JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 37.139.53.129

37.139.53.129 was found in our database!

This IP was reported 301 times. Confidence of Abuse is 82%: ?

82%

ISP	Petersburg Internet Network ltd.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS34665
Domain Name	pindc.ru
Country	🇷🇺 Russian Federation
City	Saint Petersburg, St.-Petersburg

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 37.139.53.129

Whois 37.139.53.129

IP Abuse Reports for 37.139.53.129:

This IP address has been reported a total of 301 times from 102 distinct sources. 37.139.53.129 was first reported on March 23rd 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 taivas.nl	2026-08-21 04:33:08 (2 days ago)	Many_bad_calls	Web App Attack
🇧🇪 taivas.nl	2026-08-20 05:32:13 (3 days ago)	Bad_requests	Bad Web Bot
🇦🇹 penguin-solutions.at	2026-08-20 01:55:34 (4 days ago)	Excessive 403/404 errors ...	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-08-20 01:26:35 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 37.139.53.129 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 37.139.53.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 19 21:26:20.949765 2026] [security2:error] [pid 12703:tid 12703] [client 37.139.53.129:64129] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "monogay.org"] [uri "/%23wp-config.php%23"] [unique_id "aoZXvBvmBZpGAFHigwQP_wAAAIw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-19 22:09:52 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 37.139.53.129 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 37.139.53.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 19 18:09:34.158382 2026] [security2:error] [pid 21453:tid 21459] [client 37.139.53.129:54413] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "leaderoftheopposition.com"] [uri "/%23wp-config.php%23"] [unique_id "aoYpnpl9SPCUysmlCWakiAAAAUM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-08-19 21:56:34 (4 days ago)	Fail2Ban: ModSecurity detected a web application attack.	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-19 21:31:28 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 37.139.53.129 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 37.139.53.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 19 17:31:10.915583 2026] [security2:error] [pid 4968:tid 4968] [client 37.139.53.129:51998] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "konahawaiirealty.com"] [uri "/%23wp-config.php%23"] [unique_id "aoYgntJTRz_I-yeVPF7WrgAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-08-19 17:43:31 (4 days ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TAY	2026-08-19 14:47:40 (4 days ago)	37.139.53.129 - - [19/Aug/2026:22:47:33 +0800] "GET /wp-config.php.java HTTP/1.1" 404 51916 "-" "Moz ... show more 37.139.53.129 - - [19/Aug/2026:22:47:33 +0800] "GET /wp-config.php.java HTTP/1.1" 404 51916 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0" 37.139.53.129 - - [19/Aug/2026:22:47:34 +0800] "GET /wp-config.php.local HTTP/1.1" 404 46818 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0" 37.139.53.129 - - [19/Aug/2026:22:47:35 +0800] "GET /wp-config.php.log HTTP/1.1" 404 46814 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0" 37.139.53.129 - - [19/Aug/2026:22:47:37 +0800] "GET /wp-config.php.lst HTTP/1.1" 404 46814 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0" 37.139.53.129 - - [19/Aug/2026:22:47:38 +0800] "GET /wp-config.php.maj HTTP/1.1" 404 46814 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0" 37.139.53.129 - - [19/Aug/2026:22:47:40 +0800] "GET /wp-config.php.map HTTP/1.1" 404 46814 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) ... show less	Brute-Force
🇺🇸 TAY	2026-08-19 13:47:28 (4 days ago)	37.139.53.129 - - [19/Aug/2026:21:46:57 +0800] "GET /%23wp-config.php%23 HTTP/1.1" 404 51924 "-" "Mo ... show more 37.139.53.129 - - [19/Aug/2026:21:46:57 +0800] "GET /%23wp-config.php%23 HTTP/1.1" 404 51924 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0" 37.139.53.129 - - [19/Aug/2026:21:47:20 +0800] "GET /.wp-config.php.swp HTTP/1.1" 404 46820 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0" 37.139.53.129 - - [19/Aug/2026:21:47:22 +0800] "GET /2018/wp-config.php HTTP/1.1" 404 46818 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0" 37.139.53.129 - - [19/Aug/2026:21:47:23 +0800] "GET /2019/wp-config.php HTTP/1.1" 404 46818 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0" 37.139.53.129 - - [19/Aug/2026:21:47:25 +0800] "GET /2020/wp-config.php HTTP/1.1" 404 46818 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0" 37.139.53.129 - - [19/Aug/2026:21:47:27 +0800] "GET /2021/wp-config.php HTTP/1.1" 404 46818 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45 ... show less	Brute-Force
🇳🇱 Alboweb B.V.	2026-08-19 12:11:03 (4 days ago)	WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail	Web App Attack
🇮🇹 ciccio diddo	2026-08-18 22:53:31 (5 days ago)	High Burst multiple 40X port:Tcp/80,443	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-08-18 22:41:49 (5 days ago)	(mod_security) mod_security (id:210492) triggered by 37.139.53.129 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 37.139.53.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 18 18:41:33.984429 2026] [security2:error] [pid 15655:tid 15655] [client 37.139.53.129:51382] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bigislandhawaiirealestate.com"] [uri "/%23wp-config.php%23"] [unique_id "aoTfnfBX2q0-n7pdm41X4gAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-08-18 21:59:45 (5 days ago)	Excessive multi-domain requests	Brute-Force
🇮🇱 spd.co.il	2026-08-16 12:02:05 (1 week ago)	Web application attack detected	Hacking Web App Attack

Showing 1 to 15 of 301 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇪🇬 196.221.207.125

🇺🇸 195.184.76.158

🇺🇸 195.184.76.152

🇮🇳 182.70.255.242

🇫🇷 85.217.140.11

🇺🇸 65.49.1.222

🇺🇸 34.234.96.245

🇺🇸 195.184.76.139

🇺🇸 195.184.76.136

🇳🇱 195.178.110.26

🇧🇷 191.178.192.130

🇦🇷 186.61.52.20

🇸🇪 185.102.213.235

🇳🇱 160.119.71.182

🇺🇸 147.185.132.196

🇯🇵 113.158.205.225

🇿🇦 102.219.170.72

🇺🇸 91.230.168.156

🇺🇸 91.230.168.155

🇳🇱 91.92.42.5