JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

168.138.21.49

Neutral Activity

Abuse confidence score ?

0% Low Risk

26 reports

21 reporters · latest 4 years ago

ISP	Oracle Public Cloud
Usage Type	Data Center/Web Hosting/Transit
ASN	AS31898
Domain Name	oracleemaildelivery.com
Country	🇦🇺 Australia
City	Melbourne, Victoria

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

168.138.21.49 has been reported 26 times. The most recent report is from 4 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 168.138.21.49

Export CSV

This IP address has been reported a total of 26 times from 21 distinct sources. 168.138.21.49 was first reported on May 30th 2022, and the most recent report was 4 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2022-06-21 14:57:37 (4 years ago)	Brute force attempts on Wordpress site	Brute-Force Web App Attack
🇫🇷 francoisunix	2022-06-09 10:14:56 (4 years ago)	168.138.21.49 - - [09/Jun/2022:14:14:53 +0000] "POST //xmlrpc.php HTTP/1.1" 401 420 "-" "Mozilla/5.0 ... show more 168.138.21.49 - - [09/Jun/2022:14:14:53 +0000] "POST //xmlrpc.php HTTP/1.1" 401 420 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 168.138.21.49 - - [09/Jun/2022:14:14:54 +0000] "POST //xmlrpc.php HTTP/1.1" 401 420 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 168.138.21.49 - - [09/Jun/2022:14:14:54 +0000] "POST //xmlrpc.php HTTP/1.1" 401 420 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" show less	Web App Attack
🇺🇸 dtorrer	2022-06-09 09:30:10 (4 years ago)	This client attempted to login to an administrator account on a Website, or abused from another reso ... show more This client attempted to login to an administrator account on a Website, or abused from another resource. show less	Brute-Force Web App Attack
🇳🇱 CryptoYakari	2022-06-09 09:23:06 (4 years ago)	168.138.21.49 - - [09/Jun/2022:16:22:56 +0300] "GET /wp-includes/wlwmanifest.xml HTTP/1.0" 404 3589 ... show more 168.138.21.49 - - [09/Jun/2022:16:22:56 +0300] "GET /wp-includes/wlwmanifest.xml HTTP/1.0" 404 3589 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 168.138.21.49 - - [09/Jun/2022:16:22:56 +0300] "GET /xmlrpc.php?rsd HTTP/1.0" 404 201 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 168.138.21.49 - - [09/Jun/2022:16:22:57 +0300] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.0" 404 3589 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 168.138.21.49 - - [09/Jun/2022:16:22:57 +0300] "GET /web/wp-includes/wlwmanifest.xml HTTP/1.0" 404 3589 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 168.138.21.49 - - [09/Jun/2022:16:22:57 +0300] "GET /wordpress/wp-includes/wlwmanifest.xml HTTP/1.0" 404 3589 "-" "Mo ... show less	Web Spam Blog Spam Bad Web Bot Web App Attack
Anonymous	2022-06-08 12:55:13 (4 years ago)		DNS Compromise DDoS Attack
🇺🇸 derLoosi	2022-06-08 12:10:25 (4 years ago)	HV1.2 Blocked by UFW	Port Scan
🇺🇸 SleepyHosting	2022-06-05 20:46:48 (4 years ago)	(mod_security) mod_security (id:400010) triggered by 168.138.21.49 (AU/Australia/-): 5 in the last 3 ... show more (mod_security) mod_security (id:400010) triggered by 168.138.21.49 (AU/Australia/-): 5 in the last 3600 secs show less	Brute-Force
🇬🇧 BRHosting	2022-06-04 15:29:01 (4 years ago)	Wordpress brute force attack for login credentials (eg xmlrc.php or wp-login.php)	Brute-Force Web App Attack
🇦🇺 clapper	2022-06-04 15:17:53 (4 years ago)	(mod_security) mod_security (id:350202) triggered by 168.138.21.49 (AU/Australia/-): 5 in the last 1 ... show more (mod_security) mod_security (id:350202) triggered by 168.138.21.49 (AU/Australia/-): 5 in the last 14400 secs; ID: rub show less	Brute-Force Bad Web Bot
🇩🇪 Ba-Yu	2022-06-04 14:32:05 (4 years ago)	WordPress hacking/exploits/scanning	Web Spam Hacking Brute-Force Exploited Host Web App Attack
🇩🇪 SEOAlexRamon	2022-06-04 12:44:18 (4 years ago)	Multiple POST /xmlrpc.php - Fail2Ban	Hacking Web App Attack
🇺🇸 HJ5Ss4Ju	2022-06-04 11:18:45 (4 years ago)	Blocked by Wordfence (SID 1)	Web App Attack
🇦🇺 clapper	2022-06-04 08:09:56 (4 years ago)	(mod_security) mod_security (id:350202) triggered by 168.138.21.49 (AU/Australia/-): 5 in the last 1 ... show more (mod_security) mod_security (id:350202) triggered by 168.138.21.49 (AU/Australia/-): 5 in the last 14400 secs; ID: DAN show less	Brute-Force Bad Web Bot
🇫🇷 francoisunix	2022-06-03 23:06:29 (4 years ago)	168.138.21.49 - - [04/Jun/2022:03:06:24 +0000] "POST /xmlrpc.php HTTP/1.1" 401 425 "-" "Mozilla/5.0 ... show more 168.138.21.49 - - [04/Jun/2022:03:06:24 +0000] "POST /xmlrpc.php HTTP/1.1" 401 425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 168.138.21.49 - - [04/Jun/2022:03:06:25 +0000] "POST /xmlrpc.php HTTP/1.1" 401 425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 168.138.21.49 - - [04/Jun/2022:03:06:25 +0000] "POST /xmlrpc.php HTTP/1.1" 401 425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" show less	Web App Attack
🇩🇪 spam.must.die	2022-06-03 21:48:44 (4 years ago)	Jun 4 01:48:41 ubuntu-wp wordpress(nixintel.info)[123321]: Attempted user enumeration from 168.138. ... show more Jun 4 01:48:41 ubuntu-wp wordpress(nixintel.info)[123321]: Attempted user enumeration from 168.138.21.49 Jun 4 01:48:41 ubuntu-wp wordpress(nixintel.info)[123322]: Attempted user enumeration from 168.138.21.49 Jun 4 01:48:41 ubuntu-wp wordpress(nixintel.info)[123323]: Attempted user enumeration from 168.138.21.49 Jun 4 01:48:43 ubuntu-wp wordpress(nixintel.info)[123326]: XML-RPC authentication attempt for unknown user admin from 168.138.21.49 Jun 4 01:48:44 ubuntu-wp wordpress(nixintel.info)[123325]: XML-RPC authentication attempt for unknown user admin from 168.138.21.49 ... show less	Web App Attack

Showing 1 to 15 of 26 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 205.210.31.102

🇷🇺 193.47.243.84

🇬🇧 193.32.209.252

🇨🇳 106.54.162.108

🇬🇧 35.203.211.235

🇸🇬 15.235.192.186

🇬🇧 206.189.29.244

🇳🇱 203.55.131.5

🇹🇼 198.235.24.95

🇦🇷 186.127.128.97

🇺🇸 172.71.146.117

🇻🇳 171.225.249.42

🇸🇬 116.193.85.70

🇱🇰 112.135.60.99

🇳🇬 105.119.42.253

🇺🇸 45.61.188.238

🇬🇧 35.203.210.234

🇺🇸 20.29.57.70

🇺🇸 20.29.52.64

🇹🇼 198.235.24.88