JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 140.245.238.56

140.245.238.56 was found in our database!

This IP was reported 28 times. Confidence of Abuse is 44%: ?

44%

ISP	Oracle Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS31898
Domain Name	oracle.com
Country	🇮🇳 India
City	Hyderabad, Telangana

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 140.245.238.56

Whois 140.245.238.56

IP Abuse Reports for 140.245.238.56:

This IP address has been reported a total of 28 times from 21 distinct sources. 140.245.238.56 was first reported on June 12th 2026, and the most recent report was 14 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 el-brujo	2026-09-01 09:59:20 (14 hours ago)	Cloudflare WAF: Request Path: / Request Query: ?pFUKtzFV?daselL Host: forum.elhacker.net userAgent: ... show more Cloudflare WAF: Request Path: / Request Query: ?pFUKtzFV?daselL Host: forum.elhacker.net userAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 Action: block Source: l7ddos ASN Description: Oracle Corporation Country: IN Method: GET Timestamp: 2026-09-01T09:59:20Z ruleId: 6e3ccc23900c428e8ec0fb8a3a679c52. Report generated by Cloudflare-WAF-to-AbuseIPDB. show less	Hacking SQL Injection Web App Attack
🇵🇱 MatStef132	2026-08-30 02:54:47 (2 days ago)	MatShield L7: blocked on test-clean.mathost.eu (ua-quarantined)	Bad Web Bot
🇫🇷 Lunix	2026-08-17 19:45:28 (2 weeks ago)		Brute-Force Web App Attack
🇪🇸 el-brujo	2026-08-13 16:23:00 (2 weeks ago)	HTTP DDoS Attack Layer 7	DDoS Attack
🇺🇸 SX Communications	2026-08-08 10:06:17 (3 weeks ago)	Blocked abusive HTTP application-layer DoS / botnet traffic from 140.245.238.56: traffic from this a ... show more Blocked abusive HTTP application-layer DoS / botnet traffic from 140.245.238.56: traffic from this address continues high-cost dynamic page and feed requests at abusive rates via TCP/HTTPS despite edge block responses. Likely compromised end-user host. show less	DDoS Attack Bad Web Bot Exploited Host
🇨🇿 lp	2026-08-06 22:50:42 (3 weeks ago)	Email account brute force: 1 attempts were recorded from 140.245.238.56 2026-08-07T00:04:13+02:00 wa ... show more Email account brute force: 1 attempts were recorded from 140.245.238.56 2026-08-07T00:04:13+02:00 warning: unknown[140.245.238.56]: SASL PLAIN authentication failed: authentication failure, [email protected] show less	Brute-Force
🇦🇺 oncord	2026-07-30 14:16:26 (1 month ago)	Form spam	Web Spam
🇺🇸 COMPLEX	2026-07-28 19:43:01 (1 month ago)	Banned by Multi Agent · node …jrh1 · reason=SSH banner invalid / banner exchange invalid format · at ... show more Banned by Multi Agent · node …jrh1 · reason=SSH banner invalid / banner exchange invalid format · attempts=1 · SSH banner invalid / banner exchange invalid format show less	Brute-Force SSH
🇺🇸 COMPLEX	2026-07-27 22:42:14 (1 month ago)	Banned by Multi Agent · node …jrh1 · reason=SSH banner invalid / banner exchange invalid format · at ... show more Banned by Multi Agent · node …jrh1 · reason=SSH banner invalid / banner exchange invalid format · attempts=1 · SSH banner invalid / banner exchange invalid format show less	Brute-Force SSH
🇫🇷 solution.it	2026-07-24 00:09:29 (1 month ago)	[Fri Jul 24 02:09:28.813023 2026] [php7:error] [pid 913886:tid 913886] [client 140.245.238.56:51466] ... show more [Fri Jul 24 02:09:28.813023 2026] [php7:error] [pid 913886:tid 913886] [client 140.245.238.56:51466] script '/var/www/html/www.craccaaltesoro.it/wp-login.php' not found or unable to stat, referer: https://www.craccaaltesoro.it/?tag=sicurezza show less	Web App Attack
🇺🇸 Vano Ganzzz	2026-07-22 14:54:35 (1 month ago)	Triggered Cloudflare WAF (l7ddos) from IN. Action taken: BLOCK ASN: 31898 (Oracle Corporation) Proto ... show more Triggered Cloudflare WAF (l7ddos) from IN. Action taken: BLOCK ASN: 31898 (Oracle Corporation) Protocol: HTTP/2 (GET method) Endpoint: / Timestamp: 2026-07-22T14:54:35Z Ray ID: a1f34810ebfd9958 UA: None/5.6274 show less	DDoS Attack Bad Web Bot
Anonymous	2026-07-20 09:06:39 (1 month ago)	Detected Hacking, SQL Injection or general Web App Attack	Web App Attack
Anonymous	2026-07-19 17:08:45 (1 month ago)	IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/nginx-req-limit-exceeded; Action=ban; E ... show more IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/nginx-req-limit-exceeded; Action=ban; Events=6; Hosts=incognet.io; Paths=/?chpce=RqGmd82U1jl,/?nulpwza=7Tl2bF,/actuator/health?ahgfsk=DkBPtAI40,/api/v2/users?jxg=32vfEqNyjCuxA,/search?tqbdud=cx9jOO6IOOYBzOk,/wp-json/wp/v2/users?ouz=BF8Q5K4K; Country=IN; ASN=31898 ORACLE-BMC-31898 show less	DDoS Attack
🇫🇮 JimArchon72	2026-07-17 23:10:02 (1 month ago)	2026/07/17 23:08:08 "GET /wp-login.php?action=register HTTP/1.1"	Web App Attack
🇪🇸 el-brujo	2026-07-17 10:32:20 (1 month ago)	07/17/2026-12:32:07.009624 140.245.238.56 Protocol: 6 ET SCAN Potential SSH Scan	Port Scan

Showing 1 to 15 of 28 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 185.242.3.226

🇸🇪 171.25.193.77

🇨🇳 114.215.173.187

🇩🇪 43.228.157.173

🇸🇳 41.208.147.131

🇫🇷 2.4.230.167

🇨🇳 221.13.93.238

🇺🇿 213.230.92.55

🇺🇸 205.210.31.111

🇫🇮 193.32.204.199

🇷🇺 185.239.119.180

🇵🇱 176.53.159.198

🇲🇾 160.250.93.239

🇨🇦 159.89.115.168

🇺🇸 158.94.187.122

🇫🇮 147.185.133.41

🇺🇸 147.185.132.138

🇩🇪 69.5.169.190

🇺🇸 64.62.197.116

🇺🇸 34.42.28.105