JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 161.118.201.103

161.118.201.103 was found in our database!

This IP was reported 39 times. Confidence of Abuse is 100%: ?

100%

ISP	500 Oracle Parkway
Usage Type	Data Center/Web Hosting/Transit
ASN	AS31898
Domain Name	oracle.com
Country	🇸🇬 Singapore
City	Kampong Loyang

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 161.118.201.103

Whois 161.118.201.103

IP Abuse Reports for 161.118.201.103:

This IP address has been reported a total of 39 times from 34 distinct sources. 161.118.201.103 was first reported on September 4th 2026, and the most recent report was 10 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 sid3windr	2026-09-16 00:55:45 (10 hours ago)	GET /.env (Tarpitted for 1d15h8m27s, wasted 8.06MB)	Web App Attack
🇩🇪 Mykola Spesivtsev	2026-09-14 11:04:47 (2 days ago)	HTTP Tarpit detected bot activity:TargetPort:443, Path:/, Method:GET, UA:Mozilla/5.0 (Windows NT 10. ... show more HTTP Tarpit detected bot activity:TargetPort:443, Path:/, Method:GET, UA:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Sa show less	Port Scan Web App Attack Bad Web Bot
🇺🇸 lnklnx	2026-09-14 10:31:17 (2 days ago)	www.lnklnx.com:443 161.118.201.103 - - [14/Sep/2026:05:31:14 -0500] "GET /.env.bak HTTP/1.1" 403 502 ... show more www.lnklnx.com:443 161.118.201.103 - - [14/Sep/2026:05:31:14 -0500] "GET /.env.bak HTTP/1.1" 403 502 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" ... show less	Web App Attack
Anonymous	2026-09-14 10:07:53 (2 days ago)	Bot detected scanning for vulnerable pages	Port Scan
🇮🇳 nadnitin	2026-09-14 10:06:52 (2 days ago)	Automated trigger via Nginx Police. Reason: PATH-PROBER. Trigger Log: 161.118.201.103 - - [14/Sep/20 ... show more Automated trigger via Nginx Police. Reason: PATH-PROBER. Trigger Log: 161.118.201.103 - - [14/Sep/2026:15:36:51 +0530] "GET /.env.bak HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" show less	Web App Attack
🇹🇷 pashait	2026-09-14 10:05:08 (2 days ago)	Auto-blocked by Seczar SecureOps — IPS Web Attack Signature (1 events in 5min) at 2026-09-14 10:05	Web App Attack Bad Web Bot
🇵🇱 swiszczu	2026-09-14 09:48:06 (2 days ago)	Fail2Ban automatic report: Multiple forbidden requests in short amount of time: 161.118.201.103 - - ... show more Fail2Ban automatic report: Multiple forbidden requests in short amount of time: 161.118.201.103 - - [14/Sep/2026:11:48:03 +0200] "GET / HTTP/1.1" 403 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" "-" 161.118.201.103 - - [14/Sep/2026:11:48:03 +0200] "GET /.env.bak HTTP/1.1" 403 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" "-" 161.118.201.103 - - [14/Sep/2026:11:48:03 +0200] "GET /.env HTTP/1.1" 403 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" "-" 161.118.201.103 - - [14/Sep/2026:11:48:04 +0200] "GET /.env.local HTTP/1.1" 403 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko show less	Hacking Web App Attack
Anonymous	2026-09-14 09:19:29 (2 days ago)	Aggressive web scan	Web App Attack
🇦🇺 aranguren.org	2026-09-14 09:12:46 (2 days ago)	161.118.201.103 - - [14/Sep/2026:19:12:44 +1000] "GET /.env.bak HTTP/1.1" 404 986 "-" "Mozilla/5.0 ( ... show more 161.118.201.103 - - [14/Sep/2026:19:12:44 +1000] "GET /.env.bak HTTP/1.1" 404 986 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 161.118.201.103 - - [14/Sep/2026:19:12:44 +1000] "GET /.env HTTP/1.1" 404 986 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 161.118.201.103 - - [14/Sep/2026:19:12:44 +1000] "GET /.env.local HTTP/1.1" 404 986 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 161.118.201.103 - - [14/Sep/2026:19:12:44 +1000] "GET /.env.production HTTP/1.1" 404 986 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 161.118.201.103 - - [14/Sep/2026:19:12:44 +1000] "GET /.env.production.local HTTP/1.1" 404 986 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0 ... show less	Bad Web Bot
🇩🇪 strxmpp	2026-09-14 09:12:08 (2 days ago)	161.118.201.103 - - [14/Sep/2026:11:12:06 +0200] "GET /.env.bak HTTP/1.1" 404 476 "-" "Mozilla/5.0 ( ... show more 161.118.201.103 - - [14/Sep/2026:11:12:06 +0200] "GET /.env.bak HTTP/1.1" 404 476 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" ... show less	Bad Web Bot
Anonymous	2026-09-11 21:45:08 (4 days ago)	Aggressive web scan	Web App Attack
🇮🇪 RoboSOC	2026-09-10 23:00:54 (5 days ago)	Port 22 Scan, PTR: None	Port Scan
🇳🇱 rmvanderspek	2026-09-10 21:20:03 (5 days ago)	SSH Brute-force attempt detected.	Brute-Force SSH
🇪🇪 Tsumugi Kotobuki	2026-09-10 21:11:10 (5 days ago)	Port Scan on Honeypot \| Ports: 80/HTTP \| Proto: TCP(1) \| Flags: all SYN \| TTL: 242 \| Len: 40B \| Win: ... show more Port Scan on Honeypot \| Ports: 80/HTTP \| Proto: TCP(1) \| Flags: all SYN \| TTL: 242 \| Len: 40B \| Win: 65535(1) \| F2B/ufw-honeypot@2026-09-10T21:11:09Z show less	Port Scan Hacking
🇸🇪 SkyDancer	2026-09-10 21:08:26 (5 days ago)	Multiple unauthorized attempts to access using wrong credentials. Attack automatically blocked by Sk ... show more Multiple unauthorized attempts to access using wrong credentials. Attack automatically blocked by SkyDancer Ai. EXT-SYS-Vx show less	Hacking Brute-Force SSH

Showing 1 to 15 of 39 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2a10:4a01:5ba3:69e3:a9b0:90d8:405b:7806

🇩🇪 201.79.6.211

🇺🇸 45.156.129.85

🇲🇱 197.155.130.50

🇫🇷 193.32.126.217

🇺🇸 192.177.58.74

🇺🇸 192.81.131.71

🇨🇳 182.117.187.99

🇺🇸 172.121.220.208

🇸🇳 154.124.120.99

🇸🇬 114.119.151.179

🇷🇺 46.188.119.26

🇦🇷 45.229.85.227

🇲🇩 45.15.226.100

🇵🇰 39.34.164.109

🇺🇸 20.84.99.255

🇷🇴 2.57.121.25

🇳🇱 217.60.76.226

🇭🇰 199.45.154.70

🇩🇪 195.182.16.23