JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 140.245.69.89

140.245.69.89 was found in our database!

This IP was reported 91 times. Confidence of Abuse is 100%: ?

100%

ISP	Oracle Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS31898
Domain Name	oracle.com
Country	🇰🇷 Korea (the Republic of)
City	Chuncheon, Gangwon-do

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 140.245.69.89

Whois 140.245.69.89

IP Abuse Reports for 140.245.69.89:

This IP address has been reported a total of 91 times from 55 distinct sources. 140.245.69.89 was first reported on May 13th 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 BlueWire Hosting	2026-06-08 13:43:55 (2 hours ago)	Probing websites for vulnerabilities	Web App Attack
🇩🇪 betternews.app	2026-06-08 10:03:54 (5 hours ago)	"a web request contained keyword ".env"; Suspicious URL: /.env.local"	Web Spam Blog Spam Brute-Force Bad Web Bot Web App Attack
🇺🇸 daveoctober	2026-06-08 01:54:52 (13 hours ago)	October Sentinel: honeypot triggered	Bad Web Bot Web App Attack
🇫🇷 SpaceHost-Server	2026-06-07 22:25:49 (17 hours ago)		Brute-Force Web App Attack
🇳🇱 homeshowdomain.nl	2026-06-07 21:59:06 (17 hours ago)	Auto-ban: >3000 req/min op 2026-06-07	Web App Attack SSH Hacking
🇺🇸 walnuts	2026-06-07 19:42:57 (20 hours ago)	Automated: Triggered nginx security jail (nginx-444) - probing blocked paths on web server	Bad Web Bot Web App Attack
🇬🇧 consul.to	2026-06-07 16:59:50 (22 hours ago)	Web attack/malicious scanning detected	Web App Attack
🇩🇪 4server	2026-06-06 23:27:51 (1 day ago)	[SunJun0701:27:45.5966822026][security2:error][pid2991549:tid2991565][client140.245.69.89:0]ModSecur ... show more [SunJun0701:27:45.5966822026][security2:error][pid2991549:tid2991565][client140.245.69.89:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"artisteer-italia.org\"][uri\"/.aws/credentials\"][unique_id\"aiSs8WcjiPxafzRyQ6xxIQAAAAU\"] show less	Port Scan Brute-Force Web App Attack
🇦🇺 aranguren.org	2026-06-06 22:43:18 (1 day ago)	140.245.69.89 - - [07/Jun/2026:08:43:17 +1000] "GET /.aws/credentials HTTP/1.1" 404 985 "-" "Mozilla ... show more 140.245.69.89 - - [07/Jun/2026:08:43:17 +1000] "GET /.aws/credentials HTTP/1.1" 404 985 "-" "Mozilla/5.0 (compatible; Google-CloudVertexBot; +https://cloud.google.com/vertex-ai-bot)" 140.245.69.89 - - [07/Jun/2026:08:43:17 +1000] "GET /swagger.json HTTP/1.1" 404 985 "-" "Mozilla/5.0 (compatible; Google-CloudVertexBot; +https://cloud.google.com/vertex-ai-bot)" 140.245.69.89 - - [07/Jun/2026:08:43:17 +1000] "GET /actuator/env HTTP/1.1" 404 985 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 140.245.69.89 - - [07/Jun/2026:08:43:17 +1000] "GET /.git/config HTTP/1.1" 404 985 "-" "Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)" 140.245.69.89 - - [07/Jun/2026:08:43:17 +1000] "GET /.env HTTP/1.1" 404 985 "-" "Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)" 140.245.69.89 - - [07/Jun/2026:08:43:17 +1000] "GET /.env.production HTTP/1.1" 404 985 "-" "Mozilla/5.0 (compatible; ClaudeBot/1.0 ... show less	Bad Web Bot
🇳🇱 ParaBug	2026-06-06 21:59:05 (1 day ago)	140.245.69.89 - - [06/Jun/2026:23:59:05 +0200] "GET /.git/config HTTP/1.1" 301 4394 "-" "Mozilla/5.0 ... show more 140.245.69.89 - - [06/Jun/2026:23:59:05 +0200] "GET /.git/config HTTP/1.1" 301 4394 "-" "Mozilla/5.0 (compatible; Google-CloudVertexBot; +https://cloud.google.com/vertex-ai-bot)" ... show less	Phishing Brute-Force Web App Attack
🇩🇪 macrob	2026-06-06 13:38:55 (2 days ago)	2026/06/06 13:38:53 [error] 1182556#1182556: 284955443 access forbidden by rule, client: 140.245.69 ... show more 2026/06/06 13:38:53 [error] 1182556#1182556: 284955443 access forbidden by rule, client: 140.245.69.89, server: 100fs.org, request: "GET /.git/config HTTP/1.1", host: "100fs.org" 2026/06/06 13:38:53 [error] 1182556#1182556: 284955444 access forbidden by rule, client: 140.245.69.89, server: 100fs.org, request: "GET /.env HTTP/1.1", host: "100fs.org" 2026/06/06 13:38:53 [error] 1182556#1182556: 284955445 access forbidden by rule, client: 140.245.69.89, server: 100fs.org, request: "GET /.env.production HTTP/1.1", host: "100fs.org" ... show less	Web App Attack
🇫🇷 SpaceHost-Server	2026-06-05 22:26:17 (2 days ago)		Brute-Force Web App Attack
🇩🇪 macrob	2026-06-05 08:03:23 (3 days ago)	2026/06/05 08:03:22 [error] 1096459#1096459: 282617909 access forbidden by rule, client: 140.245.69 ... show more 2026/06/05 08:03:22 [error] 1096459#1096459: 282617909 access forbidden by rule, client: 140.245.69.89, server: 100fs.org, request: "GET /.env HTTP/1.1", host: "100fs.org" 2026/06/05 08:03:22 [error] 1096459#1096459: 282617912 access forbidden by rule, client: 140.245.69.89, server: 100fs.org, request: "GET /.env.production HTTP/1.1", host: "100fs.org" 2026/06/05 08:03:22 [error] 1096459#1096459: 282617911 access forbidden by rule, client: 140.245.69.89, server: 100fs.org, request: "GET /.env.development HTTP/1.1", host: "100fs.org" ... show less	Web App Attack
🇺🇸 walnuts	2026-06-05 05:36:45 (3 days ago)	Automated: Triggered nginx security jail (nginx-444) - probing blocked paths on web server	Bad Web Bot Web App Attack
🇬🇧 consul.to	2026-06-05 04:23:38 (3 days ago)	Web attack/malicious scanning detected	Web App Attack

Showing 1 to 15 of 91 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 199.45.155.65

🇬🇧 178.253.31.121

🇸🇬 178.128.100.248

🇮🇪 3.252.223.55

🇧🇷 189.56.0.19

🇫🇮 185.94.35.146

🇵🇪 179.63.5.82

🇺🇸 64.62.156.37

🇫🇷 62.171.168.158

🇧🇷 45.178.227.0

🇨🇳 39.78.253.137

🇩🇪 34.107.87.29

🇺🇸 207.241.173.205

🇨🇴 181.49.8.57

🇺🇸 152.32.183.236

🇨🇳 123.139.116.49

🇻🇳 113.177.131.75

🇮🇳 103.190.198.222

🇰🇿 37.208.46.130

🇧🇪 35.241.176.243