JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 161.118.233.222

161.118.233.222 was found in our database!

This IP was reported 64 times. Confidence of Abuse is 100%: ?

100%

ISP	500 Oracle Parkway
Usage Type	Data Center/Web Hosting/Transit
ASN	AS31898
Domain Name	oracle.com
Country	🇸🇬 Singapore
City	Kampong Loyang

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 161.118.233.222

Whois 161.118.233.222

IP Abuse Reports for 161.118.233.222:

This IP address has been reported a total of 64 times from 48 distinct sources. 161.118.233.222 was first reported on June 3rd 2026, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 www.Examensfragen.de	2026-06-14 14:08:09 (2 weeks ago)		Web Spam Bad Web Bot
Anonymous	2026-06-12 09:11:39 (2 weeks ago)	(wordpress) Failed wordpress login from 161.118.233.222 (SG/Singapore/-/Loyang/-/[redacted])	Brute-Force
🇩🇪 Gwyneth Llewelyn	2026-06-12 06:54:26 (2 weeks ago)	161.118.233.222 - - [12/Jun/2026:07:54:25 +0100] "GET /wp-login.php HTTP/2.0" 404 994 "-" "Mozilla/5 ... show more 161.118.233.222 - - [12/Jun/2026:07:54:25 +0100] "GET /wp-login.php HTTP/2.0" 404 994 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36" show less	Bad Web Bot
🇸🇬 Cloudkul Cloudkul	2026-06-12 03:45:25 (2 weeks ago)	Attempted Brute Force on our application	Brute-Force Web App Attack
🇬🇧 pinguin	2026-06-12 03:33:33 (2 weeks ago)	Triggered Cloudflare WAF (firewallManaged) from SG. Action taken: LOG Protocol: HTTP/1.1 (GET method ... show more Triggered Cloudflare WAF (firewallManaged) from SG. Action taken: LOG Protocol: HTTP/1.1 (GET method) Endpoint: /wp-content/plugins/hello.php UA: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.63 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 WeekendWeb	2026-06-12 00:18:14 (2 weeks ago)	Wordpress Vunerability attack	Web App Attack
🇨🇭 🇨🇭 Hosting	2026-06-11 16:50:01 (2 weeks ago)	Automated security scanning detected: WordPress Login Brute-Force / Probing, WordPress Admin AJAX Pr ... show more Automated security scanning detected: WordPress Login Brute-Force / Probing, WordPress Admin AJAX Probing. Systematic reconnaissance using automated tools. show less	Brute-Force Web App Attack
🇺🇸 ArturShelby	2026-06-11 13:51:49 (2 weeks ago)	Critical file access: /wp-admin/	Web App Attack
🇳🇱 CryptoYakari	2026-06-11 11:49:29 (2 weeks ago)	161.118.233.222 - - [11/Jun/2026:14:49:26 +0300] "GET /wp-login.php HTTP/1.0" 404 4097 "-" "Mozilla/ ... show more 161.118.233.222 - - [11/Jun/2026:14:49:26 +0300] "GET /wp-login.php HTTP/1.0" 404 4097 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0.1" 161.118.233.222 - - [11/Jun/2026:14:49:26 +0300] "GET /wp-admin/ HTTP/1.0" 404 3515 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:93.0) Gecko/20100101 Firefox/93.0" 161.118.233.222 - - [11/Jun/2026:14:49:26 +0300] "GET /wp-admin/admin-ajax.php HTTP/1.0" 404 3515 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1 Safari/605.1.15" 161.118.233.222 - - [11/Jun/2026:14:49:27 +0300] "GET /wp-admin/load-scripts.php HTTP/1.0" 404 3515 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20100101 Firefox/91.0" 161.118.233.222 - - [11/Jun/2026:14:49:27 +0300] "GET /wp-admin/load-styles.php HTTP/1.0" 404 3515 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3 Safari/605.1.15" ... show less	Web Spam Blog Spam Web App Attack Bad Web Bot
🇩🇪 roxyapi	2026-06-11 08:05:29 (2 weeks ago)	Honeypot: automated vulnerability scan / web app attack. Last probe: POST /wp-login.php	Web App Attack Bad Web Bot
🇳🇱 Savvii	2026-06-11 07:27:01 (2 weeks ago)	10 attempts against mh-misc-ban on eris	Web App Attack
🇳🇱 Site.eu	2026-06-11 07:09:46 (2 weeks ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇺🇸 ambor	2026-06-11 03:15:26 (2 weeks ago)	Honeypot access: WordPress admin access attempt. Path: /wp-login.php	Brute-Force Web App Attack
🇫🇷 Baking333	2026-06-11 02:29:43 (2 weeks ago)	[redacted] 161.118.233.222 - - [11/Jun/2026:03:29:31 +0100] "GET /[redacted] HTTP/1.1" 302 5268 0/14 ... show more [redacted] 161.118.233.222 - - [11/Jun/2026:03:29:31 +0100] "GET /[redacted] HTTP/1.1" 302 5268 0/145954 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.1 Safari/605.1.15" [redacted] 161.118.233.222 - - [11/Jun/2026:03:29:41 +0100] "GET /wp-admin/ HTTP/1.1" 301 4332 0/279 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:90.0) Gecko/20100101 Firefox/90.0.1" show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-10 21:31:49 (2 weeks ago)	(mod_security) mod_security (id:225170) triggered by 161.118.233.222 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:225170) triggered by 161.118.233.222 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 17:31:41.618158 2026] [security2:error] [pid 26532:tid 26532] [client 161.118.233.222:0] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|pixacast.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "pixacast.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ainXvbe5TiB-910O1yUqRgAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 64 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇾 182.62.232.65

🇩🇪 130.12.180.57

🇦🇹 104.23.162.189

🇺🇸 47.251.165.222

🇲🇽 187.191.48.23

🇧🇷 187.2.106.167

🇪🇨 186.68.83.105

🇺🇸 178.128.0.34

🇺🇸 172.253.83.87

🇫🇷 141.94.206.6

🇨🇳 123.88.230.233

🇨🇳 112.94.253.133

🇿🇦 102.182.46.73

🇷🇺 91.185.75.244

🇩🇪 64.89.163.245

🇺🇸 64.62.156.165

🇭🇰 46.247.61.35

🇨🇦 45.194.92.62

🇺🇸 45.154.154.44

🇺🇸 12.154.188.66