JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 140.245.102.194

140.245.102.194 was found in our database!

This IP was reported 26 times. Confidence of Abuse is 99%: ?

99%

ISP	Oracle Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS31898
Domain Name	oracle.com
Country	🇸🇬 Singapore
City	Kampong Loyang

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 140.245.102.194

Whois 140.245.102.194

IP Abuse Reports for 140.245.102.194:

This IP address has been reported a total of 26 times from 25 distinct sources. 140.245.102.194 was first reported on September 4th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 YF	2026-09-14 11:00:12 (2 days ago)	404 errors Vulnerability scan	Web App Attack
🇺🇸 NXTwoThou	2026-09-14 10:43:22 (2 days ago)	174.78	Web App Attack
🇮🇳 nadnitin	2026-09-14 10:06:34 (2 days ago)	Automated trigger via Nginx Police. Reason: PATH-PROBER. Trigger Log: 140.245.102.194 - - [14/Sep/20 ... show more Automated trigger via Nginx Police. Reason: PATH-PROBER. Trigger Log: 140.245.102.194 - - [14/Sep/2026:15:36:33 +0530] "GET /.env.bak HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" show less	Web App Attack
🇺🇸 ratcarcher-labs	2026-09-14 10:01:14 (2 days ago)	[Ratcarcher Labs/MutantShield honeypot CTI] actor=human vector=brute_force_auth risk=70 attacks=125 ... show more [Ratcarcher Labs/MutantShield honeypot CTI] actor=human vector=brute_force_auth risk=70 attacks=125 depth=4 node=node-ap-south canary=yes human_score=50 agentic=30 cc=SG asn=Oracle Corporation \| Data provided by Ratcarcher Labs · https://ratcarcher-labs.com · docs https://api.ratcarcher-labs.com/api/v1/public/docs show less	Brute-Force SSH Hacking
🇺🇸 Carltonfsck	2026-09-14 09:45:46 (2 days ago)	140.245.102.194 - - [14/Sep/2026:09:45:46 +0000] "GET /.env.bak HTTP/1.1" 404 49 140.245.102.194 - - ... show more 140.245.102.194 - - [14/Sep/2026:09:45:46 +0000] "GET /.env.bak HTTP/1.1" 404 49 140.245.102.194 - - [14/Sep/2026:09:45:46 +0000] "GET /.env.production HTTP/1.1" 404 49 140.245.102.194 - - [14/Sep/2026:09:45:46 +0000] "GET /.env.production.local HTTP/1.1" 404 49 ... show less	Hacking Web App Attack
🇩🇪 Blexyel	2026-09-14 09:38:10 (2 days ago)	140.245.102.194 - - [14/Sep/2026:11:38:10 +0200] "GET /.git/config HTTP/1.1" 301 169 "-" "Mozilla/5. ... show more 140.245.102.194 - - [14/Sep/2026:11:38:10 +0200] "GET /.git/config HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" "136.243.2.38" ... show less	Brute-Force Web App Attack
🇵🇱 kwiatekstas	2026-09-14 09:13:08 (2 days ago)	140.245.102.194 - - [14/Sep/2026:11:13:07 +0200] "GET /.env.bak HTTP/1.1" 404 363 "-" "Mozilla/5.0 ( ... show more 140.245.102.194 - - [14/Sep/2026:11:13:07 +0200] "GET /.env.bak HTTP/1.1" 404 363 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 140.245.102.194 - - [14/Sep/2026:11:13:08 +0200] "GET /.env HTTP/1.1" 404 363 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 140.245.102.194 - - [14/Sep/2026:11:13:08 +0200] "GET /.env.production.local HTTP/1.1" 404 4325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" ... show less	Hacking Web App Attack
Anonymous	2026-09-10 21:20:05 (6 days ago)		Port Scan
Anonymous	2026-09-09 00:14:55 (1 week ago)	[Tue Sep 08 20:14:54.313423 2026] [php7:error] [pid 868389] [client 140.245.102.194:62900] script '/ ... show more [Tue Sep 08 20:14:54.313423 2026] [php7:error] [pid 868389] [client 140.245.102.194:62900] script '/var/www/html/phpinfo.php' not found or unable to stat [Tue Sep 08 20:14:54.315498 2026] [php7:error] [pid 867481] [client 140.245.102.194:62872] script '/var/www/html/wp-login.php' not found or unable to stat ... show less	Brute-Force Web App Attack SSH
Anonymous	2026-09-07 08:00:05 (1 week ago)	\| Suspicious URL access.	Web App Attack Hacking SQL Injection
Anonymous	2026-09-07 07:59:57 (1 week ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
🇩🇪 langenkamp-media	2026-09-06 02:47:37 (1 week ago)	Fail2Ban: Banned from jail nginx-scan-critical on 3dausdu.de	Web App Attack
🇫🇷 eselpcore.com	2026-09-05 05:56:42 (1 week ago)	Requests to non‑existent PHP scripts (web‑shell probing)	Web App Attack
🇩🇪 sdos.es	2026-09-05 05:29:42 (1 week ago)	"Restricted File Access Attempt - Matched Data: /.env found within REQUEST_FILENAME: /.env"	Web App Attack
🇩🇪 edena	2026-09-05 05:29:22 (1 week ago)	140.245.102.194 - - [05/Sep/2026:07:29:21 +0200] "GET /.env.production HTTP/1.1" 403 303 "-" "Mozill ... show more 140.245.102.194 - - [05/Sep/2026:07:29:21 +0200] "GET /.env.production HTTP/1.1" 403 303 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 140.245.102.194 - - [05/Sep/2026:07:29:21 +0200] "GET /.env.example HTTP/1.1" 403 303 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 140.245.102.194 - - [05/Sep/2026:07:29:21 +0200] "GET /.env HTTP/1.1" 403 303 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" ... show less	Web App Attack Bad Web Bot

Showing 1 to 15 of 26 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 2804:6a28:f92e:1201:b065:7d0d:e800:c618

🇧🇷 2804:bdc:50ce:6300:e00e:b24b:c9cc:5434

🇩🇪 185.243.11.107

🇺🇸 185.180.141.7

🇬🇧 172.70.90.15

🇺🇸 137.184.220.72

🇮🇩 103.236.192.227

🇳🇱 91.92.42.157

🇩🇪 69.5.169.83

🇮🇱 37.142.153.166

🇺🇸 35.233.194.235

🇧🇪 35.187.51.181

🇮🇩 2a09:bac5:3a23:25c3::3c3

🇦🇷 2803:4190:1d:c860:488:d76e:3a96:22b

🇩🇪 194.88.98.87

🇩🇪 165.245.244.80

🇺🇸 143.198.140.182

🇮🇳 103.98.3.64

🇺🇸 91.230.168.68

🇹🇷 78.182.156.118