JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 139.177.229.210

139.177.229.210 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 0%: ?

ISP	Bytedance Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS31898
Domain Name	bytedance.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 139.177.229.210

Whois 139.177.229.210

IP Abuse Reports for 139.177.229.210:

This IP address has been reported a total of 14 times from 14 distinct sources. 139.177.229.210 was first reported on December 19th 2025, and the most recent report was 6 months ago.

Old Reports: The most recent abuse report for this IP address is from 6 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇰 EVISION	2025-12-23 13:56:54 (6 months ago)	Automatic report from EV firewall log. https://github.com/Ragnarocek/Windows_FW_AbuseIPDB_Reporti ... show more Automatic report from EV firewall log. https://github.com/Ragnarocek/Windows_FW_AbuseIPDB_Reporting show less	Port Scan Hacking Brute-Force
🇺🇸 island-freaks.com	2025-12-22 19:15:07 (6 months ago)	Attack Type: WordPress Exploit Bot attempt on /photo/113997/ \| DNS 139.177.229.210 \| Agent: Mozilla/ ... show more Attack Type: WordPress Exploit Bot attempt on /photo/113997/ \| DNS 139.177.229.210 \| Agent: Mozilla/5.0 (X11; Linux i686; rv:114.0) Gecko/20100101 Firefox/114.0 show less	Port Scan Hacking Bad Web Bot Exploited Host Web App Attack
🇵🇱 sefinek.net	2025-12-22 16:08:14 (6 months ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (X11; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Vivaldi/5.3.2679.68 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇪 Packets-Decreaser.NET	2025-12-22 13:16:44 (6 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇩🇪 LRob.fr	2025-12-22 09:08:11 (6 months ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack
🇨🇿 lp	2025-12-22 08:55:21 (6 months ago)	Email account brute force: 1 attempts were recorded from 139.177.229.210 2025-12-22T09:08:15+01:00 w ... show more Email account brute force: 1 attempts were recorded from 139.177.229.210 2025-12-22T09:08:15+01:00 warning: unknown[139.177.229.210]: SASL PLAIN authentication failed: authentication failure, [email protected] show less	Brute-Force
🇨🇭 Kepler-1649c	2025-12-21 16:44:02 (6 months ago)	SMTP Authentication errors	Hacking Brute-Force
🇺🇸 jkhorvath.com	2025-12-21 08:01:25 (6 months ago)	Request for URL https:/m.facebook.com/	Phishing Brute-Force Web App Attack
🇵🇱 IROK	2025-12-21 01:49:21 (6 months ago)	Firewall Blocked - Unauthorized Port Scanning ...	Port Scan
🇺🇸 TPI-Abuse	2025-12-21 01:40:22 (6 months ago)	(mod_security) mod_security (id:210831) triggered by 139.177.229.210 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210831) triggered by 139.177.229.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 20 20:40:19.658218 2025] [security2:error] [pid 3400:tid 3400] [client 139.177.229.210:13662] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|backstore.com\|F\|4"] [data "a href="] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "backstore.com"] [uri "/"] [unique_id "aUdQA_BhAoVNqMafSYeQWAAAAAE"], referer: http://www.wikidot.com/user:info/azaiahronson show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 Modules	2025-12-21 01:03:02 (6 months ago)	Open proxy http://139.177.229.210:8080 (RT:1376ms,Loc:United States,ASN:AS31898)	Open Proxy
🇹🇭 thaizone.com	2025-12-20 23:32:45 (6 months ago)	Password guessing attack (SM11) #1	Email Spam Brute-Force
🇧🇷 KingHost	2025-12-20 07:31:15 (6 months ago)		Brute-Force
🇮🇹 VHosting	2025-12-19 14:14:36 (6 months ago)	Detected mail brute force attack from 4 different servers	Brute-Force

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 205.210.31.94

🇺🇸 199.103.16.28

🇺🇸 172.236.228.39

🇺🇸 147.185.132.144

🇨🇳 124.222.98.92

🇨🇳 101.227.203.162

🇺🇸 66.132.172.127

🇺🇸 44.64.7.109

🇧🇷 205.210.31.196

🇦🇷 200.123.248.97

🇺🇸 195.184.76.38

🇬🇧 195.140.214.19

🇧🇷 179.51.153.37

🇺🇸 159.203.83.195

🇺🇸 135.134.182.155

🇨🇳 124.160.173.22

🇨🇳 124.88.113.141

🇨🇳 120.208.18.147

🇮🇳 117.242.47.146

🇫🇷 91.231.89.221