JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 64.110.70.140

64.110.70.140 was found in our database!

This IP was reported 62 times. Confidence of Abuse is 0%: ?

ISP	Oracle Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS31898
Domain Name	oracle.com
Country	🇰🇷 Korea (the Republic of)
City	Gangseo-gu, Seoul

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 64.110.70.140

Whois 64.110.70.140

IP Abuse Reports for 64.110.70.140:

This IP address has been reported a total of 62 times from 27 distinct sources. 64.110.70.140 was first reported on June 25th 2024, and the most recent report was 10 months ago.

Old Reports: The most recent abuse report for this IP address is from 10 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Hippoline	2025-08-07 06:32:44 (10 months ago)	Aug 7 08:31:06 local wp(XXXX-B)[22324]: Authentication attempt for unknown user admin from 64.110.7 ... show more Aug 7 08:31:06 local wp(XXXX-B)[22324]: Authentication attempt for unknown user admin from 64.110.70.140 ... show less	Brute-Force Web App Attack
🇫🇷 Hippoline	2025-01-30 02:20:38 (1 year ago)	Jan 30 03:17:01 local wp(XXXX-B)[16795]: Authentication attempt for unknown user admin from 64.110.7 ... show more Jan 30 03:17:01 local wp(XXXX-B)[16795]: Authentication attempt for unknown user admin from 64.110.70.140 ... show less	Brute-Force Web App Attack
🇫🇷 Hippoline	2024-07-23 02:26:52 (1 year ago)	Jul 23 04:21:02 local wp(XXXX-B)[18081]: Authentication attempt for unknown user admin from 64.110.7 ... show more Jul 23 04:21:02 local wp(XXXX-B)[18081]: Authentication attempt for unknown user admin from 64.110.70.140 Jul 23 04:21:02 local wp(XXXX-B)[16615]: Authentication attempt for unknown user admin from 64.110.70.140 ... show less	Brute-Force Web App Attack
🇺🇸 Richard Stover	2024-07-11 03:25:18 (1 year ago)	User tried to login as "admin."	Web App Attack
🇺🇸 myagent.site	2024-07-08 06:45:52 (1 year ago)	Banned for posting to wp-login.php without referer {"log":"admin","pwd":"Admin2012","wp-submit":"Log ... show more Banned for posting to wp-login.php without referer {"log":"admin","pwd":"Admin2012","wp-submit":"Log In","redirect_to":"http:\/\/kristiclark.com\/wp-admin\/","testcookie":"1"} show less	Hacking
🇩🇪 FeG Deutschland	2024-07-07 21:06:02 (1 year ago)	Looking for CMS/PHP/SQL vulnerablilities - 13	Exploited Host Web App Attack
🇲🇹 Malta	2024-07-02 09:05:48 (1 year ago)	64.110.70.140 - - [02/Jul/2024:11:05:39 +0200] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (Macintosh; ... show more 64.110.70.140 - - [02/Jul/2024:11:05:39 +0200] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.60 Safari/537.36" Brute-force password attempt show less	Hacking Brute-Force Web App Attack
🇳🇱 Linuxmalwarehuntingnl	2024-07-02 07:00:02 (1 year ago)	Unauthorized connection attempt	Brute-Force
🇬🇧 Swiptly	2024-07-02 04:34:29 (1 year ago)	WordPress xmlrpc spam or enumeration ...	Web Spam Bad Web Bot Web App Attack
🇫🇮 bittiguru.fi	2024-07-01 18:54:25 (1 year ago)	64.110.70.140 - [01/Jul/2024:21:52:45 +0300] "POST /xmlrpc.php HTTP/1.1" 403 235 "-" "Mozilla/5.0 (M ... show more 64.110.70.140 - [01/Jul/2024:21:52:45 +0300] "POST /xmlrpc.php HTTP/1.1" 403 235 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.60 Safari/537.36" "1.86" 64.110.70.140 - [01/Jul/2024:21:54:25 +0300] "POST /xmlrpc.php HTTP/1.1" 404 6949 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.60 Safari/537.36" "3.55" ... show less	Hacking Brute-Force Web App Attack
🇲🇹 Malta	2024-07-01 08:50:53 (1 year ago)	64.110.70.140 - - [01/Jul/2024:10:50:52 +0200] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (Macintosh; ... show more 64.110.70.140 - - [01/Jul/2024:10:50:52 +0200] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.60 Safari/537.36" Brute-force password attempt show less	Hacking Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2024-06-30 20:50:53 (1 year ago)	(mod_security) mod_security (id:240335) triggered by 64.110.70.140 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 64.110.70.140 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 30 16:50:46.915276 2024] [security2:error] [pid 7963] [client 64.110.70.140:46702] [client 64.110.70.140] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 64.110.70.140 (+1 hits since last alert)\|casadelsolmexico.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "casadelsolmexico.net"] [uri "/xmlrpc.php"] [unique_id "ZoHFJoGja1egDc7k3bYy_wAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-06-30 09:02:21 (1 year ago)	(mod_security) mod_security (id:240335) triggered by 64.110.70.140 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 64.110.70.140 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 30 05:02:17.555145 2024] [security2:error] [pid 14477:tid 47857876764416] [client 64.110.70.140:37544] [client 64.110.70.140] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 64.110.70.140 (+1 hits since last alert)\|mcdonaldmountainranch.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "mcdonaldmountainranch.com"] [uri "/xmlrpc.php"] [unique_id "ZoEfGe8NzRs3VIOdymI3wAAAAIw"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 nextweb	2024-06-30 08:49:02 (1 year ago)	(mod_security) mod_security (id:240335) triggered by 64.110.70.140 (KR/South Korea/Seoul/Seoul/-/[AS ... show more (mod_security) mod_security (id:240335) triggered by 64.110.70.140 (KR/South Korea/Seoul/Seoul/-/[AS31898 ORACLE-BMC-31898]): 5 in the last 3600 secs (CF_ENABLE) show less	Brute-Force
Anonymous	2024-06-30 08:08:34 (1 year ago)	joshuajohannes.de 64.110.70.140 [30/Jun/2024:10:08:31 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4288 "- ... show more joshuajohannes.de 64.110.70.140 [30/Jun/2024:10:08:31 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4288 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.60 Safari/537.36" joshuajohannes.de 64.110.70.140 [30/Jun/2024:10:08:33 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4288 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.60 Safari/537.36" show less	Web App Attack

Showing 1 to 15 of 62 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.56

🇯🇵 34.84.181.54

🇨🇳 223.167.75.86

🇫🇷 173.212.252.54

🇺🇸 162.216.149.6

🇺🇸 147.182.138.29

🇨🇳 122.224.205.42

🇨🇳 115.29.231.116

🇭🇺 89.134.210.182

🇿🇦 41.181.156.205

🇺🇸 34.145.210.250

🇺🇸 23.234.110.111

🇺🇸 23.234.109.75

🇨🇳 8.134.76.19

🇷🇺 195.190.121.154

🇬🇧 195.96.139.15

🇫🇷 143.244.57.82

🇻🇳 123.25.240.75

🇵🇹 45.92.86.6

🇬🇧 35.203.210.182