JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 40.115.138.143

40.115.138.143 was found in our database!

This IP was reported 138 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇯🇵 Japan
City	Tokyo, Tokyo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 40.115.138.143

Whois 40.115.138.143

IP Abuse Reports for 40.115.138.143:

This IP address has been reported a total of 138 times from 121 distinct sources. 40.115.138.143 was first reported on July 9th 2026, and the most recent report was 6 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 SpaceHost-Server	2026-07-10 22:29:53 (6 hours ago)		Brute-Force Web App Attack
Anonymous	2026-07-10 17:04:46 (12 hours ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: JP, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: JP, Attack patterns: WordPress scanning show less	Bad Web Bot Web App Attack
🇬🇧 openstrike.co.uk	2026-07-10 05:13:59 (1 day ago)	82 attacks on PHP URLs: GET /wp-content/plugins/index.php HTTP/1.1	Web App Attack
Anonymous	2026-07-10 04:21:00 (1 day ago)	2026-07-10T00:30:07.000Z - Japan - AS8075 -Microsoft Corporation - Tried paths : /wp-content/plugins ... show more 2026-07-10T00:30:07.000Z - Japan - AS8075 -Microsoft Corporation - Tried paths : /wp-content/plugins/WordPressCore/ /wp-content/plugins/index.php /sf.php /uploads/ /wp-login.php show less	Web App Attack
🇲🇽 octageeks.com	2026-07-10 04:20:52 (1 day ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇩🇪 Dominik Lysiak	2026-07-10 01:14:41 (1 day ago)	40.115.138.143 - - [10/Jul/2026:03:14:34 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 40.115.138.143 - - [10/Jul/2026:03:14:34 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 444 0 "-" "-" 40.115.138.143 - - [10/Jul/2026:03:14:38 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 444 0 "-" "-" 40.115.138.143 - - [10/Jul/2026:03:14:41 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 444 0 "-" "-" ... show less	Web App Attack
🇩🇪 Philister11	2026-07-10 01:11:21 (1 day ago)	CrowdSec: crowdsecurity/http-admin-interface-probing (JP/AS8075)	Web App Attack Hacking
🇬🇧 thetomtaylor.co.uk	2026-07-10 01:09:01 (1 day ago)	Fail2Ban - [RECIDIVE]Repeat offender across multiple jails on recidive ... [ice01,mx01,mx02,mx03,wa0 ... show more Fail2Ban - [RECIDIVE]Repeat offender across multiple jails on recidive ... [ice01,mx01,mx02,mx03,wa01,wa02] show less	Brute-Force Bad Web Bot Exploited Host Web App Attack
🇬🇧 andypiper	2026-07-10 01:02:27 (1 day ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
🇦🇹 penguin-solutions.at	2026-07-10 00:19:58 (1 day ago)	Excessive 403/404 errors ...	Brute-Force Web App Attack
Anonymous	2026-07-10 00:12:08 (1 day ago)	(caddyscan) Scanner path probe from 40.115.138.143 (JP/Japan/-): 5 in the last 3600 secs; Ports: ; ... show more (caddyscan) Scanner path probe from 40.115.138.143 (JP/Japan/-): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 40.115.138.143 - - [10/Jul/2026:00:01:34 +0000] "GET /wp-admin/maint/index.php HTTP/1.1" [REDACTED] 200 2627 40.115.138.143 - - [10/Jul/2026:00:01:50 +0000] "GET /wp-admin/maint/about.php HTTP/1.1" [REDACTED] 200 2627 40.115.138.143 - - [10/Jul/2026:00:09:31 +0000] "GET /xmlrpc.php HTTP/1.1" [REDACTED] 200 2627 40.115.138.143 - - [10/Jul/2026:00:12:05 +0000] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" [REDACTED] 200 2627 40.115.138.143 - - [10/Jul/2026:00:12:06 +0000] "GET /wp-admin/js/index.php HTTP/1.1" show less	Port Scan
Anonymous	2026-07-10 00:07:01 (1 day ago)	Automated web scanner. Requested suspicious paths: /wp-content/plugins/hellopress/wp_filemanager.php ... show more Automated web scanner. Requested suspicious paths: /wp-content/plugins/hellopress/wp_filemanager.php \| /100.php \| /ftde.php \| /this_is_a_new_hello_world.php \| /elp.php \| /test1.php \| /wp-temp.php \| /admin/function.php \| /atomlib.php. UTC: 2026-07-09 23:37:58. show less	Web App Attack
🇬🇧 Shadymint	2026-07-10 00:05:16 (1 day ago)	cms login attempt from IP marked as abusive	Web App Attack
🇬🇧 Oakley	2026-07-10 00:03:41 (1 day ago)	(mod_security) mod_security (id:900191) triggered by 40.115.138.143 (JP/Japan/-): 5 in the last 900 ... show more (mod_security) mod_security (id:900191) triggered by 40.115.138.143 (JP/Japan/-): 5 in the last 900 secs show less	Web App Attack Hacking
🇺🇸 kbeezie	2026-07-09 23:59:47 (1 day ago)	2026/07/09 19:59:39 [error] 1313#1313: 263389 access forbidden by rule, client: 40.115.138.143, ser ... show more 2026/07/09 19:59:39 [error] 1313#1313: 263389 access forbidden by rule, client: 40.115.138.143, server: stevenblessing.com, request: "GET /wp-mail.php HTTP/1.1", host: "stevenblessing.com" 2026/07/09 19:59:40 [error] 1313#1313: 263389 access forbidden by rule, client: 40.115.138.143, server: stevenblessing.com, request: "GET /.dj/index.php HTTP/1.1", host: "stevenblessing.com" 2026/07/09 19:59:47 [error] 1313#1313: 263389 access forbidden by rule, client: 40.115.138.143, server: stevenblessing.com, request: "GET /wp-mail.php HTTP/1.1", host: "stevenblessing.com" show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 138 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 2a06:4884:5000::63

🇺🇸 216.180.246.16

🇵🇱 176.53.159.197

🇸🇬 161.123.32.33

🇮🇩 152.32.154.44

🇺🇸 147.185.132.10

🇺🇸 138.197.204.198

🇮🇹 93.37.201.120

🇺🇸 64.62.156.144

🇬🇧 35.203.210.197

🇷🇴 193.32.162.84

🇧🇷 189.113.185.142

🇺🇸 173.255.223.32

🇰🇷 169.211.232.182

🇨🇳 125.79.19.77

🇮🇹 95.255.158.96

🇺🇸 66.132.195.110

🇳🇱 45.142.193.169

🇬🇧 45.133.173.122

🇬🇧 45.82.76.102