JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 161.118.252.243

161.118.252.243 was found in our database!

This IP was reported 240 times. Confidence of Abuse is 100%: ?

100%

ISP	500 Oracle Parkway
Usage Type	Data Center/Web Hosting/Transit
ASN	AS31898
Domain Name	oracle.com
Country	🇸🇬 Singapore
City	Kampong Loyang

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 161.118.252.243

Whois 161.118.252.243

IP Abuse Reports for 161.118.252.243:

This IP address has been reported a total of 240 times from 110 distinct sources. 161.118.252.243 was first reported on April 20th 2026, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 ICS Labs	2026-05-27 20:06:09 (2 weeks ago)	ICS Labs identified 161.118.252.243 as a malicious indicator from threat intelligence.	DDoS Attack Hacking Exploited Host
🇲🇹 Malta	2026-05-27 04:21:48 (2 weeks ago)	161.118.252.243 - - [27/May/2026:06:21:48 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Macinto ... show more 161.118.252.243 - - [27/May/2026:06:21:48 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3 Safari/605.1.15" show less	Hacking Web App Attack
🇩🇪 neogenius	2026-05-27 03:59:20 (2 weeks ago)	Web App Attack	Web App Attack Brute-Force
🇲🇽 octageeks.com	2026-05-26 04:08:07 (2 weeks ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇹🇭 thaizone.com	2026-05-25 18:30:57 (2 weeks ago)	Brute Force Attack on a Web Application #1	DDoS Attack Web Spam Brute-Force Web App Attack
🇲🇾 Rizzy	2026-05-25 13:46:46 (2 weeks ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇦🇺 2000cn.com.au	2026-05-25 12:01:37 (2 weeks ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-admin-interface-probing	Web App Attack Hacking
🇩🇪 Nerdscave Hosting	2026-05-25 11:40:16 (2 weeks ago)	WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail	Brute-Force Web App Attack
🇩🇪 LRob.fr	2026-05-25 07:00:02 (2 weeks ago)	Repeated 503 errors, blocked by Fail2Ban in custom-503 jail	Bad Web Bot Web App Attack
🇨🇭 dalslab ltd	2026-05-25 03:03:35 (2 weeks ago)	[25/May/2026:05:03:32 +0200] - 405 405 - POST https music.dalslab.com "/wp-login.php" [Client 161.11 ... show more [25/May/2026:05:03:32 +0200] - 405 405 - POST https music.dalslab.com "/wp-login.php" [Client 161.118.252.243] [Length 0] [Gzip -] [Sent-to 10.1.1.23] "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:92.0) Gecko/20100101 Firefox/92.0" "https://music.dalslab.com/wp-login.php" [25/May/2026:05:03:33 +0200] - 405 405 - POST https music.dalslab.com "/wp-login.php" [Client 161.118.252.243] [Length 0] [Gzip -] [Sent-to 10.1.1.23] "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1 Safari/605.1.15" "https://music.dalslab.com/wp-login.php" [25/May/2026:05:03:33 +0200] - 405 405 - POST https music.dalslab.com "/wp-login.php" [Client 161.118.252.243] [Length 0] [Gzip -] [Sent-to 10.1.1.23] "Mozilla/5.0 (X11; Linux x86_64; rv:89.0) Gecko/20100101 Firefox/89.0.2" "https://music.dalslab.com/wp-login.php" [25/May/2026:05:03:34 +0200] - 405 405 - POST https music.dalslab.com "/wp-login.php" [Client 161.118.252.243] [Length 0] [Gzip -] [Sent-to 10.1.1.23] ... show less	Web Spam Brute-Force Bad Web Bot Web App Attack
🇨🇿 ptlab	2026-05-24 10:45:07 (2 weeks ago)	Detected wp_login attack from WP-host.	Hacking Web App Attack
🇬🇧 consul.to	2026-05-24 10:18:48 (2 weeks ago)	Web attack/malicious scanning detected	Web App Attack
🇩🇪 updown.io	2026-05-24 08:09:28 (2 weeks ago)	{"level":"info","ts":1779610113.034324,"logger":"http.log.access.log1","msg":"handled request","requ ... show more {"level":"info","ts":1779610113.034324,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"161.118.252.243","remote_port":"59580","client_ip":"161.118.252.243","proto":"HTTP/1.1","method":"GET","host":"up.roodo.com","uri":"/wp-admin/load-styles.php","headers":{"Connection":["keep-alive"],"Accept-Language":["en-US,en;q=0.5"],"Upgrade-Insecure-Requests":["1"],"User-Agent":["Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36"],"Accept-Encoding":["gzip, deflate"],"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"http/1.1","server_name":"up.roodo.com"}},"bytes_read":0,"user_id":"","duration":0.000251148,"size":0,"status":429,"resp_headers":{"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"],"Retry-After":["1"]}} {"level":"info","ts":1779610114.4254022,"logger":"http.log.access.log1"," ... show less	DDoS Attack Web App Attack
🇺🇦 URAN Publishing Service	2026-05-24 07:10:59 (2 weeks ago)	161.118.252.243 - - [24/May/2026:10:10:52 +0300] "GET /wp-admin/admin-ajax.php HTTP/1.1" 404 218 "-" ... show more 161.118.252.243 - - [24/May/2026:10:10:52 +0300] "GET /wp-admin/admin-ajax.php HTTP/1.1" 404 218 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 161.118.252.243 - - [24/May/2026:10:10:56 +0300] "GET /wp-admin/load-scripts.php HTTP/1.1" 404 2798 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.63 Safari/537.36" ... show less	Web App Attack
🇩🇪 abdubhai	2026-05-23 19:12:25 (2 weeks ago)	161.118.252.243 - - [24/May/2026 ...	Brute-Force

Showing 1 to 15 of 240 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 186.96.145.241

🇨🇳 223.100.224.75

🇿🇦 196.192.181.202

🇲🇽 187.191.48.24

🇨🇳 110.249.201.78

🇺🇸 107.180.88.176

🇬🇧 45.137.126.93

🇧🇷 35.199.85.232

🇧🇷 205.210.31.238

🇷🇺 185.58.206.243

🇳🇬 165.154.11.64

🇺🇸 159.89.232.173

🇺🇸 147.185.132.81

🇳🇱 45.148.10.240

🇨🇳 202.112.47.207

🇺🇸 193.227.129.7

🇺🇸 144.126.133.198

🇷🇺 95.24.110.241

🇳🇱 45.148.10.141

🇨🇳 14.103.90.3