JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 139.212.249.138

139.212.249.138 was found in our database!

This IP was reported 24 times. Confidence of Abuse is 60%: ?

60%

ISP	China Unicom Jilin province network
Usage Type	Fixed Line ISP
ASN	AS4837
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Changchun, Jilin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 139.212.249.138

Whois 139.212.249.138

IP Abuse Reports for 139.212.249.138:

This IP address has been reported a total of 24 times from 12 distinct sources. 139.212.249.138 was first reported on September 19th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 yitzhaq	2026-10-15 23:39:00 (1 day ago)	139.212.249.138 - - [16/Oct/2026:01:38:48 +0200] "GET /wp-content/plugins/jonradio-private-site/read ... show more 139.212.249.138 - - [16/Oct/2026:01:38:48 +0200] "GET /wp-content/plugins/jonradio-private-site/readme.txt HTTP/1.1" 404 48359 "http://[site]/wp-content/plugins/jonradio-private-site/readme.txt" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.97 Safari/537.11" 139.212.249.138 - - [16/Oct/2026:01:38:50 +0200] "GET /wp-content/plugins/ad-invalid-click-protector/readme.txt HTTP/1.1" 404 44383 "http://[site]/wp-content/plugins/ad-invalid-click-protector/readme.txt" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.97 Safari/537.11" 139.212.249.138 - - [16/Oct/2026:01:38:50 +0200] "GET /wp-content/plugins/add-admin-css/readme.txt HTTP/1.1" 404 44383 "http://[site]/wp-content/plugins/add-admin-css/readme.txt" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.97 Safari/537.11" 139.212.249.138 - - [16/Oct/2026:01:38:51 +0200] "GET /wp-content/plugins/simple-members show less	Web App Attack Hacking
Anonymous	2026-10-15 21:46:12 (1 day ago)	[ns3.backorder.gr] httpd-suspicious-path: logs=/var/log/httpd/access_log; samples=/wp-content/plugin ... show more [ns3.backorder.gr] httpd-suspicious-path: logs=/var/log/httpd/access_log; samples=/wp-content/plugins/html5-audio-player/readme.txt \| /wp-content/plugins/social-photo-feed-widget/readme.txt show less	Hacking Web App Attack
🇬🇧 Comberton	2026-10-12 20:23:02 (4 days ago)	Ban via F2B wordfence	Brute-Force Web App Attack
🇩🇪 ghostwarriors	2026-10-09 18:50:11 (1 week ago)	Attempts against non-existent wp-login	Brute-Force Web App Attack
🇩🇪 yitzhaq	2026-10-09 18:40:29 (1 week ago)	139.212.249.138 - - [09/Oct/2026:20:40:26 +0200] "GET /1234.php HTTP/1.1" 404 4421 "http://[site]/12 ... show more 139.212.249.138 - - [09/Oct/2026:20:40:26 +0200] "GET /1234.php HTTP/1.1" 404 4421 "http://[site]/1234.php" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.97 Safari/537.11" 139.212.249.138 - - [09/Oct/2026:20:40:27 +0200] "GET /1.php HTTP/1.1" 404 584 "http://[site]/1.php" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.97 Safari/537.11" 139.212.249.138 - - [09/Oct/2026:20:40:27 +0200] "GET /a.php HTTP/1.1" 404 584 "http://[site]/a.php" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.97 Safari/537.11" 139.212.249.138 - - [09/Oct/2026:20:40:27 +0200] "GET /dd.php HTTP/1.1" 404 584 "http://[site]/dd.php" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.97 Safari/537.11" show less	Web App Attack Hacking
🇺🇸 IndigoRidge	2026-10-08 00:04:31 (1 week ago)	139.212.249.138 - - [07/Oct/2026:20:04:22 -0400] "GET /wp-content/plugins/social-networks-auto-poste ... show more 139.212.249.138 - - [07/Oct/2026:20:04:22 -0400] "GET /wp-content/plugins/social-networks-auto-poster-facebook-twitter-g/readme.txt HTTP/1.1" 404 58863 "http://www.lctusa.com/wp-content/plugins/social-networks-auto-poster-facebook-twitter-g/readme.txt" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.97 Safari/537.11" 139.212.249.138 - - [07/Oct/2026:20:04:23 -0400] "GET /wp-content/plugins/woo-product-slider/readme.txt HTTP/1.1" 404 58835 "http://www.lctusa.com/wp-content/plugins/woo-product-slider/readme.txt" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.97 Safari/537.11" 139.212.249.138 - - [07/Oct/2026:20:04:24 -0400] "GET /wp-content/plugins/woocommerce-abandoned-cart/readme.txt HTTP/1.1" 404 58839 "http://www.lctusa.com/wp-content/plugins/woocommerce-abandoned-cart/readme.txt" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.97 Safari/537.11" 139. ... show less	Web App Attack
Anonymous	2026-10-07 18:42:45 (1 week ago)	IP matched detection query 20 more in short time bad rqs.	Brute-Force Web App Attack Hacking
🇬🇧 Comberton	2026-10-07 04:30:10 (1 week ago)	Ban via by F2B apache-wordfence jail	Brute-Force
Anonymous	2026-10-07 01:02:55 (1 week ago)	Web application attack detected.	Web App Attack
🇲🇽 octageeks.com	2026-10-06 04:12:38 (1 week ago)	Wordpress malicious attack:[octablocked]	Web App Attack
🇩🇪 LRob	2026-10-05 05:56:15 (1 week ago)	Repeated forbidden requests \| method: GET \| path: /wp-content/plugins/wp-google-maps/readme.txt \| ua ... show more Repeated forbidden requests \| method: GET \| path: /wp-content/plugins/wp-google-maps/readme.txt \| ua: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.97 Safari/537.11 \| 2026-10-05 05:56 UTC show less	Web App Attack
🇳🇱 WeCloudit-Anti-Abuse	2026-10-02 13:43:31 (2 weeks ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing	Web App Attack Hacking
🇺🇸 IndigoRidge	2026-09-26 23:12:31 (2 weeks ago)	139.212.249.138 - - [26/Sep/2026:19:12:27 -0400] "GET /wp-content/plugins/automatic-domain-changer/r ... show more 139.212.249.138 - - [26/Sep/2026:19:12:27 -0400] "GET /wp-content/plugins/automatic-domain-changer/readme.txt HTTP/1.1" 404 32955 "https://thecarolinalens.com/wp-content/plugins/automatic-domain-changer/readme.txt" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.97 Safari/537.11" 139.212.249.138 - - [26/Sep/2026:19:12:28 -0400] "GET /wp-content/plugins/custom-css-and-javascript/readme.txt HTTP/1.1" 404 32955 "https://thecarolinalens.com/wp-content/plugins/custom-css-and-javascript/readme.txt" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.97 Safari/537.11" 139.212.249.138 - - [26/Sep/2026:19:12:29 -0400] "GET /wp-content/plugins/custom-login/readme.txt HTTP/1.1" 404 32955 "https://thecarolinalens.com/wp-content/plugins/custom-login/readme.txt" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.97 Safari/537.11" 139.212.249.138 - - [26/Sep/2026:19:12:30 -0 ... show less	Web App Attack
🇩🇪 LRob	2026-09-26 18:41:49 (2 weeks ago)	This address keeps sending requests that the sites' own web application firewall refuses — attack pa ... show more This address keeps sending requests that the sites' own web application firewall refuses — attack payloads, forbidden paths — again and again. One refusal is a mistake; a series is an attack tool at work. Blocked; please check the machine behind it. \| method: GET \| path: /wp-content/plugins/wp-hide-security-enhancer/readme.txt (+1 more) \| 2026-09-26 18:41 UTC show less	Web App Attack Hacking
🇬🇧 Comberton	2026-09-25 19:24:10 (3 weeks ago)	Ban via by F2B apache-wordfence jail	Brute-Force

Showing 1 to 15 of 24 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 195.184.76.242

🇺🇸 66.132.186.213

🇫🇷 31.24.80.50

🇨🇳 218.203.113.131

🇪🇨 181.188.237.220

🇰🇷 175.45.204.121

🇺🇸 147.185.132.177

🇰🇷 121.188.252.174

🇱🇹 62.60.130.253

🇳🇱 31.56.209.149

🇬🇧 5.226.140.126

🇺🇸 2001:470:2cc:1::21d

🇺🇸 173.244.60.135

🇺🇸 172.234.192.12

🇺🇸 135.233.97.229

🇮🇳 103.178.75.141

🇺🇸 85.254.76.85

🇸🇬 85.203.23.190

🇧🇷 45.229.91.2

🇧🇪 35.195.98.132