AbuseIPDB » 161.118.237.87
161.118.237.87
This IP was reported 8 times. Confidence of
Abuse
is 47% : ?
ISP
500 Oracle Parkway
Usage Type
Data Center/Web Hosting/Transit
ASN
AS31898
Domain Name
oracle.com
Country
🇸🇬
Singapore
City
Kampong Loyang
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 161.118.237.87 :
This IP address has been reported a total of
8
times from
7 distinct
sources.
161.118.237.87 was first reported on
July 20th 2026 , and the most recent report was
1 day ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
2026-07-22 21:52:07
(1 day ago)
Multiple web server 400 error codes from same source ip
Web App Attack
🇧🇾
lns.bz
2026-07-20 09:27:36
(3 days ago)
Too many 404 requests [BY]
Web App Attack
🇩🇪
AetherFox
2026-07-20 09:19:46
(3 days ago)
AetherFox VoidGuard detected: [Mon Jul 20 09:19:45.286763 2026] [authz_core:error] [pid 1866797:tid ...
show more
AetherFox VoidGuard detected: [Mon Jul 20 09:19:45.286763 2026] [authz_core:error] [pid 1866797:tid 1866834] [client 161.118.237.87:58344] AH01630: client denied by server configuration: proxy:http://[MASKED]/.env.backup
[Mon Jul 20 09:19:45.286873 2026] [authz_core:error] [pid 1866797:tid 1866834] [client 161.118.237.87:58344] AH01630: client denied by server configuration: /var/www/html/ERRORpages/403.html
[Mon Jul 20 09:19:45.292854 2026] [authz_core:error] [pid 1866797:tid 1866845] [client 161.118.237.87:58318] AH01630: client denied by server configuration: proxy:http://[MASKED]/.env.dev
[Mon Jul 20 09:19:45.292915 2026] [authz_core:error] [pid 1866797:tid 1866845] [client 161.118.237.87:58318] AH01630: client denied by server configuration: /var/www/html/ERRORpages/403.html
[Mon Jul 20 09:19:45.294415 2026] [authz_core:error] [pid 1866797:tid 1866849] [client 161.118.237.87:58334] AH01630: client denied by server configuration: proxy:http://[MASKED]/.
...
show less
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-07-20 09:18:07
(3 days ago)
Multiple WAF Violations
Web App Attack
🇳🇱
Savvii
2026-07-20 09:11:44
(3 days ago)
20 attempts against mh_ha-misbehave-ban on gold
Brute-Force
Bad Web Bot
Web App Attack
🇸🇪
KIDOS
2026-07-20 08:47:42
(3 days ago)
CrowdSec detected malicious activity
DDoS Attack
🇺🇸
TPI-Abuse
2026-07-20 08:35:56
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 161.118.237.87 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 161.118.237.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 20 04:35:51.723400 2026] [security2:error] [pid 2846072:tid 2846072] [client 161.118.237.87:38050] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.151.27"] [uri "/.env.dev"] [unique_id "al3d5x1vNQEFeoJNz73zuQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Savvii
2026-07-20 08:34:48
(3 days ago)
226 attempts against mh-modsecurity-ban on neon
Brute-Force
Web App Attack
Showing 1 to
8
of 8 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: