JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 139.180.186.29

139.180.186.29

Recent Activity

34 reports found in our database

100% ▲ ▲ ▲ Critical

Abuse confidence score ?

ISP

The Constant Company, LLC

Usage Type

Data Center/Web Hosting/Transit

ASN

AS20473

Hostname(s)

139.180.186.29.vultrusercontent.com

Domain Name

constant.com

Country

🇸🇬 Singapore

City

Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Top Reporter Countries (Last 60 Days)

Example preview

Report Categories (Last 60 Days)

Example preview

Reports Activity

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 139.180.186.29:

This IP address has been reported a total of 34 times from 29 distinct sources. 139.180.186.29 was first reported on July 2nd 2026, and the most recent report was 1 hour ago. In the last 60 days, the top reporter locations were: United States of America with 9 reports; Germany with 3 reports; Belgium with 2 reports. The most common categories in these recent reports were: Web App Attack 21 times; Brute-Force 14 times; Bad Web Bot 10 times; Hacking 5 times; SSH 1 time; Other 5 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Site.eu	2026-09-12 00:08:46 (1 hour ago)	Excessive multi-domain requests	Brute-Force
🇮🇳 evicky2002	2026-09-12 00:05:18 (1 hour ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
Anonymous	2026-09-12 00:02:04 (1 hour ago)	139.180.186.29 arduino.ua [12/Sep/2026:03:02:03 +0300] "GET /api/session/properties HTTP/1.1" 404 14 ... show more 139.180.186.29 arduino.ua [12/Sep/2026:03:02:03 +0300] "GET /api/session/properties HTTP/1.1" 404 146 "-" "metabase-cve-2026-72898-detect/1.0 (benign detection probes only)" 0.000 2713 ... show less	Hacking SQL Injection Web App Attack
🇺🇸 TPI-Abuse	2026-09-11 23:22:31 (1 hour ago)	(mod_security) mod_security (id:210492) triggered by 139.180.186.29 (139.180.186.29.vultrusercontent ... show more (mod_security) mod_security (id:210492) triggered by 139.180.186.29 (139.180.186.29.vultrusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 11 19:22:27.291352 2026] [security2:error] [pid 8390:tid 8390] [client 139.180.186.29:48300] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jonleefamily.brushmileage.org"] [uri "/wp-config.php.bak"] [unique_id "aqSNM-liOUhGO2eikm-f9gAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-11 22:51:04 (2 hours ago)	Web App Attack, Hacking	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-09-11 22:05:41 (3 hours ago)	(mod_security) mod_security (id:210492) triggered by 139.180.186.29 (139.180.186.29.vultrusercontent ... show more (mod_security) mod_security (id:210492) triggered by 139.180.186.29 (139.180.186.29.vultrusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 11 18:05:35.375147 2026] [security2:error] [pid 22895:tid 22895] [client 139.180.186.29:51904] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.ultratecnologia.com.mx"] [uri "/wp-config.php.bak"] [unique_id "aqR7Lz4lOJryNBlwRoxJTgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Vegascosmetics	2026-09-11 20:22:33 (4 hours ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after first-seen suspicion / AbuseIPDB repu ... show more Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after first-seen suspicion / AbuseIPDB reputation policy (no URL signature). Evidence: Suspicion-Ban (Score 83>=65, Abuse 97, NonEU, first-seen) show less	Hacking Exploited Host Web App Attack
Anonymous	2026-09-11 20:01:48 (5 hours ago)	Web application attack detected.	Web App Attack
🇭🇺 bcsaba	2026-09-11 19:40:00 (5 hours ago)	Looking for wp-config backup 139.180.186.29 - - [11/Sep/2026:21:39:59 +0200] "GET /wp-config.php~ HT ... show more Looking for wp-config backup 139.180.186.29 - - [11/Sep/2026:21:39:59 +0200] "GET /wp-config.php~ HTTP/1.1" 403 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" show less	Web App Attack
🇳🇱 JaRoNL	2026-09-11 15:42:46 (9 hours ago)	139.180.186.29 - - \[08/Sep/2026:04:55:17 +0200\] "GET /wp-config.php.bak HTTP/1.1" 301 5821 "-" "Mo ... show more 139.180.186.29 - - \[08/Sep/2026:04:55:17 +0200\] "GET /wp-config.php.bak HTTP/1.1" 301 5821 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/126.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
Anonymous	2026-09-10 10:03:01 (1 day ago)	"Packet Flood; Triggered WAF; Persistent 404 Attempts"	DDoS Attack
🇫🇷 Octopuce	2026-09-08 12:53:01 (3 days ago)	Aggressive web search of vulnerable pages: /.env /phpinfo.php /info.php /test.php /backup.sql /backu ... show more Aggressive web search of vulnerable pages: /.env /phpinfo.php /info.php /test.php /backup.sql /backup.sql.gz /backup.zip ... show less	Web App Attack
Anonymous	2026-09-08 12:52:12 (3 days ago)	ITDATINE WEBEXPLOIT 139.180.186.29 (139.180.186.29.vultrusercontent.com)	Web App Attack
🇺🇸 TPI-Abuse	2026-09-08 12:27:06 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 139.180.186.29 (139.180.186.29.vultrusercontent ... show more (mod_security) mod_security (id:210492) triggered by 139.180.186.29 (139.180.186.29.vultrusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 08:27:02.555688 2026] [security2:error] [pid 28866:tid 28866] [client 139.180.186.29:55700] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.exhaustthelimits.org"] [uri "/wp-config.php.bak"] [unique_id "ap__Fpfc8vKYr6HlbXIQkgAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇲🇾 Rizzy	2026-09-08 11:59:54 (3 days ago)	Multiple WAF Violations	Brute-Force Web App Attack

Showing 1 to 15 of 34 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 2620:171:57:f003:9999::244

🇨🇳 220.182.14.60

🇬🇧 217.146.80.98

🇺🇸 216.25.89.144

🇳🇱 195.172.1.183

🇮🇳 171.61.174.218

🇧🇷 138.97.24.215

🇮🇳 122.15.129.26

🇮🇩 103.90.25.52

🇫🇷 85.217.140.44

🇱🇹 62.60.130.201

🇨🇦 54.39.203.235

🇺🇸 47.251.246.67

🇬🇧 35.203.210.179

🇹🇼 34.81.123.28

🇺🇸 216.26.231.63

🇬🇧 195.206.182.207

🇰🇿 195.49.215.183

🇧🇷 187.28.1.110

🇩🇪 142.251.127.139