JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 139.59.136.184

139.59.136.184 was found in our database!

This IP was reported 9,005 times. Confidence of Abuse is 100%: ?

100%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Hostname(s)	c3ee778768.scan.leakix.org
Domain Name	digitalocean.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 139.59.136.184

Whois 139.59.136.184

IP Abuse Reports for 139.59.136.184:

This IP address has been reported a total of 9,005 times from 1,179 distinct sources. 139.59.136.184 was first reported on October 18th 2023, and the most recent report was 37 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 bescared	2026-10-27 01:35:17 (37 minutes ago)	F2B - Malicious activity detected. Excessive port scans. -8ff06ede-	Port Scan
🇩🇪 Tsumugi Kotobuki	2026-10-27 00:16:25 (1 hour ago)	Port Scan on Honeypot \| Ports: 80/HTTP \| Proto: TCP(1) \| Flags: all SYN \| TTL: 56 \| Len: 60B \| Win: ... show more Port Scan on Honeypot \| Ports: 80/HTTP \| Proto: TCP(1) \| Flags: all SYN \| TTL: 56 \| Len: 60B \| Win: 64240(1) \| rDNS: c3ee778768.scan.leakix.org \| F2B/ufw-honeypot@2026-10-27T00:16:25Z show less	Port Scan Hacking
🇺🇦 URAN Publishing Service	2026-10-26 19:46:47 (6 hours ago)	[26/Oct/2026:21:46:46 +0200] -- 139.59.136.184 Ban reason: Scanner [SENSITIVE_FILES] \| Request: GET ... show more [26/Oct/2026:21:46:46 +0200] -- 139.59.136.184 Ban reason: Scanner [SENSITIVE_FILES] \| Request: GET /.env HTTP/1.1 show less	Bad Web Bot Web App Attack
Anonymous	2026-10-26 19:07:09 (7 hours ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: DE, Attack patterns: Clou ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: DE, Attack patterns: Cloud secrets probing show less	Bad Web Bot Web App Attack
🇵🇱 Budyn	2026-10-26 18:59:44 (7 hours ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: api.dont-eat-the-pudding.online \| URI: /.env \| UA: Mozilla/5.0 (l9scan/2.0.33e27393e2431313e2838313; +https://leakix.net) \| BODY: [Empty / GET Request] \| HEADERS: {"Connection":"Keep-Alive","X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"DE","Cf-Connecting-Ip":"139.59.136.184","Cdn-Loop":"cloudflare; loops=1","Cf-Ray":"a50bb32a3fd94f95-FRA","Accept-Encoding":"gzip, br","X-Forwarded-For":"139.59.136.184"} show less	Bad Web Bot Web App Attack
🇩🇪 raph	2026-10-26 18:11:27 (8 hours ago)	[DOT FILES] crawler .env, .git, .config, etc.	Bad Web Bot Web App Attack
🇨🇭 SOC [GOLINE SA]	2026-10-26 16:56:10 (9 hours ago)	FortiGate IPS: Atlassian.Server.S.Endpoint.Information.Disclosure (severity medium)	Hacking
🇺🇸 Starburst SysOp Team	2026-10-26 14:28:20 (11 hours ago)	Restricted File Access Attempt. Matched phrase "/.DS_Store" at REQUEST_FILENAME. (930130-stl2-17)	Hacking Web App Attack
🇫🇮 Vaino Karppi	2026-10-26 13:10:40 (13 hours ago)	Honeypot triggered: Tried to access restricted page /___proxy_subdomain_whm/login	Hacking
🇵🇱 Budyn	2026-10-26 13:00:13 (13 hours ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: forum.sweetpuddingtrap.xyz \| URI: /v2/_catalog \| UA: Mozilla/5.0 (l9scan/2.0.435323e2833313e27363e2237313; +https://leakix.net) \| BODY: [Empty / GET Request] \| HEADERS: {"X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"DE","Cf-Connecting-Ip":"139.59.136.184","Cdn-Loop":"cloudflare; loops=1","Cf-Ray":"a509a48529082608-FRA","Connection":"Keep-Alive","Accept":"application\/json","Accept-Encoding":"gzip, br","X-Forwarded-For":"139.59.136.184"} show less	Bad Web Bot Web App Attack
🇩🇪 pscriptos	2026-10-26 12:12:39 (14 hours ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing	Web App Attack Hacking
Anonymous	2026-10-26 10:55:15 (15 hours ago)	Web application attack: jira cve 2021 26086; Microsoft Exchange OWA/ECP/Autodiscover probe; Probing ... show more Web application attack: jira cve 2021 26086; Microsoft Exchange OWA/ECP/Autodiscover probe; Probing for exposed secret / credential files show less	Hacking Web App Attack
🇩🇪 Bedios GmbH	2026-10-26 10:06:37 (16 hours ago)	Scanning for exposed credentials and private keys	Hacking
🇺🇸 antlac1	2026-10-26 08:44:22 (17 hours ago)	crowdsecurity/http-probing	Brute-Force Web App Attack
🇳🇱 Alt255	2026-10-26 06:37:16 (19 hours ago)	[ti-02ov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ... show more [ti-02ov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 139.59.136.184 - - [26/Oct/2026:07:37:08 +0100] "GET /.env HTTP/1.1" 301 524 "-" "Mozilla/5.0 (l9scan/2.0.6373e2032323e2434313e2633313; +https://leakix.net)" ... show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 9005 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.231

🇲🇽 187.141.71.166

🇫🇷 185.177.72.13

🇭🇰 148.66.49.226

🇹🇭 118.194.250.245

🇷🇴 104.165.85.22

🇧🇬 79.124.62.126

🇳🇱 45.148.10.240

🇧🇪 34.156.121.46

🇧🇪 34.53.239.98

🇱🇻 31.59.45.109

🇸🇬 8.222.233.83

🇷🇴 2.57.122.238

🇺🇸 216.116.6.61

🇺🇬 196.0.3.188

🇳🇱 195.178.110.242

🇺🇸 172.252.56.209

🇳🇱 159.223.223.91

🇩🇪 130.12.180.166

🇨🇳 121.42.247.227