JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

160.30.141.115

Recent Activity

Abuse Confidence Score

57% Elevated

38 reports

17 reporters · latest 1 day ago

ISP: GLERCIMOR NETWORK AND DATA SOLUTION
Usage Type: Fixed Line ISP
ASN: AS134216
Domain Name: glercimor.com
Country: 🇵🇭 Philippines
City: Guyong, Central Luzon

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

38 from 17 distinct reporters

First reported

July 28th 2026

Most recent report

1 day ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 10 🇩🇪 Germany 7 🇨🇭 Switzerland 2

Most common categories Bad Web Bot 16 Web App Attack 5 Exploited Host 5 Hacking 5 DDoS Attack 3

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Vegascosmetics	2026-11-12 08:51:55 UTC · (1 day ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after high AbuseIPDB reputation + local block policy. Evidence: High Abuse + Suspicion (60, Abuse: 51)	Hacking Exploited Host Web App Attack
🇺🇸 GreekCity	2026-11-12 08:12:47 UTC · (1 day ago)	bad-bot hacking for vulnerable links.	Hacking Exploited Host
🇩🇪 throny	2026-11-10 14:29:32 UTC · (3 days ago)	Used an AWS access key that exists only in a honeypot's fake config file (canary token) at 2026-11-10 14:17 UTC, API call GetAccount, client Boto3/1.42.49 md/Botocore#1.42.49 ua/2.1 os/windows#11 md/arch#amd64 lang/python#3.14.3 md/pyimpl#CPython m/b ... show more Used an AWS access key that exists only in a honeypot's fake config file (canary token) at 2026-11-10 14:17 UTC, API call GetAccount, client Boto3/1.42.49 md/Botocore#1.42.49 ua/2.1 os/windows#11 md/arch#amd64 lang/python#3.14.3 md/pyimpl#CPython m/b,Z,E,e cfg/ show less	Hacking Web App Attack
🇩🇪 nyuuzyou	2026-11-06 11:30:27 UTC · (1 week ago)	Client failed challenge verification, marked as suspicious. HTTP request received over TCP on application ports 80/443. Observed 2026-11-06T11:30:27Z.	Bad Web Bot
Anonymous	2026-11-05 04:15:03 UTC · (1 week ago)	Large-scale coordinated botnet (8M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim\|LIS\|MOW]): Retaliation after theft; Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]): Employed by Angara Technologies G ... show more Large-scale coordinated botnet (8M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim\|LIS\|MOW]): Retaliation after theft; Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]): Employed by Angara Technologies Group \| Catalog Search Fake Parameter Blocked: /catalogsearch/result/?q=ex+90&rating=6&screensize=17%2C18%2C24%2C46%2C336 \| UA: Mozilla/5.0 (compatible; MSIE 6.0; Windows NT 10.0; Trident/5.1) \| (Magento Site) show less	Hacking Bad Web Bot
🇩🇪 nyuuzyou	2026-11-01 19:41:27 UTC · (1 week ago)	Client failed challenge verification, marked as suspicious. HTTP request received over TCP on application ports 80/443. Observed 2026-11-01T19:41:27Z.	Bad Web Bot
🇺🇸 kosada.com	2026-10-28 10:50:21 UTC · (2 weeks ago)	Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B0%5D=62&topics%5B3%5D=36&topics%5B4%5D=52&topics%5B5%5D=38 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/6 ... show more Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B0%5D=62&topics%5B3%5D=36&topics%5B4%5D=52&topics%5B5%5D=38 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.3 Safari/605.1.15") show less	DDoS Attack Bad Web Bot
🇮🇩 hermawan	2026-10-26 01:40:05 UTC · (2 weeks ago)	[Mon Oct 26 08:40:04.561848 2026] [security2:error] [pid 21913:tid 140267558516416] [client 160.30.141.115:0] ModSecurity: Access denied with code 403 (phase 1). Match of "pm /gtagku-v2.js /administrator/index.php?option=com_content /swiper-v114na.js ... show more [Mon Oct 26 08:40:04.561848 2026] [security2:error] [pid 21913:tid 140267558516416] [client 160.30.141.115:0] ModSecurity: Access denied with code 403 (phase 1). Match of "pm /gtagku-v2.js /administrator/index.php?option=com_content /swiper-v114na.js /ga-choise-v6.js /bmkg-192.png /800-600.webp /bmkg-192x192.png /ga-v5.js /favicon-16-16.png /matomo-partition-21-01-2026-5-5-0.js /script-v185.js /script-v188.js /script-v184.j ..." against "REQUEST_LINE" required. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "475"] [id "440008"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: If-Modified-Since found within REQUEST_LINE: GET /templates/protostar/favicon.ico HTTP/1.1 request_line = GET /templates/protostar/favicon.ico HTTP/1.1 Request URI RAW = /templates/protostar/favicon.ico Request Basename = favicon.ico"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/ ... show less	Email Spam Hacking
Anonymous	2026-10-24 20:56:00 UTC · (2 weeks ago)	Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to bypass firewall/robots.txt restrictions in printer-friendly.asp	Exploited Host Bad Web Bot
🇩🇪 LRob	2026-10-23 13:25:54 UTC · (3 weeks ago)	Proxynvader botnet: code forge crawl \| path: /Shieldlist/shieldlist-agent/commit/41b08efee4a6e52bdd248ff491af718b938c2e9c \| src_port: 34084 \| ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 ... show more Proxynvader botnet: code forge crawl \| path: /Shieldlist/shieldlist-agent/commit/41b08efee4a6e52bdd248ff491af718b938c2e9c \| src_port: 34084 \| ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 show less	Bad Web Bot
🇨🇭 ALPHANET	2026-10-15 05:05:12 UTC · (4 weeks ago)	Botnet or web spider not respecting robots.txt	DDoS Attack Exploited Host
🇫🇷 Sklurk	2026-10-14 07:48:37 UTC · (4 weeks ago)	Web App Attack	Web App Attack
🇺🇸 鬼影233	2026-10-01 12:07:23 UTC · (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36	Bad Web Bot
🇺🇸 鬼影233	2026-10-01 11:55:18 UTC · (1 month ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36	Bad Web Bot
🇺🇸 鬼影233	2026-09-30 12:34:07 UTC · (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36	Bad Web Bot

Showing 1 to 15 of 38 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇵🇱 2400:cb00:906:1000:2912:87f1:3e7f:e074

🇧🇷 205.210.31.185

🇬🇧 188.28.105.8

🇬🇧 161.35.175.202

🇳🇱 45.74.28.6

🇧🇪 35.210.150.149

🇺🇸 4.148.240.238

🇺🇸 199.96.165.90

🇳🇱 193.47.62.69

🇺🇸 165.227.83.173

🇬🇧 87.236.176.79

🇿🇦 41.133.213.96

🇨🇳 36.137.180.219

🇺🇸 172.69.17.114

🇫🇮 155.212.39.43

🇷🇺 146.158.115.52

🇰🇷 121.125.67.137

🇩🇪 109.160.32.44

🇻🇳 103.61.44.43

🇫🇷 95.179.210.56