JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 168.138.197.172

168.138.197.172 was found in our database!

This IP was reported 143 times. Confidence of Abuse is 100%: ?

100%

ISP	Oracle Public Cloud
Usage Type	Data Center/Web Hosting/Transit
ASN	AS31898
Domain Name	oracleemaildelivery.com
Country	🇯🇵 Japan
City	Inzai, Chiba

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 168.138.197.172

Whois 168.138.197.172

IP Abuse Reports for 168.138.197.172:

This IP address has been reported a total of 143 times from 70 distinct sources. 168.138.197.172 was first reported on May 25th 2026, and the most recent report was 46 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 KIsmay	2026-06-04 15:52:05 (46 minutes ago)	Jun 4 06:19:17 www4 WPAudit[591462]: 168.138.197.172 www.imaginesalmon.com "Mozilla/5.0 (Macintosh; ... show more Jun 4 06:19:17 www4 WPAudit[591462]: 168.138.197.172 www.imaginesalmon.com "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" imagine:1234 FAIL Jun 4 06:58:02 www4 WPAudit[587548]: 168.138.197.172 www.servicesfyi.ca "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" pathwise:pathwise123@ FAIL Jun 4 09:49:27 www4 WPAudit[605271]: 168.138.197.172 siscobc.com "Mozilla/5.0 (Macintosh; Intel Mac OS X 11_7_10) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" sisco:sisco@1 FAIL Jun 4 11:33:25 www4 WPAudit[615297]: 168.138.197.172 katharinedickerson.com "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" katharine:Katharine@1234 FAIL Jun 4 11:52:04 www4 WPAudit[597466]: 168.138.197.172 servicesfyi.ca "Mozilla/5.0 (X11; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0" ... show less	Brute-Force Web App Attack
🇺🇸 dtorrer	2026-06-04 15:32:41 (1 hour ago)	Brute-force general attack.	Brute-Force
🇪🇸 elcruzado.es	2026-06-04 15:02:04 (1 hour ago)	(wordpress) Failed wordpress login from 168.138.197.172 (JP/Japan/-)	Brute-Force
🇫🇷 ELYAZ	2026-06-04 12:39:04 (3 hours ago)	(y4) Failed scan -byebye- from 168.138.197.172 (JP/Japan/-): (CF_ENABLE)	Hacking
🇳🇱 juutis	2026-06-04 11:52:18 (4 hours ago)	Multiple WAF abuses - IP blocked	Hacking Brute-Force Web App Attack
🇫🇷 Yepngo	2026-06-04 11:46:53 (4 hours ago)	168.138.197.172 - - [04/Jun/2026:13:46:53 +0200] "POST /wp-login.php HTTP/2.0" 200 12103 "https://de ... show more 168.138.197.172 - - [04/Jun/2026:13:46:53 +0200] "POST /wp-login.php HTTP/2.0" 200 12103 "https://dev.yepngo.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0" ... show less	Brute-Force Web App Attack
🇳🇱 juutis	2026-06-04 10:38:44 (6 hours ago)	168.138.197.172 - - [03/Jun/2026:14:42:13 +0200] "POST /wp-login.php HTTP/1.1" 200 7808 "https://www ... show more 168.138.197.172 - - [03/Jun/2026:14:42:13 +0200] "POST /wp-login.php HTTP/1.1" 200 7808 "https://www.taidesuunnistus.net/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 168.138.197.172 - - [04/Jun/2026:11:37:14 +0200] "POST /wp-login.php HTTP/1.1" 200 7807 "https://www.taidesuunnistus.net/wp-login.php" "Mozilla/5.0 (X11; Fedora; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 168.138.197.172 - - [04/Jun/2026:12:38:43 +0200] "POST /wp-login.php HTTP/1.1" 200 7805 "https://www.taidesuunnistus.net/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" show less	Web App Attack
🇫🇷 dynamix	2026-06-04 09:22:46 (7 hours ago)	WordPress wp-login.php Brute Force Attack	Brute-Force Web App Attack
🇩🇪 Hazzard	2026-06-04 07:59:43 (8 hours ago)	(PERMBLOCK) 168.138.197.172 (JP/Japan/Chiba/Inzai/-/[redacted]) has had more than 4 temp blocks	Hacking
🇫🇷 masterguru	2026-06-04 07:07:50 (9 hours ago)	(modsec_5040) ModSec 5040: API Basic Auth blocked from 168.138.197.172 (JP/Japan/-): 1 in the last 3 ... show more (modsec_5040) ModSec 5040: API Basic Auth blocked from 168.138.197.172 (JP/Japan/-): 1 in the last 3600 secs (0-195) show less	Hacking
Anonymous	2026-06-04 04:18:27 (12 hours ago)	168.138.197.172 - - [04/Jun/2026:12:18:26 +0800] "POST /xmlrpc.php HTTP/1.1" 200 401 "-" "Mozilla/5. ... show more 168.138.197.172 - - [04/Jun/2026:12:18:26 +0800] "POST /xmlrpc.php HTTP/1.1" 200 401 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇩🇪 bsoft.de	2026-06-04 03:02:23 (13 hours ago)	168.138.197.172 - - [04/Jun/2026:01:40:50 +0200] "POST /xmlrpc.php HTTP/1.1" 200 247 "-" "Mozilla/5. ... show more 168.138.197.172 - - [04/Jun/2026:01:40:50 +0200] "POST /xmlrpc.php HTTP/1.1" 200 247 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 168.138.197.172 - - [04/Jun/2026:01:57:12 +0200] "GET /wp-login.php HTTP/1.1" 404 132024 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 168.138.197.172 - - [04/Jun/2026:05:02:21 +0200] "POST /xmlrpc.php HTTP/1.1" 200 247 "-" "Mozilla/5.0 (X11; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" show less	Web App Attack
🇲🇹 Malta	2026-06-04 02:25:23 (14 hours ago)	168.138.197.172 - - [04/Jun/2026:04:25:23 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Macinto ... show more 168.138.197.172 - - [04/Jun/2026:04:25:23 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 11_7_10) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" Brute-force password attempt show less	Hacking Web App Attack Brute-Force
🇩🇪 Marc	2026-06-03 23:21:40 (17 hours ago)	168.138.197.172 - - [03/Jun/2026:22:31:42 +0200] "GET /wp-login.php HTTP/2.0" 200 3353 "-" "Mozilla/ ... show more 168.138.197.172 - - [03/Jun/2026:22:31:42 +0200] "GET /wp-login.php HTTP/2.0" 200 3353 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3 Safari/605.1.15" 168.138.197.172 - - [03/Jun/2026:22:31:44 +0200] "POST /wp-login.php HTTP/2.0" 200 3292 "https://alsarnsberg.de/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3 Safari/605.1.15" 168.138.197.172 - - [03/Jun/2026:23:11:10 +0200] "GET /wp-login.php HTTP/2.0" 200 3978 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 168.138.197.172 - - [03/Jun/2026:23:11:12 +0200] "POST /wp-login.php HTTP/2.0" 403 11168 "https://www.saatschule.de/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 168.138.197.172 - - [04/Jun/2026:01:21:38 +0200] "GET /wp-login.php HTTP/2.0" 200 3978 "-" "Mozilla/5.0 (Windows NT 10 show less	Brute-Force Web App Attack
🇩🇪 london2038.com	2026-06-03 22:34:51 (18 hours ago)	Attacking WordPress 168.138.197.172 - - [04/Jun/2026:00:34:48 +0200] "POST /wp-login.php HTTP/2.0" 5 ... show more Attacking WordPress 168.138.197.172 - - [04/Jun/2026:00:34:48 +0200] "POST /wp-login.php HTTP/2.0" 503 19289 "https://<REDACTED>/wp-login.php" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" show less	Brute-Force Web App Attack

Showing 1 to 15 of 143 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 104.243.35.104

🇪🇸 2a05:d011:d07:5802:b693:f425:66ce:c7e7

🇩🇪 2001:880:0:12::2e7

🇪🇸 185.126.235.76

🇫🇮 147.185.133.138

🇻🇳 125.212.235.194

🇭🇰 118.26.36.248

🇩🇪 64.89.163.83

🇳🇱 45.148.10.141

🇳🇱 45.144.212.47

🇬🇧 35.203.210.49

🇺🇸 18.217.208.51

🇻🇳 14.231.253.101

🇨🇳 114.92.151.183

🇨🇳 112.102.170.67

🇫🇷 91.231.89.130

🇪🇸 46.24.47.94

🇦🇪 20.74.132.130

🇻🇳 14.190.190.20

🇨🇳 220.168.118.133