JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 161.118.232.74

161.118.232.74

Recent Activity

26 reports found in our database

100% ▲ ▲ ▲ Critical

Abuse confidence score ?

ISP

500 Oracle Parkway

Usage Type

Data Center/Web Hosting/Transit

ASN

AS31898

Domain Name

oracle.com

Country

🇸🇬 Singapore

City

Kampong Loyang

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Top Reporter Countries (Last 60 Days)

Example preview

Report Categories (Last 60 Days)

Example preview

Reports Activity

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 161.118.232.74:

This IP address has been reported a total of 26 times from 25 distinct sources. 161.118.232.74 was first reported on July 29th 2026, and the most recent report was 6 hours ago. In the last 60 days, the top reporter locations were: Germany with 7 reports; Australia with 3 reports; United States of America with 3 reports. The most common categories in these recent reports were: Web App Attack 19 times; Hacking 8 times; Brute-Force 6 times; Port Scan 4 times; Bad Web Bot 2 times; Other 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 XICTRON	2026-09-07 09:35:11 (6 hours ago)	ModSecurity rule violation detected by Fail2Ban	Web App Attack
🇧🇷 Peregrine	2026-09-07 09:30:26 (6 hours ago)	Fail2Ban ct101 Jail: tomcat-404 \| Evidence: - 161.118.232.74 - - [07/Sep/2026:06:30:09 -0300] "GET / ... show more Fail2Ban ct101 Jail: tomcat-404 \| Evidence: - 161.118.232.74 - - [07/Sep/2026:06:30:09 -0300] "GET /website HTTP/1.1" 404 18193 - 161.118.232.74 - - [07/Sep/2026:06:30:14 -0300] "GET /summary HTTP/1.1" 404 18193 - 161.118.232.74 - - [07/Sep/2026:06:30:14 -0300] "GET /width=device-width,%20initial-scale=1,%20shrink-to-fit=no HTTP/1.1" 404 18193 - 161.118.232.74 - - [07/Sep/2026:06:30:14 -0300] "GET /Decise-%20software%20e%20servi%C3%A7os HTTP/1.1" 404 18193 - 161.118.232.74 - - [07/Sep/2026:06:30:18 -0300] "GET /.git/HEAD HTTP/1.1" 404 18193 show less	Bad Web Bot Web App Attack
🇮🇪 AutosOnShow	2026-09-07 09:24:06 (6 hours ago)	blocked for webapp attack \| path requested: /.well-known/security.txt \| seen at 2026-09-07 09:23:26. ... show more blocked for webapp attack \| path requested: /.well-known/security.txt \| seen at 2026-09-07 09:23:26.734 \| show less	Web App Attack
🇺🇸 seanwall	2026-09-07 09:17:55 (7 hours ago)	Automated scanner/attacker probing war-room. Paths: ['/.git/HEAD', '/.git/config']. UA: ['Mozilla/5. ... show more Automated scanner/attacker probing war-room. Paths: ['/.git/HEAD', '/.git/config']. UA: ['Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36'] show less	Port Scan Bad Web Bot Web App Attack
Anonymous	2026-09-07 09:05:07 (7 hours ago)	[07/Sep/2026:19:05:06 +1000] "GET /.git/HEAD HTTP/1.1" 301 279 "Mozilla/5.0 (Windows NT 10.0; Win64; ... show more [07/Sep/2026:19:05:06 +1000] "GET /.git/HEAD HTTP/1.1" 301 279 "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" show less	Hacking Web App Attack
🇩🇪 ut-addicted.com	2026-09-07 08:06:56 (8 hours ago)	\[07/Sep/2026:10:06:53 +0200\] ap5wnaByLmk6aQlwrGuDJAAAAM0 161.118.232.74 62122 78.46.187.162 80 \[0 ... show more \[07/Sep/2026:10:06:53 +0200\] ap5wnaByLmk6aQlwrGuDJAAAAM0 161.118.232.74 62122 78.46.187.162 80 \[07/Sep/2026:10:06:53 +0200\] ap5wnaByLmk6aQlwrGuDJwAAANQ 161.118.232.74 62122 78.46.187.162 80 \[07/Sep/2026:10:06:54 +0200\] ap5wnqByLmk6aQlwrGuDKAAAAMY 161.118.232.74 62160 78.46.187.162 80 show less	Brute-Force Web App Attack
🇰🇷 windykc	2026-09-07 07:30:27 (8 hours ago)	Honeypot capture. HTTP: 13 attacks (sample URIs: ['/.git/HEAD', '/actuator/env', '/server-status', ' ... show more Honeypot capture. HTTP: 13 attacks (sample URIs: ['/.git/HEAD', '/actuator/env', '/server-status', '/phpinfo.php', '/wp-login.php']). RCE/web-shell attempts: 2 (fake-shell endpoint). Geo/ISP: SG/500 Oracle Parkway. Last seen: 2026-09-07T16:06:47Z. show less	Hacking Web App Attack
🇺🇸 Mark--	2026-09-05 18:12:15 (1 day ago)	Unauthorized connection attempt detected port 8080	Hacking
🇳🇱 JCB	2026-09-05 07:21:00 (2 days ago)	161.118.232.74 - - [05/Sep/2026:08:56:10 +0300] "GET /admin/ HTTP/1.1" 404 386 "-" "Mozilla/5.0 (Win ... show more 161.118.232.74 - - [05/Sep/2026:08:56:10 +0300] "GET /admin/ HTTP/1.1" 404 386 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 161.118.232.74 - - [05/Sep/2026:08:56:10 +0300] "GET /server-status HTTP/1.1" 403 389 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" ... show less	Web App Attack
🇪🇸 loadsoporte	2026-09-05 05:52:28 (2 days ago)	RdpGuard detected brute-force attempt on HTTP	Brute-Force
🇩🇪 spirttm	2026-09-05 05:29:43 (2 days ago)	161.118.232.74 - - [05/Sep/2026:05:29:42 +0000] "GET / HTTP/1.1" 403 186 "-" "Mozilla/5.0 (Windows N ... show more 161.118.232.74 - - [05/Sep/2026:05:29:42 +0000] "GET / HTTP/1.1" 403 186 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 161.118.232.74 - - [05/Sep/2026:05:29:42 +0000] "GET /.env HTTP/1.1" 403 186 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 161.118.232.74 - - [05/Sep/2026:05:29:42 +0000] "GET /.env.local HTTP/1.1" 403 186 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 161.118.232.74 - - [05/Sep/2026:05:29:43 +0000] "GET /.env.bak HTTP/1.1" 403 186 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 161.118.232.74 - - [05/Sep/2026:05:29:43 +0000] "GET /.env.production HTTP/1.1" 403 186 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 161.118. ... show less	Port Scan Web App Attack
Anonymous	2026-09-05 05:20:47 (2 days ago)	[Sat Sep 05 07:20:43.119719 2026] [authz_core:error] [pid 947422:tid 947422] [client 161.118.232.74: ... show more [Sat Sep 05 07:20:43.119719 2026] [authz_core:error] [pid 947422:tid 947422] [client 161.118.232.74:50652] AH01630: client denied by server configuration: /var/www/html/wordpress/server-status [Sat Sep 05 07:20:46.697758 2026] [authz_core:error] [pid 947445:tid 947445] [client 161.118.232.74:42912] AH01630: client denied by server configuration: /var/www/html/wordpress/server-status ... show less	Hacking Brute-Force
🇦🇺 2000cn.com.au	2026-09-05 05:13:37 (2 days ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
🇺🇸 chrisj	2026-09-05 05:02:19 (2 days ago)	[Sat Sep 05 05:02:18.183756 2026] [proxy_fcgi:error] [pid 1690726:tid 1690783] [client 161.118.232.7 ... show more [Sat Sep 05 05:02:18.183756 2026] [proxy_fcgi:error] [pid 1690726:tid 1690783] [client 161.118.232.74:62874] AH01071: Got error 'Primary script unknown' [Sat Sep 05 05:02:18.443876 2026] [proxy_fcgi:error] [pid 1690727:tid 1690823] [client 161.118.232.74:62858] AH01071: Got error 'Primary script unknown' [Sat Sep 05 05:02:18.700364 2026] [proxy_fcgi:error] [pid 1690727:tid 1690818] [client 161.118.232.74:62918] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force
🇬🇧 Aetherweb Ark	2026-09-05 05:01:16 (2 days ago)	(mod_security) mod_security (id:949110) triggered by 161.118.232.74 (SG/Singapore/-): N in the last ... show more (mod_security) mod_security (id:949110) triggered by 161.118.232.74 (SG/Singapore/-): N in the last X secs show less	Web App Attack

Showing 1 to 15 of 26 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇿 41.111.143.137

🇰🇷 222.107.156.227

🇦🇪 213.42.31.237

🇬🇧 193.163.125.253

🇧🇷 189.8.9.187

🇪🇨 186.47.21.59

🇩🇪 178.63.234.222

🇲🇽 167.249.254.3

🇩🇪 164.92.139.35

🇫🇮 135.181.166.38

🇺🇸 107.6.55.226

🇳🇵 103.171.243.5

🇷🇺 86.62.112.66

🇬🇧 82.14.177.207

🇺🇸 70.167.234.229

🇺🇸 66.132.172.224

🇮🇳 15.207.221.179

🇺🇸 2607:f8b0:4001:c2f::123

🇨🇱 201.219.156.149

🇺🇦 195.60.71.91