JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 140.245.111.88

140.245.111.88 was found in our database!

This IP was reported 65 times. Confidence of Abuse is 59%: ?

59%

ISP	Oracle Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS31898
Domain Name	oracle.com
Country	🇸🇬 Singapore
City	Kampong Loyang

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 140.245.111.88

Whois 140.245.111.88

IP Abuse Reports for 140.245.111.88:

This IP address has been reported a total of 65 times from 27 distinct sources. 140.245.111.88 was first reported on April 19th 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 ICS Labs	2026-06-09 19:10:31 (1 week ago)	ICS Labs identified 140.245.111.88 as a malicious indicator from threat intelligence.	DDoS Attack Hacking Brute-Force Exploited Host
🇺🇸 kosada.com	2026-06-09 18:31:04 (1 week ago)	Web vulnerability probing: /wp-login.php	Web App Attack
🇧🇪 cmbplf	2026-06-09 08:47:17 (2 weeks ago)	13.483 POST requests with url.path */wp-login.php	Brute-Force Bad Web Bot
🇺🇸 xmission.com	2026-06-09 07:23:43 (2 weeks ago)	Blocked by UFW (TCP on 443) Source port: 49339 TTL: 113 Packet length: 52 TOS: 0x0A This report (fo ... show more Blocked by UFW (TCP on 443) Source port: 49339 TTL: 113 Packet length: 52 TOS: 0x0A This report (for 140.245.111.88) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
Anonymous	2026-06-09 06:15:45 (2 weeks ago)	2026-06-09T08:15:41.746998+02:00 wordpress(www.tuningblog.eu)[1658368]: Blocked user enumeration at ... show more 2026-06-09T08:15:41.746998+02:00 wordpress(www.tuningblog.eu)[1658368]: Blocked user enumeration attempt from 140.245.111.88 2026-06-09T08:15:42.469657+02:00 wordpress(www.tuningblog.eu)[1663888]: Blocked user enumeration attempt from 140.245.111.88 2026-06-09T08:15:43.199146+02:00 wordpress(www.tuningblog.eu)[1663967]: Blocked user enumeration attempt from 140.245.111.88 2026-06-09T08:15:43.935675+02:00 wordpress(www.tuningblog.eu)[1663979]: Blocked user enumeration attempt from 140.245.111.88 2026-06-09T08:15:44.679348+02:00 wordpress(www.tuningblog.eu)[1658367]: Blocked user enumeration attempt from 140.245.111.88 show less	Web Spam Blog Spam Brute-Force Web App Attack
🇺🇸 xmission.com	2026-06-09 05:51:21 (2 weeks ago)	140.245.111.88 - - [08/Jun/2026:23:51:14 -0600] "POST /wp-login.php HTTP/1.1" 302 138 "https://manic ... show more 140.245.111.88 - - [08/Jun/2026:23:51:14 -0600] "POST /wp-login.php HTTP/1.1" 302 138 "https://manicramblingspiral.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:118.0) Gecko/20100101 Firefox/118.0" 140.245.111.88 - - [08/Jun/2026:23:51:17 -0600] "POST /wp-login.php HTTP/1.1" 302 138 "https://manicramblingspiral.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 140.245.111.88 - - [08/Jun/2026:23:51:21 -0600] "POST /wp-login.php HTTP/1.1" 302 138 "https://manicramblingspiral.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Brute-Force
🇺🇦 URAN Publishing Service	2026-06-09 05:37:23 (2 weeks ago)	140.245.111.88 - - [09/Jun/2026:08:37:22 +0300] "GET /wp-login.php HTTP/1.1" 404 3361 "https://www.g ... show more 140.245.111.88 - - [09/Jun/2026:08:37:22 +0300] "GET /wp-login.php HTTP/1.1" 404 3361 "https://www.google.com/search?q=wordpress" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" 140.245.111.88 - - [09/Jun/2026:08:37:22 +0300] "GET /wp-admin/ HTTP/1.1" 404 705 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Web App Attack
🇨🇭 backslash	2026-06-09 04:42:00 (2 weeks ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
Anonymous	2026-06-09 04:05:09 (2 weeks ago)	Blocked: Reason='Suspicious traffic score=60 (review-based detection)'; Requests=4	Hacking
🇷🇺 DZBOT	2026-06-09 03:28:52 (2 weeks ago)	DZBOT: Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
Anonymous	2026-06-08 23:20:50 (2 weeks ago)	2026-06-09T01:20:42.661106+02:00 wordpress(www.tuningblog.eu)[1561610]: Blocked user enumeration at ... show more 2026-06-09T01:20:42.661106+02:00 wordpress(www.tuningblog.eu)[1561610]: Blocked user enumeration attempt from 140.245.111.88 2026-06-09T01:20:43.380918+02:00 wordpress(www.tuningblog.eu)[1561678]: Blocked user enumeration attempt from 140.245.111.88 2026-06-09T01:20:44.114307+02:00 wordpress(www.tuningblog.eu)[1557610]: Blocked user enumeration attempt from 140.245.111.88 2026-06-09T01:20:44.841863+02:00 wordpress(www.tuningblog.eu)[1562065]: Blocked user enumeration attempt from 140.245.111.88 2026-06-09T01:20:45.583989+02:00 wordpress(www.tuningblog.eu)[1561199]: Blocked user enumeration attempt from 140.245.111.88 show less	Web Spam Blog Spam Brute-Force Web App Attack
🇦🇺 afleventoffice.com.au	2026-06-08 22:43:02 (2 weeks ago)	GET /wp-login.php HTTP/1.1	Web App Attack
🇺🇸 TPI-Abuse	2026-06-08 18:17:18 (2 weeks ago)	(mod_security) mod_security (id:225170) triggered by 140.245.111.88 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 140.245.111.88 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 14:17:10.985877 2026] [security2:error] [pid 13161:tid 13161] [client 140.245.111.88:51149] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|rblep.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "rblep.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aicHJuP7T7XUE-0jEZRF7AAAABY"], referer: https://duckduckgo.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mind5t0rm	2026-04-27 18:57:27 (1 month ago)	(WPLOGIN) WP Login Attack 140.245.111.88 (SG/Singapore/-): 3 in the last 3600 secs; Ports: ; Direct ... show more (WPLOGIN) WP Login Attack 140.245.111.88 (SG/Singapore/-): 3 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_TRIGGER; Logs: 140.245.111.88 - - [28/Apr/2026:01:57:22 +0700] "GET /wp-login.php HTTP/2.0" 200 3113 "https://wordpress.org/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 140.245.111.88 - - [28/Apr/2026:01:57:24 +0700] "GET /wp-login.php HTTP/2.0" 200 3113 "https://www.bing.com/" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" 140.245.111.88 - - [28/Apr/2026:01:57:25 +0700] "GET /wp-login.php?redirect_to=https%3A%2F%2Fzerowaterthailand.com%2Fwp-admin%2F&reauth=1 HTTP/2.0" 200 3120 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" show less	Port Scan
🇺🇸 mind5t0rm	2026-04-27 16:58:20 (1 month ago)	(WPLOGIN) WP Login Attack 140.245.111.88 (SG/Singapore/-): 3 in the last 3600 secs; Ports: ; Direct ... show more (WPLOGIN) WP Login Attack 140.245.111.88 (SG/Singapore/-): 3 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_TRIGGER; Logs: 140.245.111.88 - - [27/Apr/2026:23:58:12 +0700] "GET /wp-login.php HTTP/2.0" 200 3113 "https://www.facebook.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15" 140.245.111.88 - - [27/Apr/2026:23:58:14 +0700] "GET /wp-login.php HTTP/2.0" 200 3113 "https://www.google.com/search?q=wordpress" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" 140.245.111.88 - - [27/Apr/2026:23:58:16 +0700] "GET /wp-login.php?redirect_to=https%3A%2F%2Fzerowaterthailand.com%2Fwp-admin%2F&reauth=1 HTTP/2.0" 200 3120 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64; rv:120.0) Gecko/20100101 Firefox/120.0" show less	Port Scan

Showing 1 to 15 of 65 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 85.217.140.6

🇸🇬 43.173.176.119

🇭🇰 47.82.83.190

🇸🇬 172.217.43.145

🇫🇷 172.71.119.39

🇮🇳 167.71.238.254

🇻🇳 160.187.147.124

🇸🇬 118.189.242.162

🇨🇳 114.80.32.225

🇻🇳 103.163.215.39

🇸🇬 101.47.18.36

🇮🇳 210.212.136.3

🇺🇸 207.90.244.27

🇨🇭 167.148.183.17

🇨🇳 111.18.254.100

🇵🇰 103.18.15.213

🇨🇴 45.181.206.106

🇺🇸 20.9.81.190

🇷🇴 193.32.162.82

🇺🇸 162.216.149.207