JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 139.162.121.137

139.162.121.137 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 27%: ?

27%

ISP	139.162.0.0/16
Usage Type	Data Center/Web Hosting/Transit
ASN	AS63949
Hostname(s)	139-162-121-137.ip.linodeusercontent.com
Domain Name	linode.com
Country	🇯🇵 Japan
City	Tokyo, Tokyo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 139.162.121.137

Whois 139.162.121.137

IP Abuse Reports for 139.162.121.137:

This IP address has been reported a total of 10 times from 10 distinct sources. 139.162.121.137 was first reported on August 6th 2026, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 breubit	2026-08-09 20:32:32 (1 month ago)	139.162.121.137 - - [09/Aug/2026:22:32:31 +0200] "GET /.git/config.user HTTP/1.1" 404 455 "-" "Mozil ... show more 139.162.121.137 - - [09/Aug/2026:22:32:31 +0200] "GET /.git/config.user HTTP/1.1" 404 455 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" ... show less	Web App Attack
🇨🇳 PrivateLiu	2026-08-09 09:57:02 (1 month ago)	[AbuseIPDB auto-report] Rules: Rule1, Rule2, Rule5. Region: non-CN. Config/sensitive path probing: a ... show more [AbuseIPDB auto-report] Rules: Rule1, Rule2, Rule5. Region: non-CN. Config/sensitive path probing: accessed .env/.config/admin/.git paths returning 4xx/444; Broad path scanning: 48 x 404/403 responses in short window indicating automated scanner; Known vulnerability path probing: targeting CMS (WordPress/Drupal), phpMyAdmin, actuator endpoints, or other known vulnerable paths. Sample paths: /app, /api/s3/, /samconfig.toml, /docker-compose.prod.yaml, /database.sql, /.env.test, /outputs.tf, /cloudformation.json, /gitconfig, /Dockerfile.prod, /config.json, /. Statuses: 200, 301, 404, 444. Methods: GET. UA: N/A show less	Port Scan Bad Web Bot Web App Attack
🇮🇹 mgarofano80	2026-08-09 05:46:10 (1 month ago)		Brute-Force Web App Attack
🇫🇷 Campus France	2026-08-08 14:22:20 (1 month ago)	[Sat Aug 08 16:21:56.749130 2026] [php:error] [pid 3805855] [client 139.162.121.137:48270] script '/ ... show more [Sat Aug 08 16:21:56.749130 2026] [php:error] [pid 3805855] [client 139.162.121.137:48270] script '/var/www/html/aws_config.php' not found or unable to stat [Sat Aug 08 16:21:59.273143 2026] [php:error] [pid 3805527] [client 139.162.121.137:48430] script '/var/www/html/config.php' not found or unable to stat [Sat Aug 08 16:21:59.822050 2026] [php:error] [pid 3805856] [client 139.162.121.137:48462] script '/var/www/html/local.php' not found or unable to stat [Sat Aug 08 16:22:05.635985 2026] [php:error] [pid 3805924] [client 139.162.121.137:48858] script '/var/www/html/secrets.php' not found or unable to stat [Sat Aug 08 16:22:20.257349 2026] [php:error] [pid 3805924] [client 139.162.121.137:44188] script '/var/www/html/wp-config.php' not found or unable to stat ... show less	Brute-Force Web App Attack
🇮🇹 CoreTech srl	2026-08-07 16:19:16 (1 month ago)	cloudlinux2 fail2ban: 2026-08-07 18:14:56,837 fail2ban.filter [1467]: INFO [plesk-wordpre ... show more cloudlinux2 fail2ban: 2026-08-07 18:14:56,837 fail2ban.filter [1467]: INFO [plesk-wordpress] Found 45.131.193.11 - 2026-08-07 18:14:56cloudlinux2 fail2ban: 2026-08-07 18:14:56,871 fail2ban.filter [1467]: INFO [plesk-wordpress] Found 45.131.193.4 - 2026-08-07 18:14:56cloudlinux2 fail2ban: 2026-08-07 18:15:55,919 fail2ban.filter [1467]: INFO [plesk-wordpress] Found 45.131.195.122 - 2026-08-07 18:15:55cloudlinux2 fail2ban: 2026-08-07 18:15:51,641 fail2ban.filter [1467]: INFO [plesk-wordpress] Found 209.87.169.130 - 2026-08-07 18:15:51cloudlinux2 fail2ban: 2026-08-07 18:15:51,589 fail2ban.filter [1467]: INFO [plesk-wordpress] Found 45.131.195.122 - 2026-08-07 18:15:51cloudlinux2 fail2ban: 2026-08-07 18:15:55,924 fail2ban.filter [1467]: INFO [plesk-wordpress] Found 209.87.169.130 - 2026-08-07 18:15:55cloudlinux2 fail2ban: 2026-08-07 18:17:05,858 fail2ban.filter [1467]: INFO [plesk-wordpress] Found 185.223.152.192 - 2026-08-07 18:17:05clou show less	Web App Attack
🇩🇪 akasolutions.de	2026-08-07 00:41:09 (1 month ago)	(mod_security) mod_security triggered on hostname [redacted] 139.162.121.137 (JP/Japan/139-162-121-1 ... show more (mod_security) mod_security triggered on hostname [redacted] 139.162.121.137 (JP/Japan/139-162-121-137.ip.linodeusercontent.com) show less	SQL Injection
🇩🇪 netclix.gr	2026-08-06 19:55:14 (1 month ago)	(mod_security) mod_security triggered on hostname [redacted] 139.162.121.137 (JP/Japan/139-162-121-1 ... show more (mod_security) mod_security triggered on hostname [redacted] 139.162.121.137 (JP/Japan/139-162-121-137.ip.linodeusercontent.com): (CF_ENABLE) show less	SQL Injection
🇩🇪 raph	2026-08-06 17:01:31 (1 month ago)	[DOT FILES] crawler .env, .git, .config, etc.	Bad Web Bot Web App Attack
🇸🇪 vaia.cloud	2026-08-06 16:25:02 (1 month ago)	crowdsecurity/http-probing	Brute-Force Web App Attack
🇮🇹 VHosting	2026-08-06 16:20:02 (1 month ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 136.66.190.233

🇫🇷 85.217.140.46

🇮🇪 18.201.159.214

🇫🇷 2001:41d0:404:200::5c39

🇮🇩 172.232.232.179

🇨🇦 167.114.139.46

🇵🇰 103.83.23.169

🇫🇷 91.196.152.122

🇬🇧 2602:f71d::20

🇵🇰 203.128.10.163

🇳🇱 195.178.110.227

🇨🇳 121.18.49.14

🇨🇳 120.87.99.202

🇮🇳 103.139.75.2

🇧🇷 45.5.39.187

🇺🇸 34.20.235.158

🇨🇦 34.19.227.47

🇮🇳 216.10.245.73

🇺🇿 213.230.78.73

🇪🇸 172.233.117.214