staklim-malang kernel: Ipt-PREROUCOBA:DROP IN=eth0 OUT= MAC=c4:37:7 ... show more 2026-03-18T14:26:11.853169+07:00 staklim-malang kernel: Ipt-PREROUCOBA:DROP IN=eth0 OUT= MAC=c4:37:72:f5:bf:f3:90:e2:ba:b3:7b:52:08:00 SRC=161.123.34.245 DST=103.166.156.58 LEN=60 TOS=0x00 PREC=0x00 TTL=55 ID=32988 DF PROTO=TCP SPT=34881 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Email Spam Hacking
🇮🇩 hermawan	2026-03-09 20:16:02 (3 months ago)	2026-03-10T00:50:43.528632+07:00 staklim-malang kernel: Ipt-PREROUCOBA:DROP IN=eth0 OUT= MAC=c4:37:7 ... show more 2026-03-10T00:50:43.528632+07:00 staklim-malang kernel: Ipt-PREROUCOBA:DROP IN=eth0 OUT= MAC=c4:37:72:f5:bf:f3:90:e2:ba:b3:7b:52:08:00 SRC=161.123.34.245 DST=103.166.156.58 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=39310 DF PROTO=TCP SPT=34655 DPT=443 WINDOW=43080 RES=0x00 SYN URGP=0 ... show less	Email Spam Hacking
🇮🇩 hermawan	2026-01-06 22:22:42 (5 months ago)	[Wed Jan 07 05:22:39.761448 2026] [security2:error] [pid 316562:tid 140119720298176] [client 161.123 ... show more [Wed Jan 07 05:22:39.761448 2026] [security2:error] [pid 316562:tid 140119720298176] [client 161.123.34.245:37577] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "189"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: 20% found within SERVER_NAME: staklim-jatim.bmkg.go.id request_line = GET /pdfjs/web/viewer.html?file=/images/Klimatologi/Prakiraan/Peringatan_Dini/2025/10_Oktober_2025/20-29/Press_Release_Kewaspadaan_Cuaca_Ekstrim_di_Jawa_Timur_20%E2%80%9329_Oktober_2025_e_B_ME_02_04_052_KSUB_X_2025.pdf HTTP/2.0 Request URI RAW = /pdfjs/web/viewer.html?file=/images/Klimatologi/Prakiraan/Peringatan_Dini/2025/10_Oktob..."] [hostname "staklim-jatim.bmkg.go.id"] [uri "/pdfjs/web/viewer.html"] [unique_id "aV2LL7rvJnMhiJIW ... show less	Hacking Web App Attack
🇮🇩 hermawan	2025-12-09 07:00:58 (6 months ago)	[Tue Dec 09 14:00:08.445613 2025] [security2:error] [pid 184147:tid 140517030463168] [client 161.123 ... show more [Tue Dec 09 14:00:08.445613 2025] [security2:error] [pid 184147:tid 140517030463168] [client 161.123.34.245:33027] ModSecurity: Access denied with code 403 (phase 2). Pattern match "." at ARGS_NAMES:id. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-921-PROTOCOL-ATTACK.conf"] [line "730"] [id "921170"] [msg "deny 921170"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: i found within ARGS_NAMES:id: id request_line = GET /index.php?id=642 HTTP/2.0 Request URI RAW = /index.php?id=642 Request Basename = index.php"] [ver "OWASP_CRS/4.20.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ATTACK"] [tag "capec/1000/152/137/15/460"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php"] [unique_id "aTfI-EcT4Rr1FsHjqBaj1gAAhQc"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[184155] [t1hEdn8VjsY] [aTfI-EcT4Rr1FsHjqBa ... show less	Hacking Web App Attack
🇮🇩 hermawan	2025-11-27 01:53:24 (6 months ago)	[Thu Nov 27 06:27:50.863700 2025] [security2:error] [pid 322394:tid 139901052233408] [client 161.123 ... show more [Thu Nov 27 06:27:50.863700 2025] [security2:error] [pid 322394:tid 139901052233408] [client 161.123.34.245:38445] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "188"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: %3a found within SERVER_NAME: staklim-jatim.bmkg.go.id request_line = GET /index.php/profil/arsip-artikel?catid=480&id=996%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-17-23-mei-2016&start=70 HTTP/2.0 Request URI RAW = /index.php/profil/arsip-artikel?catid=480&id=996%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-17-23-mei-2016&start=70 Reques..."] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/arsip-artikel"] [unique_id "aSeM9h7 ... show less	Hacking Web App Attack
🇮🇩 hermawan	2025-11-26 12:35:12 (6 months ago)	[Wed Nov 26 19:24:29.824895 2025] [security2:error] [pid 1611851:tid 139817433081536] [client 161.12 ... show more [Wed Nov 26 19:24:29.824895 2025] [security2:error] [pid 1611851:tid 139817433081536] [client 161.123.34.245:45125] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "183"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: %3a found within SERVER_NAME: staklim-jatim.bmkg.go.id request_line = GET /index.php/profil/arsip-artikel?catid=478&id=1175%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-18-24-oktober-2016&start=80 HTTP/2.0 Request URI RAW = /index.php/profil/arsip-artikel?catid=478&id=1175%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-18-24-oktober-2016&start..."] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/arsip-artikel"] [unique_id "aSbxfe ... show less	Hacking Web App Attack
🇮🇩 hermawan	2025-11-21 02:14:29 (6 months ago)	[Fri Nov 21 09:09:44.137699 2025] [security2:error] [pid 522389:tid 140269942994624] [client 161.123 ... show more [Fri Nov 21 09:09:44.137699 2025] [security2:error] [pid 522389:tid 140269942994624] [client 161.123.34.245:38293] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "183"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: %3a found within SERVER_NAME: staklim-jatim.bmkg.go.id request_line = GET /index.php/profil/arsip-artikel?catid=479&id=1030%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-14-20-juni-2016&start=160 HTTP/2.0 Request URI RAW = /index.php/profil/arsip-artikel?catid=479&id=1030%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-14-20-juni-2016&start=160 ..."] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/arsip-artikel"] [unique_id "aR_J6Cy ... show less	Hacking Web App Attack
🇮🇩 hermawan	2025-11-18 18:06:17 (6 months ago)	[Wed Nov 19 00:56:23.056559 2025] [security2:error] [pid 109810:tid 139674679953088] [client 161.123 ... show more [Wed Nov 19 00:56:23.056559 2025] [security2:error] [pid 109810:tid 139674679953088] [client 161.123.34.245:45837] ModSecurity: Access denied with code 403 (phase 2). Pattern match "." at ARGS_NAMES:file. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-921-PROTOCOL-ATTACK.conf"] [line "728"] [id "921170"] [msg "deny 921170"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: f found within ARGS_NAMES:file: file request_line = GET /pdfjs/web/viewer.html?file=/images/Klimatologi/Analisis/02-Analisis_Dasarian/Monitoring_dan_Prakiraan_Curah_Hujan-Dasarian/Monitoring_dan_Prakiraan_Curah_Hujan-Dasarian_di_Provinsi_Jawa_Timur/2025/07_Juli_2025/Das-II/Monitoring_dan_Prediksi_Curah_Hujan-Dasarian_di_Provinsi_Jawa_Timur_Update_20_Juli_2025.pdf HTTP/2.0 Request URI RAW = /pdfjs/web..."] [ver "OWASP_CRS/4.20.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [ta ... show less	Hacking Web App Attack
🇮🇩 hermawan	2025-11-15 14:56:03 (6 months ago)	[Sat Nov 15 21:29:49.413547 2025] [security2:error] [pid 982786:tid 140209162356416] [client 161.123 ... show more [Sat Nov 15 21:29:49.413547 2025] [security2:error] [pid 982786:tid 140209162356416] [client 161.123.34.245:41091] ModSecurity: Access denied with code 403 (phase 2). Pattern match "." at ARGS_NAMES:file. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-921-PROTOCOL-ATTACK.conf"] [line "728"] [id "921170"] [msg "deny 921170"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: f found within ARGS_NAMES:file: file request_line = GET /pdfjs/web/viewer.html?file=/images/Klimatologi/Buletin/Bulanan/Informasi_Iklim_dan_Lingkungan/2025/07_Juli_2025/07_Buletin_Bulanan_Informasi_Iklim_dan_Lingkungan_Volume_9_No_8_Edisi_AGUSTUS_Tahun_2025_Update_dari_Analisis_Bulan_Juli_Tahun_2025.pdf HTTP/2.0 Request URI RAW = /pdfjs/web/viewer.html?file=/images/Klimatologi/Buletin/Bulanan/Informa..."] [ver "OWASP_CRS/4.20.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [ta ... show less	Hacking Web App Attack
🇮🇩 hermawan	2025-11-14 09:34:16 (6 months ago)	[Fri Nov 14 15:17:30.730061 2025] [security2:error] [pid 548626:tid 139673386059456] [client 161.123 ... show more [Fri Nov 14 15:17:30.730061 2025] [security2:error] [pid 548626:tid 139673386059456] [client 161.123.34.245:40637] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "183"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: file= found within SERVER_NAME: staklim-jatim.bmkg.go.id request_line = GET /pdfjs/web/viewer.html?file=/b/bulananpasuruan.pdf HTTP/2.0 Request URI RAW = /pdfjs/web/viewer.html?file=/b/bulananpasuruan.pdf Request Basename = viewer.html"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/pdfjs/web/viewer.html"] [unique_id "aRblmlDbc3Yu8mpRfiURlgAAywk"], referer https://www.google.com/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[548636] [Ll/5oAllp18] [aRblmlDbc3Yu8mpRfiURlgAAywk] keep_alive=[1 ... show less	Hacking Web App Attack
🇮🇩 hermawan	2025-11-13 00:07:59 (6 months ago)	[Thu Nov 13 07:05:08.229953 2025] [security2:error] [pid 621173:tid 140633688757952] [client 161.123 ... show more [Thu Nov 13 07:05:08.229953 2025] [security2:error] [pid 621173:tid 140633688757952] [client 161.123.34.245:41957] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "183"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: /index.php?id= found within SERVER_NAME: staklim-jatim.bmkg.go.id request_line = GET /index.php?id=2094 HTTP/2.0 Request URI RAW = /index.php?id=2094 Request Basename = index.php"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php"] [unique_id "aRUgtM19AGkPZGMRBEx_dwAATAE"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[621178] [+npCou5SqhI] [aRUgtM19AGkPZGMRBEx_dwAATAE] keep_alive=[1] [2025-11-13 07:05:08.229962] [R:aRUgtM19AGkPZGMRBEx_dwAATAE] UA:'Mozilla/5.0 (Windows NT 10.0; Win64 ... show less	Hacking Web App Attack

Showing 1 to 15 of 49 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇻🇪 201.249.205.94

🇳🇱 192.42.116.94

🇺🇸 184.105.247.239

🇫🇮 62.238.22.252

🇭🇰 47.243.37.78

🇳🇱 45.148.10.141

🇧🇪 34.53.192.169

🇺🇸 34.29.61.169

🇺🇸 216.59.173.21

🇺🇸 140.82.45.210

🇺🇸 137.184.30.51

🇻🇳 103.156.2.177

🇱🇾 102.203.197.6

🇩🇪 87.106.47.28

🇨🇦 85.217.149.45

🇺🇸 66.45.144.201

🇮🇳 49.200.158.226

🇺🇸 44.227.45.219

🇨🇳 39.101.94.167

🇨🇳 39.101.93.160