JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 139.59.102.20

139.59.102.20 was found in our database!

This IP was reported 181 times. Confidence of Abuse is 100%: ?

100%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 139.59.102.20

Whois 139.59.102.20

IP Abuse Reports for 139.59.102.20:

This IP address has been reported a total of 181 times from 113 distinct sources. 139.59.102.20 was first reported on October 13th 2022, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 nzhost.co.nz	2026-07-10 00:51:59 (1 hour ago)	$f2bV_matches	Hacking Brute-Force
Anonymous	2026-07-10 00:30:26 (1 hour ago)	139.59.102.20 - - [10/Jul/2026:02:30:22 +0200] "GET /.env.production HTTP/1.1" 404 567 "-" "Mozilla/ ... show more 139.59.102.20 - - [10/Jul/2026:02:30:22 +0200] "GET /.env.production HTTP/1.1" 404 567 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 (Silvy X Ran)" 139.59.102.20 - - [10/Jul/2026:02:30:22 +0200] "GET /.env.development HTTP/1.1" 404 567 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 (Silvy X Ran)" 139.59.102.20 - - [10/Jul/2026:02:30:22 +0200] "GET /.env.dev HTTP/1.1" 404 567 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 (Silvy X Ran)" 139.59.102.20 - - [10/Jul/2026:02:30:22 +0200] "GET /.env.prod HTTP/1.1" 404 567 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 (Silvy X Ran)" 139.59.102.20 - - [10/Jul/2026:02:30:23 +0200] "GET /.env.test HTTP/1.1" 404 567 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWeb ... show less	Bad Web Bot Web App Attack
🇬🇧 consul.to	2026-07-10 00:04:32 (1 hour ago)	Web attack/malicious scanning detected	Web App Attack
🇧🇷 Halux	2026-07-09 18:25:33 (7 hours ago)	139.59.102.20 Probing protected path or service	Web App Attack
🇩🇪 raph	2026-07-09 11:17:55 (14 hours ago)	[DOT FILES] crawler .env, .git, .config, etc.	Bad Web Bot Web App Attack
🇺🇦 URAN Publishing Service	2026-07-09 05:39:59 (20 hours ago)	139.59.102.20 - - [09/Jul/2026:08:39:58 +0300] "GET /backup/.env HTTP/1.1" 404 730 "-" "Mozilla/5.0 ... show more 139.59.102.20 - - [09/Jul/2026:08:39:58 +0300] "GET /backup/.env HTTP/1.1" 404 730 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 (Silvy X Ran)" 139.59.102.20 - - [09/Jul/2026:08:39:58 +0300] "GET /backups/.env HTTP/1.1" 404 730 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 (Silvy X Ran)" ... show less	Web App Attack
🇦🇹 penguin-solutions.at	2026-07-09 00:38:54 (1 day ago)	Excessive 403/404 errors ...	Brute-Force Web App Attack
🇫🇷 SpaceHost-Server	2026-07-08 22:26:22 (1 day ago)		Brute-Force Web App Attack
Anonymous	2026-07-08 17:45:18 (1 day ago)	Fail2Ban triggered	Web App Attack
🇬🇧 Aetherweb Ark	2026-07-08 17:18:42 (1 day ago)	(mod_security) mod_security (id:949110) triggered by 139.59.102.20 (SG/Singapore/-): N in the last X ... show more (mod_security) mod_security (id:949110) triggered by 139.59.102.20 (SG/Singapore/-): N in the last X secs show less	Web App Attack
Anonymous	2026-07-08 08:11:18 (1 day ago)	139.59.102.20 - - [08/Jul/2026:10:11:07 +0200] "GET /env.js HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Wind ... show more 139.59.102.20 - - [08/Jul/2026:10:11:07 +0200] "GET /env.js HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 (Silvy X Ran)" 139.59.102.20 - - [08/Jul/2026:10:11:12 +0200] "GET /config.js HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 (Silvy X Ran)" 139.59.102.20 - - [08/Jul/2026:10:11:12 +0200] "GET /settings.js HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 (Silvy X Ran)" 139.59.102.20 - - [08/Jul/2026:10:11:13 +0200] "GET /app.js HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 (Silvy X Ran)" 139.59.102.20 - - [08/Jul/2026:10:11:14 +0200] "GET /main.js HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, ... show less	Bad Web Bot Web App Attack
🇩🇪 IVski	2026-07-08 04:51:16 (1 day ago)	IVski WAF \| Sensitive file probe detected - looking for .env	Port Scan Brute-Force Web App Attack
🇬🇧 consul.to	2026-07-08 00:06:03 (2 days ago)	Web attack/malicious scanning detected	Web App Attack
🇮🇹 mediarama.com	2026-07-07 22:21:41 (2 days ago)	Banned by Fail2Ban	Web App Attack
🇳🇿 Antinson	2026-07-07 18:52:49 (2 days ago)	Scraping with a high error ratio and request rate	Bad Web Bot

Showing 1 to 15 of 181 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2a09:bac1:76c0:460::5e:4d

🇳🇱 195.178.110.232

🇧🇷 187.50.194.182

🇧🇷 187.40.215.162

🇧🇷 187.12.48.70

🇫🇮 147.185.133.255

🇫🇷 91.231.89.144

🇫🇷 91.231.89.93

🇩🇪 91.92.240.5

🇺🇸 50.6.197.105

🇺🇸 49.51.72.129

🇧🇷 45.131.226.99

🇪🇬 41.46.201.159

🇺🇸 20.65.195.47

🇺🇸 198.98.53.130

🇧🇬 193.24.211.107

🇧🇷 186.238.178.6

🇧🇷 186.200.104.66

🇱🇹 185.2.228.48

🇺🇸 184.186.104.101