JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 139.59.107.176

139.59.107.176 was found in our database!

This IP was reported 339 times. Confidence of Abuse is 100%: ?

100%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 139.59.107.176

Whois 139.59.107.176

IP Abuse Reports for 139.59.107.176:

This IP address has been reported a total of 339 times from 113 distinct sources. 139.59.107.176 was first reported on September 19th 2021, and the most recent report was 6 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 kosada.com	2026-06-28 08:52:28 (6 hours ago)	Web vulnerability probing: /api	Web App Attack
Anonymous	2026-06-05 15:58:11 (3 weeks ago)	Blocked by UFW (TCP on 43394) Source port: 61000 TTL: 235 Packet length: 40 TOS: 0x14 This report ( ... show more Blocked by UFW (TCP on 43394) Source port: 61000 TTL: 235 Packet length: 40 TOS: 0x14 This report (for 139.59.107.176) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇲🇽 octageeks.com	2026-06-05 04:06:20 (3 weeks ago)	Wordpress malicious attack:[octablocked]	Web App Attack
Anonymous	2026-06-04 22:42:51 (3 weeks ago)	Blocked by UFW (TCP on 22377) Source port: 61000 TTL: 233 Packet length: 40 TOS: 0x14 This report ( ... show more Blocked by UFW (TCP on 22377) Source port: 61000 TTL: 233 Packet length: 40 TOS: 0x14 This report (for 139.59.107.176) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇳 pengpeng	2026-06-04 09:36:08 (3 weeks ago)	monitor: on VM-0-7-ubuntu \| port: 33138 \| ttl: 250 script: github.com/sefinek/UFW-AbuseIPDB-Reporte ... show more monitor: on VM-0-7-ubuntu \| port: 33138 \| ttl: 250 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-06-04 08:52:11 (3 weeks ago)	Blocked by UFW (TCP on 37926) Source port: 61000 TTL: 233 Packet length: 40 TOS: 0x14 This report ( ... show more Blocked by UFW (TCP on 37926) Source port: 61000 TTL: 233 Packet length: 40 TOS: 0x14 This report (for 139.59.107.176) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇬🇧 consul.to	2026-06-04 01:28:51 (3 weeks ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 TPI-Abuse	2026-06-03 23:40:02 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 2002:8b3b:6bb0::8b3b:6bb0 (Unknown): 1 in the l ... show more (mod_security) mod_security (id:210492) triggered by 2002:8b3b:6bb0::8b3b:6bb0 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 19:39:55.954270 2026] [security2:error] [pid 26722:tid 26722] [client 2002:8b3b:6bb0::8b3b:6bb0:55044] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "isaacsonpaintings.com"] [uri "/sftp-config.json"] [unique_id "aiC7S1vRSVSOkhDKz4arMwAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-06-03 11:05:42 (3 weeks ago)	Restricted File Access Attempt. Matched phrase "config.json" at REQUEST_FILENAME. (930130-196)	Hacking Web App Attack
🇩🇪 FeG Deutschland	2026-06-03 04:00:24 (3 weeks ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
🇳🇱 e.fierstra	2026-06-03 01:59:49 (3 weeks ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-03 00:29:15 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 2002:8b3b:6bb0::8b3b:6bb0 (Unknown): 1 in the l ... show more (mod_security) mod_security (id:210492) triggered by 2002:8b3b:6bb0::8b3b:6bb0 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 20:29:11.167123 2026] [security2:error] [pid 26642:tid 26642] [client 2002:8b3b:6bb0::8b3b:6bb0:60842] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jimwilsongallery.com"] [uri "/sftp-config.json"] [unique_id "ah91V3nIZzgTYJW7BIy7ZgAAACw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-02 19:54:26 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 2002:8b3b:6bb0::8b3b:6bb0 (Unknown): 1 in the l ... show more (mod_security) mod_security (id:210492) triggered by 2002:8b3b:6bb0::8b3b:6bb0 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 15:54:13.352209 2026] [security2:error] [pid 13725:tid 13725] [client 2002:8b3b:6bb0::8b3b:6bb0:49830] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jesussotoca.com"] [uri "/sftp-config.json"] [unique_id "ah805Tz_Fv3nUk48GFLWTwAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 2000cn.com.au	2026-06-02 19:18:31 (3 weeks ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
🇩🇪 todix	2026-06-02 15:38:34 (3 weeks ago)	WebAttack or semilar from 139.59.107.176	Web App Attack

Showing 1 to 15 of 339 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 213.177.179.62

🇲🇴 182.93.50.90

🇧🇴 181.188.162.64

🇸🇬 172.253.84.216

🇩🇪 167.94.145.24

🇳🇿 119.224.65.56

🇧🇩 103.172.112.201

🇺🇸 74.235.122.210

🇺🇸 64.62.156.10

🇧🇷 170.150.252.53

🇸🇬 168.144.109.229

🇳🇱 45.148.10.151

🇬🇧 35.203.211.87

🇺🇸 20.163.15.207

🇻🇳 113.160.140.138

🇨🇳 106.12.144.153

🇸🇬 103.13.206.152

🇷🇺 85.15.179.210

🇮🇳 49.207.40.162

🇺🇸 20.169.107.142