JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 139.59.100.138

139.59.100.138 was found in our database!

This IP was reported 83 times. Confidence of Abuse is 0%: ?

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 139.59.100.138

Whois 139.59.100.138

IP Abuse Reports for 139.59.100.138:

This IP address has been reported a total of 83 times from 37 distinct sources. 139.59.100.138 was first reported on March 11th 2025, and the most recent report was 6 months ago.

Old Reports: The most recent abuse report for this IP address is from 6 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇷🇺 DZBOT	2026-02-19 16:47:52 (6 months ago)	SMTP. Brute-force users (authenticator failed)	Brute-Force
🇦🇪 CG	2026-02-19 14:26:02 (6 months ago)	Web application attack, Automated scan	Web App Attack Hacking SQL Injection
🇷🇺 loveprod	2026-02-19 10:47:51 (6 months ago)	139.59.100.138 - - [19/Feb/2026:13:47:47 +0300] "GET //.env HTTP/1.1" 301 362 "-" "Mozilla/5.0 (Linu ... show more 139.59.100.138 - - [19/Feb/2026:13:47:47 +0300] "GET //.env HTTP/1.1" 301 362 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 139.59.100.138 - - [19/Feb/2026:13:47:50 +0300] "GET /.env HTTP/1.1" 403 3365 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" ... show less	Bad Web Bot
🇨🇳 ThreatBook.io	2026-02-03 01:47:15 (7 months ago)	ThreatBook Intelligence: Scanner,Dynamic IP more details on https://threatbook.io/ip/139.59.100.138 ... show more ThreatBook Intelligence: Scanner,Dynamic IP more details on https://threatbook.io/ip/139.59.100.138 2026-02-02 04:34:45 //.aws/credentials 2026-02-02 04:34:52 //.env.dev 2026-02-02 04:34:46 //.env 2026-02-02 04:34:47 //.env.backup 2026-02-02 04:34:50 //.env.debug 2026-02-02 04:34:57 //.env.development 2026-02-02 04:34:43 //.aws/config 2026-02-02 04:34:48 //.env.bak 2026-02-02 04:34:49 //.env.config 2026-02-02 04:34:55 //.env.dev.local show less	Web App Attack
Anonymous	2026-01-29 23:26:20 (7 months ago)		Web App Attack
🇨🇳 ThreatBook.io	2026-01-23 01:28:50 (7 months ago)	ThreatBook Intelligence: Scanner,Dynamic IP more details on https://threatbook.io/ip/139.59.100.138 ... show more ThreatBook Intelligence: Scanner,Dynamic IP more details on https://threatbook.io/ip/139.59.100.138 2026-01-22 05:46:11 /access_logs.yml 2026-01-22 05:46:11 /access_logs.json 2026-01-22 05:46:09 /.gitlab-ci.yml 2026-01-22 05:46:16 /ansible/aws.yml 2026-01-22 05:46:12 /admin_routes.yaml 2026-01-22 05:46:14 /admin_secrets.yml 2026-01-22 05:46:10 /.travis.yml 2026-01-22 05:46:13 /admin_routes.yml 2026-01-22 05:46:14 /adminPanel.js 2026-01-22 05:46:15 /adminpanel/credentials.yaml show less	Web App Attack
Anonymous	2026-01-22 09:46:19 (7 months ago)	(mod_security) mod_security triggered on hostname [redacted] 139.59.100.138 (SG/Singapore/-)	SQL Injection
🇩🇪 Mr-Money	2026-01-19 12:27:24 (7 months ago)	scenario: crowdsecurity/http-admin-interface-probing - events: 3	Hacking Web App Attack
🇸🇪 nekopavel	2026-01-15 08:40:40 (8 months ago)	139.59.100.138 - - [15/Jan/2026:09:40:20 +0100]"GET /.gitlab-ci.yml HTTP/1.1" 301 162"-" 78.69.8.25 ... show more 139.59.100.138 - - [15/Jan/2026:09:40:20 +0100]"GET /.gitlab-ci.yml HTTP/1.1" 301 162"-" 78.69.8.25 "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36""0.000" "-""Singapore" "SG" 139.59.100.138 - - [15/Jan/2026:09:40:21 +0100]"GET /.gitlab-ci.yml HTTP/1.1" 404 804"-" 78.69.8.25 "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36""0.000" "-""Singapore" "SG" 139.59.100.138 - - [15/Jan/2026:09:40:38 +0100]"GET /ansible/aws.yml HTTP/1.1" 301 162"-" 78.69.8.25 "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36""0.000" "-""Singapore" "SG" ... show less	Hacking Bad Web Bot Web App Attack
🇿🇦 Tokolosh Hunters	2026-01-13 20:39:29 (8 months ago)	AutoBlockWindow-Known bad useragent query-2026-01-13 20:39:28	Bad Web Bot
🇨🇱 n33	2026-01-13 20:34:46 (8 months ago)	Attack detected detected by fail2ban. Service: nginx-ghost-upstream. Banned after 3 failed attempts.	Hacking Web App Attack
🇳🇱 Site.eu	2026-01-13 17:50:16 (8 months ago)	Excessive multi-domain requests	Brute-Force
🇳🇱 melroy89	2026-01-13 17:15:47 (8 months ago)	139.59.100.138 - - [13/Jan/2026:18:14:50 +0100] "GET /adminpanel/credentials.yaml HTTP/1.1" 403 9 " ... show more 139.59.100.138 - - [13/Jan/2026:18:14:50 +0100] "GET /adminpanel/credentials.yaml HTTP/1.1" 403 9 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "77.61.56.117" 0.000 139.59.100.138 - - [13/Jan/2026:18:14:53 +0100] "GET /api_keys.yaml HTTP/1.1" 403 9 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "77.61.56.117" 0.000 139.59.100.138 - - [13/Jan/2026:18:14:55 +0100] "GET /api_routes/routes.yml HTTP/1.1" 403 9 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "77.61.56.117" 0.000 139.59.100.138 - - [13/Jan/2026:18:14:58 +0100] "GET /application.yml HTTP/1.1" 403 9 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like ... show less	Web App Attack
🇺🇸 alecj.com	2026-01-12 14:43:05 (8 months ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-bad-user-agent	Bad Web Bot Web App Attack
Anonymous	2026-01-11 20:43:54 (8 months ago)	Multiple web server 400 error codes from same source ip	Web App Attack

Showing 1 to 15 of 83 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 204.199.57.196

🇨🇭 34.65.222.81

🇺🇸 216.180.246.128

🇵🇦 200.46.151.238

🇮🇳 182.48.211.33

🇦🇷 181.228.92.160

🇰🇷 165.154.52.159

🇺🇸 137.184.176.73

🇧🇬 109.160.32.106

🇰🇿 95.58.221.186

🇺🇦 94.179.1.38

🇺🇸 74.82.47.51

🇺🇸 65.49.20.108

🇨🇿 46.36.44.201

🇷🇴 2.57.121.25

🇺🇿 198.163.195.13

🇰🇷 168.107.28.249

🇳🇱 149.3.170.137

🇧🇩 103.74.230.95

🇫🇷 88.178.42.165