JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 192.109.139.69

192.109.139.69 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 46%: ?

46%

ISP	Stellar Group SAS
Usage Type	Data Center/Web Hosting/Transit
ASN	AS135392
Domain Name	stellar-group.fr
Country	🇺🇸 United States of America
City	Edison, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 192.109.139.69

Whois 192.109.139.69

IP Abuse Reports for 192.109.139.69:

This IP address has been reported a total of 15 times from 8 distinct sources. 192.109.139.69 was first reported on June 9th 2026, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Mykola Spesivtsev	2026-06-11 04:04:50 (4 days ago)	HTTP Tarpit detected bot activity:TargetPort:80, Path://.env, Method:GET, UA:Go-http-client/1.1	Port Scan Web App Attack Bad Web Bot
🇩🇪 kkwemi	2026-06-11 04:04:42 (4 days ago)	Blocked by block-exploit-paths on /.env	Bad Web Bot
🇺🇸 mnsf	2026-06-11 01:05:57 (4 days ago)	Abuse Detected (1)	Brute-Force Web App Attack
🇦🇺 paulshipley.com.au	2026-06-11 00:33:59 (4 days ago)	[Thu Jun 11 10:33:58.649538 2026] [security2:error] [pid 466108] [client 192.109.139.69:64343] [clie ... show more [Thu Jun 11 10:33:58.649538 2026] [security2:error] [pid 466108] [client 192.109.139.69:64343] [client 192.109.139.69] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "paulshipley.com.au"] [uri "/.env"] [unique_id "aioCdmijinkHORc6WHykBQAAAAg"], referer: http://13.54.104.103//.env ... show less	Web App Attack
🇦🇺 paulshipley.com.au	2026-06-10 23:20:04 (4 days ago)	[Thu Jun 11 09:20:04.270898 2026] [security2:error] [pid 457981] [client 192.109.139.69:60343] [clie ... show more [Thu Jun 11 09:20:04.270898 2026] [security2:error] [pid 457981] [client 192.109.139.69:60343] [client 192.109.139.69] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "paulshipley.com.au"] [uri "/.env"] [unique_id "ainxJEG5XbNaUmoLn9LHLwAAAA0"], referer: http://13.238.247.56//.env ... show less	Web App Attack
🇺🇸 Rayulcifer	2026-06-10 22:11:27 (4 days ago)	192.109.139.69 - - [10/Jun/2026:17:11:26 -0500] "GET //.env HTTP/1.1" 403 344 "-" "Go-http-client/1. ... show more 192.109.139.69 - - [10/Jun/2026:17:11:26 -0500] "GET //.env HTTP/1.1" 403 344 "-" "Go-http-client/1.1" ... show less	Open Proxy Port Scan Hacking Web App Attack SSH
🇩🇪 Mykola Spesivtsev	2026-06-10 01:34:38 (5 days ago)	HTTP Tarpit detected bot activity:TargetPort:80, Path://.env, Method:GET, UA:Go-http-client/1.1	Port Scan Web App Attack Bad Web Bot
🇩🇪 kkwemi	2026-06-10 01:34:31 (5 days ago)	Blocked by block-exploit-paths on /.env	Bad Web Bot
🇺🇸 mnsf	2026-06-10 00:14:54 (5 days ago)	Abuse Detected (1)	Brute-Force Web App Attack
🇦🇺 paulshipley.com.au	2026-06-09 22:12:40 (5 days ago)	[Wed Jun 10 08:12:39.374310 2026] [security2:error] [pid 315215] [client 192.109.139.69:53208] [clie ... show more [Wed Jun 10 08:12:39.374310 2026] [security2:error] [pid 315215] [client 192.109.139.69:53208] [client 192.109.139.69] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "paulshipley.com.au"] [uri "/.env"] [unique_id "aiiP1x9qpM-Hr6FmjfIiqgAAAAc"], referer: http://13.54.104.103//.env ... show less	Web App Attack
🇦🇺 paulshipley.com.au	2026-06-09 20:59:10 (5 days ago)	[Wed Jun 10 06:59:09.771522 2026] [security2:error] [pid 307626] [client 192.109.139.69:65386] [clie ... show more [Wed Jun 10 06:59:09.771522 2026] [security2:error] [pid 307626] [client 192.109.139.69:65386] [client 192.109.139.69] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "paulshipley.com.au"] [uri "/.env"] [unique_id "aih-nYYtnB_gBjPIqxPFXwAAAAU"], referer: http://13.238.247.56//.env ... show less	Web App Attack
Anonymous	2026-06-09 20:05:05 (5 days ago)	Automatic report - Vulnerability scan /.env	Web App Attack
🇺🇸 Rayulcifer	2026-06-09 19:45:51 (5 days ago)	192.109.139.69 - - [09/Jun/2026:14:45:50 -0500] "GET //.env HTTP/1.1" 403 344 "-" "Go-http-client/1. ... show more 192.109.139.69 - - [09/Jun/2026:14:45:50 -0500] "GET //.env HTTP/1.1" 403 344 "-" "Go-http-client/1.1" ... show less	Open Proxy Port Scan Hacking Web App Attack SSH
🇺🇸 jfz-abuse	2026-06-09 18:29:29 (5 days ago)	fail2ban: apache-filepath-recon ...	Web App Attack
🇸🇬 anotherwatcher	2026-06-09 18:01:23 (5 days ago)	bad bot	Bad Web Bot

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 212.83.145.101

🇩🇪 207.154.230.149

🇮🇶 185.166.25.150

🇭🇰 182.239.80.7

🇺🇸 104.43.242.4

🇭🇰 103.56.115.187

🇨🇦 89.251.0.78

🇩🇪 2a01:4f8:271:3e91::2

🇸🇬 114.119.143.213

🇺🇸 107.150.105.153

🇮🇩 103.83.98.155

🇺🇸 74.125.113.152

🇨🇳 60.188.58.133

🇸🇬 47.84.204.140

🇳🇱 45.148.10.151

🇳🇱 45.148.10.147

🇨🇦 20.220.147.44

🇺🇸 20.55.84.97

🇦🇹 213.225.9.147

🇳🇱 176.65.148.29