JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 161.129.165.111

161.129.165.111 was found in our database!

This IP was reported 35 times. Confidence of Abuse is 0%: ?

ISP	OCULUS NETWORKS INC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS20473
Domain Name	oculus-technology.com
Country	🇺🇸 United States of America
City	Newark, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 161.129.165.111

Whois 161.129.165.111

IP Abuse Reports for 161.129.165.111:

This IP address has been reported a total of 35 times from 7 distinct sources. 161.129.165.111 was first reported on October 31st 2022, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-04-28 04:05:02 (2 months ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇺🇸 TPI-Abuse	2025-11-27 03:23:49 (7 months ago)	(mod_security) mod_security (id:210730) triggered by 161.129.165.111 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 161.129.165.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 22:23:41.802649 2025] [security2:error] [pid 13297:tid 13297] [client 161.129.165.111:45885] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|i-med.com\|F\|2"] [data ".groupepsih.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "i-med.com"] [uri "/www.groupepsih.com"] [unique_id "aSfEPZ7OSp940kWeibDpIAAAAAo"], referer: http://www.i-med.com show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 backslash	2025-04-12 09:15:04 (1 year ago)	block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8	Bad Web Bot
🇦🇺 MAGIC	2024-09-19 05:09:16 (1 year ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇦🇺 MAGIC	2024-08-29 17:05:15 (1 year ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇦🇺 MAGIC	2024-08-08 04:05:05 (1 year ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2024-07-28 04:18:06 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 161.129.165.111 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 161.129.165.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 28 00:18:02.187351 2024] [security2:error] [pid 27140:tid 27140] [client 161.129.165.111:38937] [client 161.129.165.111] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|pianosmith.com\|F\|2"] [data ".pianosmith.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "pianosmith.com"] [uri "/www.pianosmith.com"] [unique_id "ZqXGeocXsrYg5XQ1gXaFHwAAAAU"], referer: http://pianosmith.com show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 MAGIC	2024-07-21 06:17:41 (1 year ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇦🇺 MAGIC	2024-07-11 06:10:24 (2 years ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
Anonymous	2024-07-03 06:42:22 (2 years ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇦🇺 MAGIC	2024-07-03 03:01:38 (2 years ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
Anonymous	2024-07-01 07:27:03 (2 years ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇦🇺 MAGIC	2024-06-25 09:08:14 (2 years ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2024-06-17 07:35:04 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 161.129.165.111 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 161.129.165.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 17 03:34:50.251515 2024] [security2:error] [pid 907045] [client 161.129.165.111:42789] [client 161.129.165.111] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.soviaenterprises.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.soviaenterprises.com"] [uri "/gmroyalties.com"] [unique_id "Zm_nGpYQLWFZWTsXwLOv3QAAAAg"], referer: http://soviaenterprises.com show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-06-16 03:10:17 (2 years ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH

Showing 1 to 15 of 35 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 205.210.31.211

🇧🇪 198.235.24.131

🇹🇼 198.235.24.65

🇺🇸 193.33.237.44

🇺🇸 192.169.249.148

🇩🇪 140.248.227.118

🇺🇸 118.193.77.138

🇮🇳 103.85.8.118

🇷🇴 92.118.39.231

🇷🇴 92.118.39.229

🇬🇧 35.203.211.119

🇰🇷 218.149.160.177

🇺🇸 205.210.31.103

🇬🇧 193.32.209.251

🇧🇷 187.60.185.223

🇨🇳 180.76.235.157

🇺🇸 167.71.162.85

🇮🇳 160.187.250.21

🇺🇸 136.107.119.239

🇺🇸 104.236.214.93