JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 140.245.61.25

140.245.61.25 was found in our database!

This IP was reported 157 times. Confidence of Abuse is 100%: ?

100%

ISP	Oracle Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS31898
Domain Name	oracle.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 140.245.61.25

Whois 140.245.61.25

IP Abuse Reports for 140.245.61.25:

This IP address has been reported a total of 157 times from 107 distinct sources. 140.245.61.25 was first reported on October 19th 2026, and the most recent report was 30 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 mbch	2026-10-22 20:18:45 (30 minutes ago)	Observed automated probing of web application/configuration paths over completed HTTP requests. UTC ... show more Observed automated probing of web application/configuration paths over completed HTTP requests. UTC 2026-10-22T20:18:45.930000+00:00 to 2026-10-22T20:19:36.667000+00:00: 10 distinct paths in 50.737s, denied HTTP 404. Trusted client-IP processing; forwarding headers accepted only from official configured Cloudflare networks. No successful compromise established. Examples: /app.php, /3PJcpMFsD8B.php, /1.php, /adminfuns.php, /wp-content/admin.php, /goods.php, /simple.php, /file.php, /222.php, /wp-themes.php. show less	Web App Attack
🇩🇪 neckaralb-admin.de	2026-10-22 19:21:06 (1 hour ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇧🇷 Halux	2026-10-22 18:53:40 (1 hour ago)	140.245.61.25 Probing protected path or service	Web App Attack
🇩🇪 ardexter	2026-10-22 18:41:36 (2 hours ago)	Wordpress attack and DDOS	DDoS Attack Web App Attack
🇺🇸 EmilGH	2026-10-22 18:28:31 (2 hours ago)	140.245.61.25 - - [22/Oct/2026:18:27:40 +0000] "GET /wp-includes/blocks/code/ HTTP/1.1" 403 520 "htt ... show more 140.245.61.25 - - [22/Oct/2026:18:27:40 +0000] "GET /wp-includes/blocks/code/ HTTP/1.1" 403 520 "https://eyefordetailproductions.com/wp-includes/blocks/code/" "Go-http-client/1.1" 140.245.61.25 - - [22/Oct/2026:18:27:41 +0000] "GET /wp-content/uploads/ HTTP/1.1" 403 520 "https://eyefordetailproductions.com/wp-content/uploads/" "Go-http-client/1.1" 140.245.61.25 - - [22/Oct/2026:18:27:42 +0000] "GET /wp-includes/css/dist/block-library/ HTTP/1.1" 403 520 "https://eyefordetailproductions.com/wp-includes/css/dist/block-library/" "Go-http-client/1.1" 140.245.61.25 - - [22/Oct/2026:18:27:42 +0000] "GET /edit.php HTTP/1.1" 404 97646 "https://eyefordetailproductions.com/edit.php" "Go-http-client/1.1" 140.245.61.25 - - [22/Oct/2026:18:27:44 +0000] "GET /wp-admin/maint/ HTTP/1.1" 403 520 "https://eyefordetailproductions.com/wp-admin/maint/" "Go-http-client/1.1" 140.245.61.25 - - [22/Oct/2026:18:27:45 +0000] "GET /404.php HTTP/1.1" 404 97646 "https://eyefordetailproductions.com/404.php" "Go-http- ... show less	Bad Web Bot Web App Attack
🇫🇷 ELYAZ	2026-10-22 18:24:51 (2 hours ago)	(y3) Failed access -byebye- from 140.245.61.25 (SG/Singapore/-): (CF_ENABLE)	Hacking
🇩🇪 Gwyneth Llewelyn	2026-10-22 18:12:31 (2 hours ago)	140.245.61.25 - - [22/Oct/2026:19:12:30 +0100] "GET /cgi-bin/cgi-bin/sql.php HTTP/2.0" 404 997 "http ... show more 140.245.61.25 - - [22/Oct/2026:19:12:30 +0100] "GET /cgi-bin/cgi-bin/sql.php HTTP/2.0" 404 997 "http://gwynethllewelyn.net/cgi-bin/cgi-bin/sql.php" "Go-http-client/2.0" show less	Bad Web Bot
🇳🇱 Alt255	2026-10-22 18:09:19 (2 hours ago)	[cb-01al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail ngin ... show more [cb-01al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail nginx-404. Example: 140.245.61.25 - - [22/Oct/2026:20:08:46 +0200] "GET /inputs.php HTTP/1.1" 404 1350 "http://graveerjecadeau.nl/inputs.php" "Go-http-client/2.0" 140.245.61.25 - - [22/Oct/2026:20:08:46 +0200] "GET /.well-known/core.php HTTP/1.1" 404 1350 "http://graveerjecadeau.nl/.well-known/core.php" "Go-http-client/2.0" 140.245.61.25 - - [22/Oct/2026:20:08:47 +0200] "GET /wp-content/users.php HTTP/1.1" 404 47 "http://graveerjecadeau.nl/wp-content/users.php" "Go-http-client/2.0" 140.245.61.25 - - [22/Oct/2026:20:08:47 +0200] "GET /wp-content/wp-activate.php HTTP/1.1" 404 47 "http://graveerjecadeau.nl/wp-content/wp-activate.php" "Go-http-client/2.0" 140.245.61.25 - - [22/Oct/2026:20:08:48 +0200] "GET /num.php HTTP/1.1" 404 1350 "http://graveerjecadeau.nl/num.php" "Go-http-client/2.0" 140.245.61.25 - - [22/O ... show less	Bad Web Bot Web App Attack
🇺🇸 factor1	2026-10-22 17:48:10 (3 hours ago)	CrowdSec at saturn Reports Abuse	Web App Attack
🇺🇸 dot.mg	2026-10-22 17:46:36 (3 hours ago)	Scan of vulnerable files	Web App Attack
🇩🇪 svr	2026-10-22 17:36:16 (3 hours ago)	Abusive Automated Web Scanner	Web App Attack
Anonymous	2026-10-22 16:44:55 (4 hours ago)	Web attack blocked by WAF: GET /wp-login.php x2, GET /wp-content/plugins/shell/ x2 (Access to login ... show more Web attack blocked by WAF: GET /wp-login.php x2, GET /wp-content/plugins/shell/ x2 (Access to login page in WordPress (counter); [RBL] Dirb like fuzzing). [22/Oct/2026:19:44:37 +0300] "GET /wp-login.php?redirect_to=https%3A%2F%[our-domain]%2Fwp-admin%2F&reauth=1 HTTP/1.1" UA="Go-http-client/2.0" -> Access to login page in WordPress (counter) [22/Oct/2026:19:44:43 +0300] "GET /wp-login.php?redirect_to=https%3A%2F%2F[our-domain]%2Fwp-admin%2F&reauth=1 HTTP/1.1" UA="Go-http-client/2.0" -> Access to login page in WordPress (counter) [22/Oct/2026:19:44:52 +0300] "GET /wp-content/plugins/shell/ HTTP/1.1" UA="Go-http-client/1.1" -> [RBL] Dirb like fuzzing [22/Oct/2026:19:44:53 +0300] "GET /wp-content/plugins/shell/ HTTP/1.1" UA="Go-http-client/1.1" -> [RBL] Dirb like fuzzing show less	Web App Attack
🇸🇬 Cloudkul Cloudkul	2026-10-22 16:11:53 (4 hours ago)	Attempted Not Found (404 status code) requests on our application, more than 30% of their total requ ... show more Attempted Not Found (404 status code) requests on our application, more than 30% of their total requests. show less	Brute-Force Web App Attack
🇯🇵 S.O.B.A. Dev.	2026-10-22 15:53:46 (4 hours ago)	Web vulnerability scanning	Brute-Force Web Spam Web App Attack
🇦🇺 paulshipley.com.au	2026-10-22 14:45:51 (6 hours ago)	furst.com.au:443 140.245.61.25 - - [23/Oct/2026:01:45:49 +1100] "GET /inputs.php HTTP/1.1" 404 80777 ... show more furst.com.au:443 140.245.61.25 - - [23/Oct/2026:01:45:49 +1100] "GET /inputs.php HTTP/1.1" 404 80777 "http://furst.com.au/inputs.php" "Go-http-client/1.1" ... show less	Web App Attack

Showing 1 to 15 of 157 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 143.208.111.247

🇮🇳 110.172.147.190

🇲🇾 47.250.188.105

🇬🇧 217.146.80.105

🇨🇴 181.205.53.134

🇩🇪 165.22.95.179

🇯🇵 160.251.202.248

🇺🇸 152.39.218.118

🇺🇸 136.242.107.16

🇸🇬 128.199.189.224

🇺🇸 119.12.188.239

🇸🇪 83.233.97.33

🇺🇸 45.136.24.208

🇪🇬 197.44.15.210

🇩🇪 172.121.60.37

🇩🇪 130.12.180.171

🇩🇪 130.12.180.164

🇬🇧 104.253.104.253

🇳🇱 89.21.67.153

🇷🇴 80.94.92.234