JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 168.107.89.95

168.107.89.95

Recent Activity

17 reports found in our database

98% ▲ ▲ ▲ Critical

Abuse confidence score ?

ISP

Oracle Corporation

Usage Type

Data Center/Web Hosting/Transit

ASN

AS31898

Domain Name

oracle.com

Country

🇸🇬 Singapore

City

Kampong Loyang

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Top Reporter Countries (Last 60 Days)

Example preview

Report Categories (Last 60 Days)

Example preview

Reports Activity

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 168.107.89.95:

This IP address has been reported a total of 17 times from 17 distinct sources. 168.107.89.95 was first reported on September 4th 2026, and the most recent report was 12 hours ago. In the last 60 days, the top reporter locations were: Germany with 5 reports; United States of America with 4 reports; Netherlands with 2 reports. The most common categories in these recent reports were: Web App Attack 15 times; Brute-Force 6 times; Bad Web Bot 4 times; Port Scan 2 times; Hacking 2 times; Other 6 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Phenix Info	2026-09-05 05:51:25 (12 hours ago)	SmallGuard.fr/Prestashop Massive 403	Web App Attack
🇳🇱 WeCloudit-Anti-Abuse	2026-09-05 05:47:12 (12 hours ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-admin-interface-probing	Web App Attack Hacking
Anonymous	2026-09-05 05:44:03 (12 hours ago)	168.107.89.95 - - [05/Sep/2026:07:44:02 +0200] "GET /.env.bak HTTP/1.1" 403 406 "-" "Mozilla/5.0 (Wi ... show more 168.107.89.95 - - [05/Sep/2026:07:44:02 +0200] "GET /.env.bak HTTP/1.1" 403 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 168.107.89.95 - - [05/Sep/2026:07:44:02 +0200] "GET /.env HTTP/1.1" 403 6499 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" ... show less	Web App Attack
🇩🇪 Skyrider	2026-09-05 05:29:45 (12 hours ago)	crowdsecurity/http-sensitive-files	Web App Attack
🇧🇪 Lunix	2026-09-05 05:19:38 (12 hours ago)		Brute-Force Web App Attack
🇺🇸 cwytech	2026-09-05 05:08:16 (12 hours ago)	Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: crowdsecurity/http-sensitive-files.	Bad Web Bot Web App Attack
🇳🇱 bazter.pro	2026-09-05 05:03:12 (12 hours ago)	168.107.89.95 - - [05/Sep/2026:05:03:12 +0000] "GET /.env.bak HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Wi ... show more 168.107.89.95 - - [05/Sep/2026:05:03:12 +0000] "GET /.env.bak HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" ... show less	Port Scan Brute-Force Bad Web Bot Web App Attack SSH
🇦🇺 electronico	2026-09-05 04:57:14 (12 hours ago)	168.107.89.95 - - [05/Sep/2026:15:57:13 +1100] "GET /width=device-width,%20initial-scale=1.0 HTTP/1. ... show more 168.107.89.95 - - [05/Sep/2026:15:57:13 +1100] "GET /width=device-width,%20initial-scale=1.0 HTTP/1.1" 404 7418 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 168.107.89.95 - - [05/Sep/2026:15:57:13 +1100] "GET /.env.bak HTTP/1.1" 404 2049 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 168.107.89.95 - - [05/Sep/2026:15:57:13 +1100] "GET /.env HTTP/1.1" 404 2049 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 168.107.89.95 - - [05/Sep/2026:15:57:14 +1100] "GET /.git/HEAD HTTP/1.1" 404 2049 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 168.107.89.95 - - [05/Sep/2026:15:57:14 +1100] "GET /.env.local HTTP/1.1" 404 2049 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/ ... show less	Brute-Force Web App Attack
🇨🇳 Bro Charlie	2026-09-04 23:40:16 (18 hours ago)	168.107.89.95 - - [05/Sep/2026:07:40:11 +0800] "GET / HTTP/1.1" 403 16922 "-" "Mozilla/5.0 (Windows ... show more 168.107.89.95 - - [05/Sep/2026:07:40:11 +0800] "GET / HTTP/1.1" 403 16922 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" "-" 168.107.89.95 - - [05/Sep/2026:07:40:11 +0800] "GET /.env.example HTTP/1.1" 403 16922 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" "-" 168.107.89.95 - - [05/Sep/2026:07:40:12 +0800] "GET /.env.local HTTP/1.1" 403 16922 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" "-" 168.107.89.95 - - [05/Sep/2026:07:40:12 +0800] "GET /.env.bak HTTP/1.1" 403 16922 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" "-" 168.107.89.95 - - [05/Sep/2026:07:40:12 +0800] "GET /.env HTTP/1.1" 403 16922 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safar ... show less	DDoS Attack
🇺🇸 chronos	2026-09-04 23:35:07 (18 hours ago)	[AUTORAVALT][[04/09/2026 - 20:35:07 -03:00 UTC] Attack from [Oracle Corporation] [168.107.89.95] Act ... show more [AUTORAVALT][[04/09/2026 - 20:35:07 -03:00 UTC] Attack from [Oracle Corporation] [168.107.89.95] Action: BLocKed DDoS Attack -> Participating in distributed denial-of-service. Phishing -> Phishing websites and/or email. Web Spam -> Comment/forum spam, HTTP referer spam, or other CMS spam. Blog Spam -> CMS blog comment spam. Web App Attack -> Attempts to probe ] ... show less	DDoS Attack Phishing Web Spam Blog Spam Web App Attack
🇬🇧 Deveroonie	2026-09-04 23:33:28 (18 hours ago)	168.107.89.95 - - [04/Sep/2026:23:33:28 +0000] "GET /.git/config HTTP/1.1" 404 196 "-" "Mozilla/5.0 ... show more 168.107.89.95 - - [04/Sep/2026:23:33:28 +0000] "GET /.git/config HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" ... show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-04 23:22:53 (18 hours ago)	Attempted known web exploits	Brute-Force Web App Attack
🇩🇪 Michel Wijnberg	2026-09-04 23:13:47 (18 hours ago)	168.107.89.95 - - [04/Sep/2026:23:13:47 +0000] "GET /.env HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Window ... show more 168.107.89.95 - - [04/Sep/2026:23:13:47 +0000] "GET /.env HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
Anonymous	2026-09-04 23:13:01 (18 hours ago)	[elearning.zebs.ch] httpd-config-scan: logs=/var/log/httpd/access_log; samples=/.env.production \| /. ... show more [elearning.zebs.ch] httpd-config-scan: logs=/var/log/httpd/access_log; samples=/.env.production \| /.env.example \| /.env show less	Hacking Web App Attack
🇺🇸 kosada.com	2026-09-04 23:09:49 (18 hours ago)	Repeated requests for suspicious nonexistent URLs, for example: /.env.bak (HTTP/1.1 port 80, bogus v ... show more Repeated requests for suspicious nonexistent URLs, for example: /.env.bak (HTTP/1.1 port 80, bogus vhost, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36") show less	Web App Attack

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 120.84.12.109

🇨🇳 113.201.21.110

🇫🇷 85.217.140.20

🇧🇷 177.80.173.111

🇺🇸 100.29.192.58

🇬🇧 2a06:4884:9000::94

🇧🇬 109.160.32.18

🇮🇳 49.207.247.25

🇳🇱 45.148.10.157

🇮🇹 2.33.204.219

🇰🇷 221.162.18.102

🇺🇸 216.25.89.118

🇦🇷 186.60.217.65

🇨🇳 119.96.81.99

🇧🇬 79.124.62.230

🇱🇻 62.60.130.242

🇴🇲 185.64.25.226

🇺🇸 145.223.105.98

🇯🇵 124.18.182.99

🇨🇳 123.156.68.241