JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

161.153.112.65

Neutral Activity

Abuse Confidence Score

0% Low Risk

95 reports

66 reporters · latest 7 months ago

ISP: Oracle Corporation
Usage Type: Data Center/Web Hosting/Transit
ASN: AS31898
Domain Name: oracle.com
Country: 🇺🇸 United States of America
City: Phoenix, Arizona

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

161.153.112.65 has been reported 95 times. The most recent report is from 7 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

95 from 66 distinct reporters

First reported

March 14th 2026

Most recent report

7 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 rtbh.com.tr	2026-03-20 20:12:13 UTC · (7 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇫🇷 SpaceHost-Server	2026-03-20 00:17:51 UTC · (7 months ago)		Brute-Force Web App Attack
🇹🇷 rtbh.com.tr	2026-03-19 20:12:09 UTC · (7 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇫🇷 Murazaki	2026-03-18 23:49:47 UTC · (7 months ago)	imap.balamb.fr 161.153.112.65 - - [18/Mar/2026:01:35:19 +0100] "GET /wp-login.php HTTP/1.1" 404 153 "https://www.facebook.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:120.0) Gecko/20100101 Firefox/120.0" "172.22.0.59:80" imap.balamb.fr 1 ... show more imap.balamb.fr 161.153.112.65 - - [18/Mar/2026:01:35:19 +0100] "GET /wp-login.php HTTP/1.1" 404 153 "https://www.facebook.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:120.0) Gecko/20100101 Firefox/120.0" "172.22.0.59:80" imap.balamb.fr 161.153.112.65 - - [18/Mar/2026:01:35:19 +0100] "GET /wp-login.php HTTP/1.1" 404 555 "https://duckduckgo.com/" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" "172.22.0.59:80" imap.benadel.fr 161.153.112.65 - - [18/Mar/2026:01:35:20 +0100] "GET /wp-login.php HTTP/1.1" 404 153 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64; rv:120.0) Gecko/20100101 Firefox/120.0" "172.22.0.59:80" imap.benadel.fr 161.153.112.65 - - [18/Mar/2026:01:35:20 +0100] "GET /wp-login.php HTTP/1.1" 404 153 "https://wordpress.org/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15" "172.22.0.59:80" smtp.balamb.fr 161.153.112.65 - - [18/Mar/20 ... show less	Bad Web Bot
Anonymous	2026-03-18 18:20:12 UTC · (7 months ago)	Aggressive web scan	Web App Attack
🇺🇸 WeekendWeb	2026-03-18 18:11:32 UTC · (7 months ago)	Wordpress Vunerability attack	Web App Attack
🇩🇪 ps-center	2026-03-18 17:46:59 UTC · (7 months ago)	C2: Web Attack GET /wp-login.php GET /wp-login.php	Web Spam Hacking Bad Web Bot Web App Attack
🇩🇪 macrob	2026-03-18 17:29:43 UTC · (7 months ago)	2026/03/18 17:29:41 [error] 664071#664071: 84582652 access forbidden by rule, client: 161.153.112.65, server: binixo.ph, request: "GET /wp-login.php HTTP/1.1", host: "binixo.ph" 2026/03/18 17:29:42 [error] 664071#664071: 84582652 access forbidden b ... show more 2026/03/18 17:29:41 [error] 664071#664071: 84582652 access forbidden by rule, client: 161.153.112.65, server: binixo.ph, request: "GET /wp-login.php HTTP/1.1", host: "binixo.ph" 2026/03/18 17:29:42 [error] 664071#664071: 84582652 access forbidden by rule, client: 161.153.112.65, server: binixo.ph, request: "GET /wp-login.php HTTP/1.1", host: "binixo.ph", referrer: "https://t.co/" 2026/03/18 17:29:42 [error] 664071#664071: *84582652 access forbidden by rule, client: 161.153.112.65, server: binixo.ph, request: "GET /wp-admin/ HTTP/1.1", host: "binixo.ph", referrer: "https://www.google.com/" ... show less	Web App Attack
🇺🇸 Jason Howell	2026-03-18 17:09:28 UTC · (7 months ago)	161.153.112.65 - - [18/Mar/2026:12:09:22 -0500] "GET /wp-login.php HTTP/1.1" 200 5073 "https://www.google.com/search?q=wordpress" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15" ... show more 161.153.112.65 - - [18/Mar/2026:12:09:22 -0500] "GET /wp-login.php HTTP/1.1" 200 5073 "https://www.google.com/search?q=wordpress" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15" 161.153.112.65 - - [18/Mar/2026:12:09:26 -0500] "POST /wp-login.php HTTP/1.1" 503 19605 "https://bettendorfhomerepair.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 161.153.112.65 - - [18/Mar/2026:12:09:26 -0500] "GET /wp-admin/index.php HTTP/1.1" 503 22091 "https://bettendorfhomerepair.com/wp-login.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 161.153.112.65 - - [18/Mar/2026:12:09:27 -0500] "GET /wp-admin/profile.php HTTP/1.1" 503 22091 "https://bettendorfhomerepair.com/wp-login.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Sa ... show less	Web App Attack
🇺🇸 Dolphi	2026-03-18 17:00:06 UTC · (7 months ago)	Excessive GET /wp-login.php?redirect_to=https%3A%2F%2F24-prolocksmith.com requests	Brute-Force Web App Attack
🇺🇸 factor1	2026-03-18 15:10:12 UTC · (7 months ago)	Fail2ban at saturn Reports Abuse.	Brute-Force Web App Attack
🇨🇭 teamsecure	2026-03-18 13:37:37 UTC · (7 months ago)	Banned for trying to access wp-login	Web App Attack
🇬🇧 thetomtaylor.co.uk	2026-03-18 12:46:41 UTC · (7 months ago)	Fail2Ban - [NGINX]WordPress Logins Sniffings on nginx-wordpress-sniffer ... [wa02]	Bad Web Bot Web App Attack
🇫🇷 Murazaki	2026-03-18 09:36:58 UTC · (7 months ago)	tube.balamb.fr 161.153.112.65 - - [18/Mar/2026:10:36:54 +0100] "POST /wp-login.php HTTP/1.1" 200 7314 "https://tube.balamb.fr/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safar ... show more tube.balamb.fr 161.153.112.65 - - [18/Mar/2026:10:36:54 +0100] "POST /wp-login.php HTTP/1.1" 200 7314 "https://tube.balamb.fr/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.22.0.12:80" tube.balamb.fr 161.153.112.65 - - [18/Mar/2026:10:36:55 +0100] "POST /wp-login.php HTTP/1.1" 200 7314 "https://tube.balamb.fr/wp-login.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" "172.22.0.12:80" tube.balamb.fr 161.153.112.65 - - [18/Mar/2026:10:36:55 +0100] "POST /wp-login.php HTTP/1.1" 200 7314 "https://tube.balamb.fr/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" "172.22.0.12:80" tube.balamb.fr 161.153.112.65 - - [18/Mar/2026:10:36:56 +0100] "POST /wp-login.php HTTP/1.1" 200 7314 "https://tube.balamb.fr/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS ... show less	Brute-Force
🇺🇸 infra-monitor	2026-03-18 09:00:05 UTC · (7 months ago)	Automated ban via infra-monitor: wp-sensitive-paths, wordpress-probe	Web App Attack

Showing 1 to 15 of 95 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 216.25.90.71

🇨🇦 204.101.161.15

🇹🇭 182.52.236.80

🇷🇺 176.226.206.105

🇳🇱 172.211.56.214

🇮🇳 49.249.63.195

🇻🇳 203.162.234.154

🇦🇷 181.117.68.230

🇳🇱 45.148.10.151

🇧🇪 34.22.204.254

🇲🇰 31.59.141.201

🇺🇸 205.210.31.80

🇦🇷 181.24.21.10

🇺🇸 172.56.178.118

🇺🇸 162.216.150.204

🇨🇳 113.24.225.114

🇺🇦 91.218.50.21

🇺🇸 24.61.140.172

🇺🇸 216.25.90.33

🇺🇸 209.143.59.84