JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 168.138.173.95

168.138.173.95 was found in our database!

This IP was reported 45 times. Confidence of Abuse is 100%: ?

100%

ISP	Oracle Public Cloud
Usage Type	Data Center/Web Hosting/Transit
ASN	AS31898
Domain Name	oracleemaildelivery.com
Country	🇸🇬 Singapore
City	Kampong Loyang

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 168.138.173.95

Whois 168.138.173.95

IP Abuse Reports for 168.138.173.95:

This IP address has been reported a total of 45 times from 43 distinct sources. 168.138.173.95 was first reported on September 4th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-09-14 12:06:00 (2 days ago)	Spring.Boot.Actuator.Unauthorized.Access	Hacking
🇹🇷 Threat.live	2026-09-14 11:05:02 (2 days ago)	Threat.live: Web Scan	Web App Attack
🇵🇱 itsvic.dev	2026-09-14 11:01:21 (2 days ago)	168.138.173.95 - - [14/Sep/2026:11:01:20 +0000] "109.122.28.203" "GET /.env.bak HTTP/1.1" 404 1590 " ... show more 168.138.173.95 - - [14/Sep/2026:11:01:20 +0000] "109.122.28.203" "GET /.env.bak HTTP/1.1" 404 1590 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 168.138.173.95 - - [14/Sep/2026:11:01:20 +0000] "109.122.28.203" "GET /.env HTTP/1.1" 404 1588 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 168.138.173.95 - - [14/Sep/2026:11:01:20 +0000] "109.122.28.203" "GET /.env.local HTTP/1.1" 404 1591 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" ... show less	Brute-Force Web App Attack
🇩🇪 Grossmann-Gruppe	2026-09-14 10:47:57 (2 days ago)	Plesk Fail2Ban: plesk-modsecurity	Hacking Brute-Force
🇩🇪 LRob	2026-09-14 10:05:47 (2 days ago)	Enumerating paths that do not exist (scanning) \| method: GET \| path: /.env.bak \| ua: Mozilla/5.0 (Wi ... show more Enumerating paths that do not exist (scanning) \| method: GET \| path: /.env.bak \| ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 \| 2026-09-14 10:05 UTC show less	Port Scan Web App Attack
🇩🇪 _ArminS_	2026-09-14 10:01:24 (2 days ago)	SP-Scan 3978:8080 detected 2026.09.14 12:01:24 blocked until 2026.11.03 04:04:11	Port Scan
🇩🇪 Tamsy	2026-09-14 09:58:49 (2 days ago)	HTTPD - 4xx scan	Web App Attack
🇫🇮 JRID	2026-09-14 09:49:54 (2 days ago)	Detected by CrowdSec + Suricata IDS: automated attack/scan against web servers.	Brute-Force Web App Attack
🇳🇱 spirttm	2026-09-14 09:42:39 (2 days ago)	168.138.173.95 - - [14/Sep/2026:09:42:37 +0000] "GET /.env.bak HTTP/1.1" 404 196 "-" "Mozilla/5.0 (W ... show more 168.138.173.95 - - [14/Sep/2026:09:42:37 +0000] "GET /.env.bak HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 168.138.173.95 - - [14/Sep/2026:09:42:38 +0000] "GET /.env.production.local HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 168.138.173.95 - - [14/Sep/2026:09:42:38 +0000] "GET /.env.production HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 168.138.173.95 - - [14/Sep/2026:09:42:38 +0000] "GET /.env HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 168.138.173.95 - - [14/Sep/2026:09:42:38 +0000] "GET /.env.local HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Sa ... show less	Port Scan Web App Attack
🇩🇪 gadix	2026-09-14 09:38:01 (2 days ago)	[14/Sep/2026:11:38:00.642376 +0200] aqfAeItNt9z2V_N8DMRRhgAAAAk 168.138.173.95 54178 127.0.0.1 7081 ... show more [14/Sep/2026:11:38:00.642376 +0200] aqfAeItNt9z2V_N8DMRRhgAAAAk 168.138.173.95 54178 127.0.0.1 7081 [14/Sep/2026:11:38:00.960882 +0200] aqfAeCd0tXzs_rBq6HF9KgAAAAY 168.138.173.95 54184 127.0.0.1 7081 [14/Sep/2026:11:38:01.152948 +0200] aqfAeaB-7k1h1hLBYBxIYQAAABE 168.138.173.95 54188 127.0.0.1 7081 ... show less	Web App Attack
🇱🇻 instant	2026-09-14 09:07:14 (2 days ago)	14.09.2026 09:07:14 Git repository scan (/.git)	Hacking Web App Attack
🇳🇱 SchorelWeb	2026-09-14 09:01:14 (2 days ago)	Cluster member (Omitted) (US/United States/-) said, TEMPDENY 168.138.173.95, Reason:[(Suspicious) Su ... show more Cluster member (Omitted) (US/United States/-) said, TEMPDENY 168.138.173.95, Reason:[(Suspicious) Suspicious activity detected 168.138.173.95 (SG/Singapore/-): 10 in the last 3600 secs] show less	Brute-Force SSH
Anonymous	2026-09-14 08:48:38 (2 days ago)		Web App Attack
🇫🇷 Mickmick21	2026-09-14 08:45:31 (2 days ago)	168.138.173.95 - - [14/Sep/2026:10:45:30 +0200] "GET /.env.bak HTTP/1.1" 418 0 "-" "Mozilla/5.0 (Win ... show more 168.138.173.95 - - [14/Sep/2026:10:45:30 +0200] "GET /.env.bak HTTP/1.1" 418 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" ... show less	Port Scan Web App Attack
🇺🇸 kuroneko_omu	2026-09-12 16:51:02 (4 days ago)	[autoreport] Probably Web App attack (eg. wp, phpmyadmin, ...)	Hacking Brute-Force Web App Attack

Showing 1 to 15 of 45 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 220.135.36.173

🇬🇧 193.163.125.136

🇲🇽 189.216.42.176

🇫🇮 147.185.133.119

🇨🇳 117.11.88.35

🇩🇿 105.96.41.173

🇺🇸 103.198.206.12

🇳🇱 81.19.216.121

🇺🇸 66.132.224.89

🇮🇶 37.239.149.161

🇧🇷 16.5.0.208

🇪🇨 2800:bf0:2422:10b9:7dbf:11fb:7ee7:b4a5

🇰🇷 221.156.126.1

🇸🇬 213.35.106.249

🇮🇩 210.87.97.90

🇺🇸 207.97.138.223

🇳🇱 204.76.203.45

🇧🇷 201.76.104.213

🇨🇱 200.27.142.120

🇧🇪 198.235.24.176