JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 140.245.213.25

140.245.213.25 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 74%: ?

74%

ISP	Oracle Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS31898
Domain Name	oracle.com
Country	🇮🇳 India
City	Hyderabad, Telangana

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 140.245.213.25

Whois 140.245.213.25

IP Abuse Reports for 140.245.213.25:

This IP address has been reported a total of 14 times from 13 distinct sources. 140.245.213.25 was first reported on July 24th 2026, and the most recent report was 15 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 etu brutus	2026-07-25 23:11:17 (15 hours ago)	140.245.213.25 has been banned for [WebApp Attack] ...	Hacking Bad Web Bot Web App Attack
🇬🇧 gigatech	2026-07-25 22:55:01 (15 hours ago)	Webserver Probing	Web App Attack
🇳🇱 Alboweb B.V.	2026-07-25 22:15:00 (16 hours ago)	Apache web server attack detected by Fail2Ban in plesk-apache jail	Web App Attack
🇺🇸 TPI-Abuse	2026-07-25 20:01:04 (18 hours ago)	(mod_security) mod_security (id:225170) triggered by 140.245.213.25 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 140.245.213.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 16:00:58.068092 2026] [security2:error] [pid 2678292:tid 2678292] [client 140.245.213.25:65341] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|eileensharaga.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "eileensharaga.com"] [uri "/wp-json/wp/v2/users"] [unique_id "amUV-vd65ylA7BqA4LQKIQAAACM"], referer: https://www.google.com/search?q=wordpress show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-07-25 19:48:20 (18 hours ago)	WordPress: User enumeration. Pattern match "(author\\\\= (88030-201)	Hacking
🇺🇸 Gabriel Camargo	2026-07-25 17:42:24 (20 hours ago)	140.245.213.25 - - [25/Jul/2026:12:42:05 -0500] "GET /wp-login.php HTTP/1.1" 301 178 "-" "Mozilla/5. ... show more 140.245.213.25 - - [25/Jul/2026:12:42:05 -0500] "GET /wp-login.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" 140.245.213.25 - - [25/Jul/2026:12:42:22 -0500] "GET /wp-login.php HTTP/1.1" 301 178 "https://www.google.com/search?q=wordpress" "Mozilla/5.0 (Windows NT 11.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 140.245.213.25 - - [25/Jul/2026:12:42:24 -0500] "GET /wp-login.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15" ... show less	Brute-Force SSH
🇺🇸 TAY	2026-07-25 13:53:46 (1 day ago)	140.245.213.25 - - [25/Jul/2026:21:53:39 +0800] "POST /wp-login.php HTTP/1.1" 200 8845 "https://auti ... show more 140.245.213.25 - - [25/Jul/2026:21:53:39 +0800] "POST /wp-login.php HTTP/1.1" 200 8845 "https://autism-cvc.org/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 140.245.213.25 - - [25/Jul/2026:21:53:44 +0800] "POST /wp-login.php HTTP/1.1" 200 3029 "https://autism-cvc.org/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 140.245.213.25 - - [25/Jul/2026:21:53:45 +0800] "POST /wp-login.php HTTP/1.1" 200 2994 "https://autism-cvc.org/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" ... show less	Brute-Force
🇺🇸 TAY	2026-07-25 12:53:35 (1 day ago)	140.245.213.25 - - [25/Jul/2026:20:53:32 +0800] "POST /wp-login.php HTTP/1.1" 200 3029 "https://auti ... show more 140.245.213.25 - - [25/Jul/2026:20:53:32 +0800] "POST /wp-login.php HTTP/1.1" 200 3029 "https://autism-cvc.org/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15" 140.245.213.25 - - [25/Jul/2026:20:53:33 +0800] "POST /wp-login.php HTTP/1.1" 200 2992 "https://autism-cvc.org/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15" 140.245.213.25 - - [25/Jul/2026:20:53:34 +0800] "POST /wp-login.php HTTP/1.1" 200 3021 "https://autism-cvc.org/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" ... show less	Brute-Force
Anonymous	2026-07-25 12:03:54 (1 day ago)	[Sat Jul 25 14:03:53.196183 2026] [authz_core:error] [pid 18995] [client 140.245.213.25:53072] AH016 ... show more [Sat Jul 25 14:03:53.196183 2026] [authz_core:error] [pid 18995] [client 140.245.213.25:53072] AH01630: client denied by server configuration: /etc/httpd/htdocs [Sat Jul 25 14:03:53.669805 2026] [authz_core:error] [pid 19065] [client 140.245.213.25:53603] AH01630: client denied by server configuration: /etc/httpd/htdocs [Sat Jul 25 14:03:53.935161 2026] [authz_core:error] [pid 18995] [client 140.245.213.25:53072] AH01630: client denied by server configuration: /etc/httpd/htdocs, referer: https://duckduckgo.com/ ... show less	Web App Attack
🇫🇮 as211431.net	2026-07-25 08:54:28 (1 day ago)	Triggered Cloudflare WAF (firewallCustom) from IN. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from IN. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: /wp-login.php UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1; rv:121.0) Gecko/20100101 Firefox/121.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇫🇮 inlink.ltd	2026-07-25 08:36:21 (1 day ago)	Known malicious PHP file or CMS probe	Web App Attack
🇺🇸 paulo.apoloni	2026-07-24 16:27:31 (1 day ago)	140.245.213.25 - - [24/Jul/2026:13:27:28 -0300] "GET /wp-login.php HTTP/1.1" 444 0 "-" "Mozilla/5.0 ... show more 140.245.213.25 - - [24/Jul/2026:13:27:28 -0300] "GET /wp-login.php HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 140.245.213.25 - - [24/Jul/2026:13:27:29 -0300] "GET /wp-admin/ HTTP/1.1" 444 0 "https://www.google.com/" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" 140.245.213.25 - - [24/Jul/2026:13:27:29 -0300] "GET /wp-login.php HTTP/1.1" 444 0 "https://www.facebook.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:118.0) Gecko/20100101 Firefox/118.0" 140.245.213.25 - - [24/Jul/2026:13:27:30 -0300] "GET /wp-admin/ HTTP/1.1" 444 0 "https://www.facebook.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:121.0) Gecko/20100101 Firefox/121.0" 140.245.213.25 - - [24/Jul/2026:13:27:31 -0300] "GET /wp-login.php HTTP/1.1" 444 0 "https://www.facebook.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, l ... show less	Bad Web Bot Web App Attack
🇪🇨 icp77	2026-07-24 15:12:00 (1 day ago)	Abuse DDoS	DDoS Attack Port Scan Brute-Force Exploited Host Web App Attack SSH FTP Brute-Force Hacking SQL Injection
🇫🇷 Eldeberen	2026-07-24 01:22:08 (2 days ago)	Vulnerability scan attempt through HTTP protocol	Web App Attack

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 91.196.152.5

🇫🇷 91.196.152.3

🇫🇷 85.217.140.9

🇳🇱 45.148.10.31

🇨🇳 220.167.232.141

🇨🇴 179.32.222.55

🇸🇬 139.59.255.226

🇩🇪 139.19.117.197

🇨🇳 120.48.15.138

🇮🇩 103.67.244.133

🇹🇷 81.214.75.248

🇬🇧 195.96.139.186

🇯🇵 195.40.70.147

🇨🇱 181.224.67.62

🇯🇵 158.101.144.198

🇯🇵 118.193.61.170

🇫🇷 85.217.140.43

🇺🇸 18.219.110.163

🇦🇴 193.163.125.126

🇵🇱 176.53.159.198