JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 161.118.226.254

161.118.226.254 was found in our database!

This IP was reported 184 times. Confidence of Abuse is 100%: ?

100%

ISP	500 Oracle Parkway
Usage Type	Data Center/Web Hosting/Transit
ASN	AS31898
Domain Name	oracle.com
Country	🇸🇬 Singapore
City	Kampong Loyang

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 161.118.226.254

Whois 161.118.226.254

IP Abuse Reports for 161.118.226.254:

This IP address has been reported a total of 184 times from 110 distinct sources. 161.118.226.254 was first reported on August 24th 2026, and the most recent report was 18 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 Peregrine	2026-08-31 12:01:06 (18 minutes ago)	Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: 161.118.226.254 162.158.108.20 - - [31/Aug/2026:09: ... show more Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: 161.118.226.254 162.158.108.20 - - [31/Aug/2026:09:01:00 -0300] "GET /wp-login.php HTTP/1.1" 404 18149 show less	Bad Web Bot
Anonymous	2026-08-31 11:26:41 (53 minutes ago)	Banned by Fail2Ban on server	Brute-Force
Anonymous	2026-08-31 11:08:01 (1 hour ago)	(wordpress) Failed wordpress login from 161.118.226.254 (SG/Singapore/-)	Brute-Force
🇺🇦 URAN Publishing Service	2026-08-31 10:55:06 (1 hour ago)	[31/Aug/2026:13:55:05 +0300] -- 161.118.226.254 Ban reason: User-Agent python-requests	Bad Web Bot Web App Attack
🇩🇪 conseilgouz	2026-08-31 10:04:00 (2 hours ago)	gie-6 : Trying access system files=>/wp-login.php(wp-login.php)	Hacking
🇩🇪 BlueWire Hosting	2026-08-31 09:42:06 (2 hours ago)	Bad bot ignoring robot.txt	Bad Web Bot
🇫🇷 francoisunix	2026-08-31 08:42:13 (3 hours ago)	161.118.226.254 - - [31/Aug/2026:10:41:41 +0200] "GET //wp-login.php HTTP/1.1" 401 15029 "-" "Mozill ... show more 161.118.226.254 - - [31/Aug/2026:10:41:41 +0200] "GET //wp-login.php HTTP/1.1" 401 15029 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.2 Safari/605.1.15" "161.118.226.254" "www.eco-conscient.com" sn="www.eco-conscient.com" rt=0.122 ua="unix:/var/run/php/php8.4-fpm.sock" us="401" ut="0.122" ul="15043" cs=BYPASScf_country="SG" cf_region="-" cf_city="Kampong Loyang"rip=127.0.0.1 cf_ip=161.118.226.254 xff="161.118.226.254" p_xff="161.118.226.254, 161.118.226.254" 161.118.226.254 - - [31/Aug/2026:10:41:45 +0200] "GET /wp-login.php?redirect_to=https%3A%2F%2Fwww.eco-conscient.com%2F%2Fwp-admin%2Findex.php&reauth=1 HTTP/1.1" 401 15151 "https://eco-conscient.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3 Safari/605.1.15" "161.118.226.254" "www.eco-conscient.com" sn="www.eco-conscient.com" rt=0.124 ua="unix:/var/run/php/php8.4-fpm.sock" us="401" ut="0.124" ul="15178" cs=B ... show less	Web App Attack
🇩🇪 todix	2026-08-31 07:29:17 (4 hours ago)	Wordpress brute force or spam attempt from 161.118.226.254	Brute-Force
🇫🇷 Kenshin869	2026-08-31 05:12:16 (7 hours ago)	Wordpress unauthorized access attempt	Brute-Force
🇬🇧 consul.to	2026-08-31 03:27:30 (8 hours ago)	Web attack/malicious scanning detected	Web App Attack
🇭🇺 DumaNet	2026-08-31 02:52:00 (9 hours ago)	WordPress (CMS) attack attempts. Date: 2026 Aug 31. 00:51:43 Source IP: 161.118.226.254 Portion ... show more WordPress (CMS) attack attempts. Date: 2026 Aug 31. 00:51:43 Source IP: 161.118.226.254 Portion of the log(s): 161.118.226.254 - [31/Aug/2026:00:51:43 +0200] "POST /wp-login.php HTTP/1.1" 200 8268 "https://[removed].org/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64; rv:89.0) Gecko/20100101 Firefox/89.0.2" 161.118.226.254 - [31/Aug/2026:00:51:42 +0200] "POST /wp-login.php HTTP/1.1" 200 8268 "https://[removed].org/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1 Safari/605.1.15" 161.118.226.254 - [31/Aug/2026:00:51:41 +0200] "POST /wp-login.php HTTP/1.1" 200 8268 "https://[removed].org/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1 Safari/605.1.15" 161.118.226.254 - [31/Aug/2026:00:51:40 +0200] "POST /wp-login.php HTTP/1.1" 200 8268 "https://[removed].org/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64; rv:90.0) Gecko/20100101 Firefox/90.0.1" 161.118.226.254 - [31/Aug/2026 show less	Brute-Force Web App Attack
🇭🇺 DumaNet	2026-08-31 02:36:00 (9 hours ago)	WordPress (CMS) attack attempts. Date: 2026 Aug 31. 00:19:40 Source IP: 161.118.226.254 Portion ... show more WordPress (CMS) attack attempts. Date: 2026 Aug 31. 00:19:40 Source IP: 161.118.226.254 Portion of the log(s): 161.118.226.254 - [31/Aug/2026:00:19:40 +0200] "POST /wp-login.php HTTP/1.1" 200 8238 "https://[removed].org/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0.2" 161.118.226.254 - [31/Aug/2026:00:19:39 +0200] "POST /wp-login.php HTTP/1.1" 200 8268 "https://[removed].org/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3 Safari/605.1.15" 161.118.226.254 - [31/Aug/2026:00:19:38 +0200] "POST /wp-login.php HTTP/1.1" 200 8233 "https://[removed].org/wp-login.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0.2" 161.118.226.254 - [31/Aug/2026:00:19:37 +0200] "POST /wp-login.php HTTP/1.1" 200 8230 "https://[removed].org/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.0 Safari/605.1.15" show less	Brute-Force Web App Attack
🇭🇺 DumaNet	2026-08-31 02:11:00 (10 hours ago)	WordPress (CMS) attack attempts. Date: 2026 Aug 30. 23:57:10 Source IP: 161.118.226.254 Portion ... show more WordPress (CMS) attack attempts. Date: 2026 Aug 30. 23:57:10 Source IP: 161.118.226.254 Portion of the log(s): 161.118.226.254 - [30/Aug/2026:23:57:10 +0200] "POST /wp-login.php HTTP/1.1" 200 8229 "https://[removed].org/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3 Safari/605.1.15" 161.118.226.254 - [30/Aug/2026:23:57:09 +0200] "POST /wp-login.php HTTP/1.1" 200 8233 "https://[removed].org/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3 Safari/605.1.15" 161.118.226.254 - [30/Aug/2026:23:57:08 +0200] "POST /wp-login.php HTTP/1.1" 200 8235 "https://[removed].org/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.1 Safari/605.1.15" 161.118.226.254 - [30/Aug/2026:23:57:07 +0200] "POST /wp-login.php HTTP/1.1" 200 8237 "https://[removed].org/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64 show less	Brute-Force Web App Attack
🇫🇷 ELYAZ	2026-08-31 02:10:23 (10 hours ago)	(wordpress) Failed wordpress login from 161.118.226.254 (SG/Singapore/-): (CF_ENABLE)	Brute-Force
🇳🇱 wlt-blocker	2026-08-31 01:56:01 (10 hours ago)	Unauthorized access to webpage admin	Web App Attack

Showing 1 to 15 of 184 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 91.231.89.226

🇰🇷 220.118.173.234

🇳🇱 185.242.226.85

🇨🇳 183.134.89.220

🇺🇸 148.163.76.167

🇱🇻 62.60.130.242

🇩🇪 46.225.30.174

🇺🇦 37.52.43.101

🇪🇸 34.175.134.226

🇮🇹 34.17.175.114

🇺🇸 20.236.67.111

🇺🇸 5.78.186.146

🇺🇿 213.230.90.238

🇨🇦 209.127.31.141

🇺🇸 195.184.76.217

🇩🇪 194.88.98.113

🇧🇷 192.141.114.188

🇧🇷 177.11.196.84

🇫🇷 172.71.130.247

🇰🇷 158.180.79.132