JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 139.99.50.80

139.99.50.80 was found in our database!

This IP was reported 53 times. Confidence of Abuse is 100%: ?

100%

ISP	Zen Computer Systems Sdn Bhd
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16276
Hostname(s)	ip80.ip-139-99-50.net
Domain Name	zen.com.my
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 139.99.50.80

Whois 139.99.50.80

IP Abuse Reports for 139.99.50.80:

This IP address has been reported a total of 53 times from 41 distinct sources. 139.99.50.80 was first reported on July 1st 2026, and the most recent report was 25 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 SpaceHost-Server	2026-07-01 22:35:50 (25 minutes ago)		Brute-Force Web App Attack
🇫🇷 tecnicorioja	2026-07-01 22:02:03 (59 minutes ago)	wp-login attack [01/Jul/2026:11:44:14	Brute-Force Web App Attack
🇩🇪 F242	2026-07-01 16:38:59 (6 hours ago)	Wordpress Login or XMLRPC abuse	Web App Attack
🇦🇺 FSB.ru - Is it?	2026-07-01 10:44:18 (12 hours ago)	Brute force login for honeypot user accounts	Brute-Force Web App Attack
🇷🇴 SpamStopper	2026-07-01 10:19:13 (12 hours ago)	Fail2Ban - WP Spoofing	Port Scan Brute-Force Web App Attack
Anonymous	2026-07-01 09:46:02 (13 hours ago)	Failed Wordpress Logins	Web App Attack
🇲🇾 Rizzy	2026-07-01 09:20:58 (13 hours ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇩🇪 FeG Deutschland	2026-07-01 09:20:12 (13 hours ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 2	Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-07-01 09:05:03 (13 hours ago)	(mod_security) mod_security (id:225170) triggered by 139.99.50.80 (ip80.ip-139-99-50.net): 1 in the ... show more (mod_security) mod_security (id:225170) triggered by 139.99.50.80 (ip80.ip-139-99-50.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 05:04:54.788774 2026] [security2:error] [pid 20235:tid 20235] [client 139.99.50.80:48656] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|levijoneslegal.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "levijoneslegal.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "akTYNgM-piGLXiHVOrKGYgAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Viveronese	2026-07-01 08:54:36 (14 hours ago)	Wordpress vulnerability scanning	Web App Attack
🇨🇭 Origon	2026-07-01 08:42:16 (14 hours ago)	recidive - IP: 139.99.50.80 - 2026-07-01 07:47:26,980 fail2ban.actions [1829761]: NOTICE [plesk-wor ... show more recidive - IP: 139.99.50.80 - 2026-07-01 07:47:26,980 fail2ban.actions [1829761]: NOTICE [plesk-wordpress] Ban 139.99.50.80 2026-07-01 10:02:20,307 fail2ban.actions [1829761]: NOTICE [plesk-wordpress] Ban 139.99.50.80 2026-07-01 10:42:16,389 fail2ban.actions [1829761]: NOTICE [plesk-wordpress] Ban 139.99.50.80 show less	Web App Attack
🇨🇦 KIsmay	2026-07-01 08:41:55 (14 hours ago)	Jun 30 22:49:36 ismay WPAudit[3585538]: 139.99.50.80 christinesutherland.com "Mozilla/5.0 (Windows N ... show more Jun 30 22:49:36 ismay WPAudit[3585538]: 139.99.50.80 christinesutherland.com "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" wyatt:sylvain@wyatt FAIL Jun 30 22:52:07 ismay WPAudit[3555418]: 139.99.50.80 www.ismay.ca "Mozilla/5.0 (Macintosh; Intel Mac OS X 11_7_10) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" admin:@admin123 FAIL Jun 30 22:55:46 ismay WPAudit[3585542]: 139.99.50.80 christinesutherland.com "Mozilla/5.0 (Macintosh; Intel Mac OS X 11_7_10) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" christine:christine2016 FAIL Jun 30 23:26:44 ismay WPAudit[3555418]: 139.99.50.80 www.ismay.ca "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" kirk:Kirk2021 FAIL Jul 1 01:41:53 ismay WPAudit[3549861]: 139.99.50.80 www.ismay.ca "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0" kirk: ... show less	Brute-Force Web App Attack
🇪🇸 masterguru	2026-07-01 08:41:36 (14 hours ago)	(wplogin) Failed WordPress login from 139.99.50.80 (TH/Thailand/ip80.ip-139-99-50.net): 5 in the las ... show more (wplogin) Failed WordPress login from 139.99.50.80 (TH/Thailand/ip80.ip-139-99-50.net): 5 in the last 3600 secs (0-122) show less	Hacking
Anonymous	2026-07-01 08:34:10 (14 hours ago)	[Wed Jul 01 10:34:08.518096 2026] [authz_core:error] [pid 44745:tid 44820] [client 139.99.50.80:2904 ... show more [Wed Jul 01 10:34:08.518096 2026] [authz_core:error] [pid 44745:tid 44820] [client 139.99.50.80:29043] AH01630: client denied by server configuration: /var/www/cimt-precision/wp-login.php [Wed Jul 01 10:34:08.890672 2026] [authz_core:error] [pid 44745:tid 44861] [client 139.99.50.80:29043] AH01630: client denied by server configuration: /var/www/cimt-precision/wp-login.php, referer: https://pre.cimt-precision.de/wp-login.php [Wed Jul 01 10:34:08.890672 2026] [authz_core:error] [pid 44745:tid 44861] [client 139.99.50.80:29043] AH01630: client denied by server configuration: /var/www/cimt-precision/wp-login.php, referer: https://pre.cimt-precision.de/wp-login.php ... show less	Brute-Force Web App Attack
🇫🇷 solution.it	2026-07-01 08:29:13 (14 hours ago)	[Wed Jul 01 10:29:12.397542 2026] [php7:error] [pid 71674:tid 71674] [client 139.99.50.80:42797] scr ... show more [Wed Jul 01 10:29:12.397542 2026] [php7:error] [pid 71674:tid 71674] [client 139.99.50.80:42797] script '/var/www/html/blog.solution.it/wp-login.php' not found or unable to stat show less	Web App Attack

Showing 1 to 15 of 53 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 198.235.24.219

🇩🇪 47.245.142.0

🇮🇳 2404:6800:4000:1002::128

🇺🇸 216.25.89.78

🇹🇼 198.235.24.126

🇬🇧 185.247.137.45

🇬🇧 185.247.137.42

🇳🇱 175.110.112.8

🇦🇺 170.64.208.93

🇦🇪 165.154.12.108

🇺🇸 162.248.102.46

🇺🇸 162.216.150.180

🇺🇸 162.216.150.14

🇸🇬 152.42.238.64

🇺🇸 136.109.8.176

🇨🇳 117.164.191.217

🇨🇳 113.237.196.196

🇻🇳 103.228.36.70

🇳🇱 91.92.40.7

🇩🇪 44.152.170.167