JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 140.83.85.172

140.83.85.172 was found in our database!

This IP was reported 323 times. Confidence of Abuse is 100%: ?

100%

ISP	Oracle Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS31898
Domain Name	oracle.com
Country	🇯🇵 Japan
City	Osaka, Osaka

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 140.83.85.172

Whois 140.83.85.172

IP Abuse Reports for 140.83.85.172:

This IP address has been reported a total of 323 times from 161 distinct sources. 140.83.85.172 was first reported on May 18th 2022, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇪 vaia.cloud	2026-08-21 19:05:02 (3 hours ago)	crowdsecurity/http-wordpress-scan	Brute-Force Web App Attack
🇩🇪 Darki1962	2026-08-21 13:55:02 (9 hours ago)	71 hits, proto=tcp, ports=443	Port Scan Hacking Brute-Force SSH
🇩🇪 bazter.pro	2026-08-21 13:02:08 (10 hours ago)	Fail2Ban: plesk-bot-aggressive - 15 failures	Port Scan Bad Web Bot Web App Attack
🇩🇪 Starburst SysOp Team	2026-08-21 10:58:18 (12 hours ago)	Malware host (X-Forwarded-For) detected by rbl.malware.expert. RBL lookup of 172.85.83.140.rbl.malwa ... show more Malware host (X-Forwarded-For) detected by rbl.malware.expert. RBL lookup of 172.85.83.140.rbl.malware.expert succeeded at REQUEST_HEADERS:X-Forwarded-For. (1001000-nue6-2) show less	Hacking
Anonymous	2026-08-21 08:39:54 (14 hours ago)	140.83.85.172 - - [21/Aug/2026:10:39:52 +0200] "GET /wp-includes/js/jquery/jquery.js HTTP/1.1" 404 1 ... show more 140.83.85.172 - - [21/Aug/2026:10:39:52 +0200] "GET /wp-includes/js/jquery/jquery.js HTTP/1.1" 404 124 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.2 Safari/605.1.15" 140.83.85.172 - - [21/Aug/2026:10:39:52 +0200] "GET /wp-includes/css/dashicons.css HTTP/1.1" 404 184 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.63 Safari/537.36" 140.83.85.172 - - [21/Aug/2026:10:39:53 +0200] "GET /wp-includes/version.php HTTP/1.1" 404 184 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.71 Safari/537.36" 140.83.85.172 - - [21/Aug/2026:10:39:53 +0200] "GET /wp-includes/functions.php HTTP/1.1" 404 124 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:92.0) Gecko/20100101 Firefox/92.0" 140.83.85.172 - - [21/Aug/2026:10:39:53 +0200] "GET /wp-includes/class-wp.php HTTP/1.1" 404 184 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebK ... show less	Brute-Force Web App Attack
🇺🇸 rsiddall	2026-08-21 07:47:57 (15 hours ago)	140.83.85.172 - - [21/Aug/2026:03:37:49 -0400] "POST /wp-login.php HTTP/1.1" 403 1809 "https://middl ... show more 140.83.85.172 - - [21/Aug/2026:03:37:49 -0400] "POST /wp-login.php HTTP/1.1" 403 1809 "https://middleburyhistoricalsociety.org/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.63 Safari/537.36" 140.83.85.172 - - [21/Aug/2026:03:37:51 -0400] "POST /wp-login.php HTTP/1.1" 403 1809 "https://middleburyhistoricalsociety.org/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 140.83.85.172 - - [21/Aug/2026:03:47:48 -0400] "POST /wp-login.php HTTP/1.1" 403 1809 "https://middleburyhistoricalsociety.org/wp-login.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36" 140.83.85.172 - - [21/Aug/2026:03:47:52 -0400] "POST /wp-login.php HTTP/1.1" 403 1809 "https://middleburyhistoricalsociety.org/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0.2" 140.83.85.172 - - [21 ... show less	Brute-Force
🇩🇪 ger-stg-sifi1	2026-08-21 07:26:06 (15 hours ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
🇺🇸 rsiddall	2026-08-21 07:25:38 (15 hours ago)	140.83.85.172 - - [21/Aug/2026:03:25:26 -0400] "POST /wp-login.php HTTP/1.1" 403 1809 "https://middl ... show more 140.83.85.172 - - [21/Aug/2026:03:25:26 -0400] "POST /wp-login.php HTTP/1.1" 403 1809 "https://middleburyhistoricalsociety.org/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0.2" 140.83.85.172 - - [21/Aug/2026:03:25:29 -0400] "POST /wp-login.php HTTP/1.1" 403 1809 "https://middleburyhistoricalsociety.org/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36" 140.83.85.172 - - [21/Aug/2026:03:25:31 -0400] "POST /wp-login.php HTTP/1.1" 403 1809 "https://middleburyhistoricalsociety.org/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.0 Safari/605.1.15" 140.83.85.172 - - [21/Aug/2026:03:25:33 -0400] "POST /wp-login.php HTTP/1.1" 403 1809 "https://middleburyhistoricalsociety.org/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36" 140.83.85.172 ... show less	Brute-Force
🇺🇸 Major Hostility	2026-08-21 07:21:47 (15 hours ago)	"GET /wp-login.php HTTP/1.1" 404 "GET /wp-admin/ HTTP/1.1" 404 "GET /wp-admin/admin-ajax.php HTTP/1. ... show more "GET /wp-login.php HTTP/1.1" 404 "GET /wp-admin/ HTTP/1.1" 404 "GET /wp-admin/admin-ajax.php HTTP/1.1" 404 "GET /wp-admin/load-scripts.php HTTP/1.1" 404 "GET /wp-admin/load-styles.php HTTP/1.1" 404 "GET /wp-includes/js/jquery/jquery.js HTTP/1.1" 404 "GET /wp-includes/css/dashicons.css HTTP/1.1" 404 "GET /wp-content/themes/ HTTP/1.1" 404 "GET /wp-content/plugins/ HTTP/1.1" 404 "GET /wp-includes/version.php HTTP/1.1" 404 "GET /wp-includes/functions.php HTTP/1.1" 404 "GET /wp-includes/class-wp.php HTTP/1.1" 404 "GET /wp-includes/option.php HTTP/1.1" 404 "GET /wp-includes/post.php HTTP/1.1" 404 "GET /wp-includes/user.php HTTP/1.1" 404 "GET /wp-json/ HTTP/1.1" 404 "GET /wp-json/wp/v2/ H show less	Web App Attack
🇺🇸 kosada.com	2026-08-21 07:01:46 (16 hours ago)	Web vulnerability probing: /wp-includes/version.php (bogus vhost/SNI)	Web App Attack
🇦🇺 Block Rockin' Beats	2026-08-21 06:22:04 (16 hours ago)	Scanning for exploitable scripts	Hacking Web App Attack
🇫🇷 LRob	2026-08-21 05:28:42 (17 hours ago)	Malicious web request: probing for secrets, traversal or a known exploit path \| method: GET \| path: ... show more Malicious web request: probing for secrets, traversal or a known exploit path \| method: GET \| path: / \| query: author=1 show less	Hacking Web App Attack
🇬🇧 consul.to	2026-08-21 05:14:48 (17 hours ago)	Web attack/malicious scanning detected	Web App Attack
Anonymous	2026-08-21 04:39:53 (18 hours ago)	[Drupal AbuseIPDB module] Request path is blacklisted. /wp-admin	Web App Attack
🇩🇪 on-com	2026-08-21 03:43:31 (19 hours ago)	URL scan	Brute-Force Web App Attack

Showing 1 to 15 of 323 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.180.246.104

🇧🇷 187.8.120.90

🇺🇸 45.194.67.29

🇺🇸 172.253.213.19

🇨🇳 124.222.61.85

🇨🇻 102.213.207.76

🇸🇪 56.228.14.237

🇧🇷 18.230.117.170

🇨🇦 4.204.200.136

🇺🇸 3.15.1.40

🇺🇸 216.180.246.149

🇭🇰 199.45.155.57

🇸🇪 193.189.100.201

🇷🇴 193.46.255.86

🇹🇷 176.235.99.16

🇦🇷 153.67.13.155

🇺🇿 95.130.227.14

🇲🇩 94.176.78.239

🇷🇴 92.118.39.233

🇺🇸 74.114.29.26