JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 139.59.118.29

139.59.118.29 was found in our database!

This IP was reported 32 times. Confidence of Abuse is 4%: ?

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 139.59.118.29

Whois 139.59.118.29

IP Abuse Reports for 139.59.118.29:

This IP address has been reported a total of 32 times from 27 distinct sources. 139.59.118.29 was first reported on March 2nd 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 consul.to	2026-07-26 14:24:44 (2 days ago)	Web attack/malicious scanning detected	Web App Attack
🇨🇳 ThreatBook.io	2026-04-11 00:47:08 (3 months ago)	ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/139.59.118.29 2026- ... show more ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/139.59.118.29 2026-04-10 00:53:11 //www.shockerssmokeshop.com:443:443 2026-04-10 00:59:27 //www.realtimerealtors.in:443:443 2026-04-10 00:30:33 //www.realtimerealtors.in:443:443 2026-04-10 01:06:46 //usabilla.org:443:443 2026-04-10 01:40:42 //maristan-project.com:443:443 2026-04-10 00:34:26 //pearlinksoftware.com:443:443 2026-04-10 00:34:36 //latinr.org:443:443 2026-04-10 01:32:01 //latinr.org:443:443 2026-04-10 01:35:25 //www.tukimura.com:443:443 2026-04-10 01:31:55 //maristan-project.com:443:443 show less	Web App Attack
🇨🇿 Countryman	2026-04-10 06:12:23 (3 months ago)	repeated unauthorized connection attempts, host sweep, port scan	Port Scan
🇨🇿 Countryman	2026-04-10 06:12:23 (3 months ago)	repeated unauthorized connection attempts, host sweep, port scan	Port Scan
🇺🇸 xmission.com	2026-04-10 00:53:48 (3 months ago)	Blocked by UFW (TCP on 8118) Source port: 48108 TTL: 44 Packet length: 60 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 8118) Source port: 48108 TTL: 44 Packet length: 60 TOS: 0x08 This report (for 139.59.118.29) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 Rayulcifer	2026-04-09 14:25:31 (3 months ago)	139.59.118.29 - - [09/Apr/2026:09:23:50 -0500] "CONNECT infario.com:443:443 HTTP/1.1" 400 392 "-" "- ... show more 139.59.118.29 - - [09/Apr/2026:09:23:50 -0500] "CONNECT infario.com:443:443 HTTP/1.1" 400 392 "-" "-" 139.59.118.29 - - [09/Apr/2026:09:25:30 -0500] "CONNECT www.tukimura.com:443:443 HTTP/1.1" 400 392 "-" "-" ... show less	Open Proxy Port Scan Hacking Web App Attack SSH
🇩🇪 masterguru	2026-03-26 03:57:16 (4 months ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-145) show less	Bad Web Bot
🇸🇪 KIDOS	2026-03-24 07:09:01 (4 months ago)	KASM auto: exploit_/.env	Brute-Force SSH
Anonymous	2026-03-20 08:25:00 (4 months ago)	139.59.118.29 - - [20/Mar/2026:10:23:17 +0200] "GET /wp-config.php.bak HTTP/1.1" 404 124 "-" "Go-htt ... show more 139.59.118.29 - - [20/Mar/2026:10:23:17 +0200] "GET /wp-config.php.bak HTTP/1.1" 404 124 "-" "Go-http-client/1.1" 139.59.118.29 - - [20/Mar/2026:10:24:28 +0200] "GET /wp-content/w3tc-config/master-preview.php HTTP/1.1" 404 124 "-" "Go-http-client/1.1" 139.59.118.29 - - [20/Mar/2026:10:24:30 +0200] "GET /wp-content/w3tc-config/master.php HTTP/1.1" 404 124 "-" "Go-http-client/1.1" 139.59.118.29 - - [20/Mar/2026:10:24:58 +0200] "GET /wp-config.php.orig HTTP/1.1" 404 124 "-" "Go-http-client/1.1" 139.59.118.29 - - [20/Mar/2026:10:25:00 +0200] "GET /wp-config.php HTTP/1.1" 404 124 "-" "Go-http-client/1.1" ... show less	Brute-Force Web App Attack
🇩🇪 sdos.es	2026-03-20 01:57:11 (4 months ago)	"Restricted File Access Attempt - Matched Data: .aws/credentials found within REQUEST_FILENAME: /.aw ... show more "Restricted File Access Attempt - Matched Data: .aws/credentials found within REQUEST_FILENAME: /.aws/credentials" show less	Web App Attack
Anonymous	2026-03-19 09:18:59 (4 months ago)	139.59.118.29 - - [19/Mar/2026:09:18:58 +0000] "GET /.env HTTP/1.1" 404 410 "-" "Go-http-client/1.1" ... show more 139.59.118.29 - - [19/Mar/2026:09:18:58 +0000] "GET /.env HTTP/1.1" 404 410 "-" "Go-http-client/1.1" ... show less	Bad Web Bot Web App Attack
🇪🇸 Francisco Vallejo	2026-03-18 17:23:30 (4 months ago)	[Wed Mar 18 18:23:24.006613 2026] [core:info] [pid 796503:tid 124056229635776] [client 139.59.118.29 ... show more [Wed Mar 18 18:23:24.006613 2026] [core:info] [pid 796503:tid 124056229635776] [client 139.59.118.29:39874] AH00128: File does not exist: /var/www/franvallejo/.aws/credentials [Wed Mar 18 18:23:25.316717 2026] [core:info] [pid 796503:tid 124056347068096] [client 139.59.118.29:39874] AH00128: File does not exist: /var/www/franvallejo/.aws/credentials.gpg [Wed Mar 18 18:23:26.642842 2026] [core:info] [pid 796503:tid 124056355460800] [client 139.59.118.29:39874] AH00128: File does not exist: /var/www/franvallejo/.s3cfg [Wed Mar 18 18:23:27.923347 2026] [core:info] [pid 796503:tid 124056212850368] [client 139.59.118.29:39874] AH00128: File does not exist: /var/www/franvallejo/.passwd-s3fs [Wed Mar 18 18:23:29.243067 2026] [core:info] [pid 796503:tid 124056321889984] [client 139.59.118.29:39874] AH00128: File does not exist: /var/www/franvallejo/s3cmd.ini ... show less	Brute-Force SSH
🇨🇳 ThreatBook.io	2026-03-17 01:34:25 (4 months ago)	ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/139.59.118.29 2026- ... show more ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/139.59.118.29 2026-03-16 16:12:06 /.s3cfg 2026-03-16 16:12:03 /.aws/credentials.gpg 2026-03-16 16:12:01 /.aws/credentials 2026-03-16 16:12:07 /.passwd-s3fs show less	Web App Attack
🇸🇬 Cloudkul Cloudkul	2026-03-16 16:45:25 (4 months ago)	Multiple unauthorized attempts to access web resources	Brute-Force Web App Attack
🇨🇦 Dunham Support	2026-03-16 03:35:00 (4 months ago)	(mod_security) mod_security triggered on hostname [redacted] 139.59.118.29 (SG/Singapore/-)	SQL Injection

Showing 1 to 15 of 32 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇯 137.255.13.201

🇻🇳 116.99.172.74

🇵🇹 85.240.193.104

🇰🇬 212.241.16.223

🇬🇧 185.247.137.94

🇧🇪 178.51.85.24

🇺🇸 146.88.240.73

🇺🇸 136.144.33.86

🇨🇳 121.229.98.52

🇳🇱 45.148.10.147

🇵🇹 45.94.245.248

🇨🇳 183.246.178.79

🇧🇷 161.123.206.167

🇺🇸 152.39.200.212

🇮🇳 142.93.208.47

🇧🇬 78.128.112.30

🇹🇷 62.76.230.160

🇵🇱 54.38.52.18

🇳🇱 45.156.128.112

🇳🇱 45.148.10.141