JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 161.142.118.22

161.142.118.22 was found in our database!

This IP was reported 33 times. Confidence of Abuse is 45%: ?

45%

ISP	TT DOTCOM SDN BHD
Usage Type	Fixed Line ISP
ASN	AS9930
Domain Name	time.com.my
Country	🇲🇾 Malaysia
City	Taman Petaling, Kuala Lumpur

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 161.142.118.22

Whois 161.142.118.22

IP Abuse Reports for 161.142.118.22:

This IP address has been reported a total of 33 times from 25 distinct sources. 161.142.118.22 was first reported on January 30th 2026, and the most recent report was 20 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 mnsf	2026-10-21 16:06:01 (20 hours ago)	Too many Status 40X (11)	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-10-21 10:18:42 (1 day ago)	(mod_security) mod_security (id:225170) triggered by 161.142.118.22 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 161.142.118.22 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 06:18:32.770407 2026] [security2:error] [pid 7505:tid 7505] [client 161.142.118.22:25730] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|femmefire.vanemby.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "femmefire.vanemby.com"] [uri "/wp-json/wp/v2/users"] [unique_id "atiReIjmNRCg8pNaJ2gXtQAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 LRob	2026-10-20 21:23:43 (1 day ago)	Not following 301 redirects — wasted requests \| host: tailor-made.fr \| method: POST \| path: /wp-logi ... show more Not following 301 redirects — wasted requests \| host: tailor-made.fr \| method: POST \| path: /wp-login.php \| ua: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 \| src_port: 25715 \| 2026-10-20 21:23 UTC show less	Bad Web Bot
🇩🇪 LRob	2026-10-20 01:52:53 (2 days ago)	Not following 301 redirects — wasted requests \| method: POST \| path: /wp-login.php \| ua: Mozilla/5.0 ... show more Not following 301 redirects — wasted requests \| method: POST \| path: /wp-login.php \| ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 show less	Bad Web Bot
Anonymous	2026-10-18 15:32:52 (3 days ago)	WordPress Brute Force	Brute-Force
🇩🇪 Hazzard	2026-10-18 10:32:06 (4 days ago)	(wordpress) Failed wordpress login from 161.142.118.22 (MY/Malaysia/Kuala Lumpur/Kuala Lumpur/-/[red ... show more (wordpress) Failed wordpress login from 161.142.118.22 (MY/Malaysia/Kuala Lumpur/Kuala Lumpur/-/[redacted]): (CF_ENABLE) show less	Brute-Force
🇭🇷 aktonrs	2026-10-15 00:10:27 (1 week ago)	Blocked by https://aegis.hr — Web Scanner - (MITRE T1595.001), 72 attempts, Period: 2026-10-14 18:34 ... show more Blocked by https://aegis.hr — Web Scanner - (MITRE T1595.001), 72 attempts, Period: 2026-10-14 18:34:19 to 2026-10-14 18:35:05 show less	Web App Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-10-14 21:34:18 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 161.142.118.22 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 161.142.118.22 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 17:34:12.246478 2026] [security2:error] [pid 24650:tid 24650] [client 161.142.118.22:25724] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|jerielster.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jerielster.com"] [uri "/wp-json/wp/v2/users"] [unique_id "as_1VPbM9wnEUPHX6TBv5QAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇿 Countryman	2026-09-29 00:10:02 (3 weeks ago)	repeated unauthorized VPN login attempt, user sweep	VPN IP Hacking Brute-Force
🇵🇱 mkey	2026-08-08 12:05:03 (2 months ago)	Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT \| PORTS ... show more Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT \| PORTS=23 \| HITS=2 \| IPSET=ADD \| FIRST=2026-08-08 14:02:23 \| LAST=2026-08-08 14:02:24. Last seen 2026-08-08 14:02:24. show less	Port Scan
🇺🇸 MPL	2026-08-03 12:23:18 (2 months ago)	tcp/23 (2 or more attempts)	Port Scan
🇳🇱 VMHeaven.io	2026-08-03 11:38:58 (2 months ago)	Blocked by UFW [23/tcp] Source port: 2898 TTL: 49 Packet length: 60	Port Scan Hacking Brute-Force
🇺🇸 RAP	2026-07-31 10:13:59 (2 months ago)	2026-07-31 10:13:59 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇨🇭 m_vlasov	2026-07-31 07:26:22 (2 months ago)	SSH/Telnet honeypot: 0 login attempts, 1 sessions, 0 shell commands.	Port Scan IoT Targeted
🇫🇮 iamxorum	2026-07-30 01:29:35 (2 months ago)	2026-07-30T01:29:34.608433+00:00 XRM-01 kernel: [TELNET-TRAP] IN=eth0 OUT= MAC=92:00:06:e6:da:95:d2: ... show more 2026-07-30T01:29:34.608433+00:00 XRM-01 kernel: [TELNET-TRAP] IN=eth0 OUT= MAC=92:00:06:e6:da:95:d2:74:7f:6e:37:e3:08:00 SRC=161.142.118.22 DST=46.62.222.43 LEN=60 TOS=0x00 PREC=0x00 TTL=50 ID=60042 DF PROTO=TCP SPT=2651 DPT=23 WINDOW=64240 RES=0x00 SYN URGP=0 ... show less	Port Scan IoT Targeted

Showing 1 to 15 of 33 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 195.239.97.254

🇫🇷 176.31.21.38

🇺🇸 172.208.48.177

🇩🇪 135.125.226.143

🇧🇬 78.128.112.30

🇮🇪 54.217.34.149

🇦🇷 45.230.61.127

🇺🇸 216.180.246.118

🇷🇺 213.24.135.4

🇵🇱 194.180.49.123

🇵🇪 181.176.231.22

🇫🇷 169.58.184.182

🇦🇺 103.100.227.158

🇺🇸 66.249.65.1

🇮🇪 63.33.190.127

🇳🇱 34.12.92.249

🇩🇪 213.209.159.208

🇨🇳 183.207.0.126

🇺🇸 137.184.29.149

🇧🇩 103.222.20.2