JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 139.84.145.198

139.84.145.198 was found in our database!

This IP was reported 72 times. Confidence of Abuse is 100%: ?

100%

ISP	The Constant Company, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS20473
Hostname(s)	139.84.145.198.vultrusercontent.com
Domain Name	constant.com
Country	🇮🇳 India
City	Bashettihalli, Karnataka

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 139.84.145.198

Whois 139.84.145.198

IP Abuse Reports for 139.84.145.198:

This IP address has been reported a total of 72 times from 48 distinct sources. 139.84.145.198 was first reported on June 10th 2026, and the most recent report was 7 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Fasetech	2026-06-28 09:12:20 (7 hours ago)	SecLedge detected suspicious activity. Score: 353.16. Sensor: T-Pot.	Brute-Force
Anonymous	2026-06-27 22:30:03 (18 hours ago)	Triggered: repeated knocking on closed ports.	Port Scan
🇫🇷 ISPLtd	2026-06-27 21:47:14 (18 hours ago)	Jun 27 18:26:26 139.84.145.198 TCP SPT=54765 DPT=8000 SYN Jun 27 18:27:52 139.84.145.198 TCP SPT=547 ... show more Jun 27 18:26:26 139.84.145.198 TCP SPT=54765 DPT=8000 SYN Jun 27 18:27:52 139.84.145.198 TCP SPT=54765 DPT=3000 SYN Jun 27 18:47:14 139.84.145.198 TCP SPT=54765 DPT=4000 ... show less	Port Scan
🇩🇪 ISPLtd	2026-06-27 21:27:27 (19 hours ago)	Jun 27 18:18:23 139.84.145.198 TCP SPT=54765 DPT=8888 SYN Jun 27 18:22:48 139.84.145.198 TCP SPT=547 ... show more Jun 27 18:18:23 139.84.145.198 TCP SPT=54765 DPT=8888 SYN Jun 27 18:22:48 139.84.145.198 TCP SPT=54765 DPT=7001 SYN Jun 27 18:27:27 139.84.145.198 TCP SPT=54765 DPT=4000 ... show less	Port Scan
🇫🇷 sthoyer.de	2026-06-27 21:17:59 (19 hours ago)	Jun 27 23:17:03 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd: ... show more Jun 27 23:17:03 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=139.84.145.198 DST=173.212.223.67 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=49192 PROTO=TCP SPT=54765 DPT=8983 WINDOW=1024 RES=0x00 SYN URGP=0 Jun 27 23:17:58 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=139.84.145.198 DST=173.212.223.67 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=37321 PROTO=TCP SPT=54765 DPT=3000 WINDOW=1024 RES=0x00 SYN URGP=0 Jun 27 23:17:58 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=139.84.145.198 DST=173.212.223.67 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=37321 PROTO=TCP SPT=54765 DPT=3000 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 sefinek.net	2026-06-27 16:47:25 (23 hours ago)	Blocked by UFW on NY01 [3000/tcp] \| SPT: 58762 \| TTL: 234 \| LEN: 40 \| TOS: 0x08 • Reported by: githu ... show more Blocked by UFW on NY01 [3000/tcp] \| SPT: 58762 \| TTL: 234 \| LEN: 40 \| TOS: 0x08 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 Victor López	2026-06-27 16:08:28 (1 day ago)	82.197.66.178 139.84.145.198 - - [27/Jun/2026:11:08:28 -0500] "GET /wp-config.php HTTP/1.1" 200 31 " ... show more 82.197.66.178 139.84.145.198 - - [27/Jun/2026:11:08:28 -0500] "GET /wp-config.php HTTP/1.1" 200 31 "-" "Mozilla/5.0 (compatible)" 82.197.66.178 139.84.145.198 - - [27/Jun/2026:11:08:28 -0500] "GET /wp-config.php.bak HTTP/1.1" 404 6050 "-" "Mozilla/5.0 (compatible)" 82.197.66.178 139.84.145.198 - - [27/Jun/2026:11:08:28 -0500] "GET /wp-config.php~ HTTP/1.1" 404 6050 "-" "Mozilla/5.0 (compatible)" ... show less	Hacking Web App Attack
Anonymous	2026-06-27 14:07:12 (1 day ago)	UFW blocked 3 unsolicited TCP packet(s) in last 65 minutes ago. Destination port(s): 80,5000,7001. S ... show more UFW blocked 3 unsolicited TCP packet(s) in last 65 minutes ago. Destination port(s): 80,5000,7001. Server has no public-facing services; all blocks are uninvited. show less	Port Scan
Anonymous	2026-06-27 13:47:20 (1 day ago)	fail2ban:piguard2:14,18	Port Scan Brute-Force
🇺🇸 ISPLtd	2026-06-27 13:40:02 (1 day ago)	Jun 27 07:37:14 139.84.145.198 TCP SPT=47434 DPT=4000 SYN Jun 27 07:39:21 139.84.145.198 TCP SPT=474 ... show more Jun 27 07:37:14 139.84.145.198 TCP SPT=47434 DPT=4000 SYN Jun 27 07:39:21 139.84.145.198 TCP SPT=47434 DPT=9090 SYN Jun 27 07:40:01 139.84.145.198 TCP SPT=47434 DPT=5000 ... show less	Port Scan
🇫🇷 omartin	2026-06-27 11:50:08 (1 day ago)	HTTP Vulnerability Scanning / Bot Probing	Hacking Brute-Force Web App Attack
🇫🇷 Dechavanne	2026-06-27 11:00:08 (1 day ago)	WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail	Web App Attack
🇫🇷 dwmp	2026-06-27 09:36:23 (1 day ago)	[27/Jun/2026:11:36:05.238904 +0200] aj@ZhVGDjR17SZrTBnjBUgAAAIo 139.84.145.198 45038 38.242.227.117 ... show more [27/Jun/2026:11:36:05.238904 +0200] aj@ZhVGDjR17SZrTBnjBUgAAAIo 139.84.145.198 45038 38.242.227.117 7080 [27/Jun/2026:11:36:13.095267 +0200] aj@ZjVGDjR17SZrTBnjBVQAAAI8 139.84.145.198 45044 38.242.227.117 7080 [27/Jun/2026:11:36:22.506257 +0200] aj@Zlr-BgFS03bcHmOeeUgAAABI 139.84.145.198 45062 38.242.227.117 7080 ... show less	Brute-Force SSH
🇩🇪 reznekcs	2026-06-27 08:35:02 (1 day ago)	F2B apache-noscript ban. Logs: [Sat Jun 27 10:34:51.100451 2026] [proxy_fcgi:error] [pid 360212] [cl ... show more F2B apache-noscript ban. Logs: [Sat Jun 27 10:34:51.100451 2026] [proxy_fcgi:error] [pid 360212] [client 139.84.145.198:60986] AH01071: Got error 'Primary script unknown' [Sat Jun 27 10:34:59.421596 2026] [proxy_fcgi:error] [pid 341802] [client 139.84.145.198:39476] AH01071: Got error 'Primary script unknown' [Sat Jun 27 10:35:02.325548 2026] [proxy_fcgi:error] [pid 360212] [client 139.84.145.198:60986] AH01071: Got error 'Primary script unknown' show less	Web App Attack
🇬🇧 poundawebsiteltd	2026-06-27 08:24:09 (1 day ago)	Web App Attack (ModSecurity Block). Evidence: [REDACTED_DOMAIN]:80 139.84.145.198 - - [27/Jun/2026:0 ... show more Web App Attack (ModSecurity Block). Evidence: [REDACTED_DOMAIN]:80 139.84.145.198 - - [27/Jun/2026:09:24:06 +0100] GET /wp-config.php HTTP/1.1 403 158 - Mozilla/5.0 (compatible) show less	Web App Attack

Showing 1 to 15 of 72 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 2404:6800:4003:c04::126

🇧🇷 177.11.189.153

🇿🇦 105.224.192.25

🇨🇦 85.217.149.58

🇭🇺 80.98.155.175

🇰🇷 14.63.192.228

🇨🇳 2409:8754:34a0:29:0:2:0:2

🇧🇷 177.76.134.52

🇧🇷 177.11.189.152

🇩🇪 167.94.146.35

🇮🇩 103.49.238.64

🇳🇿 45.133.7.104

🇳🇱 178.62.237.31

🇧🇷 177.11.189.151

🇧🇷 177.11.189.150

🇻🇳 160.191.242.222

🇺🇸 146.70.98.152

🇨🇳 118.196.119.108

🇭🇰 118.26.39.178

🇮🇩 114.79.39.130