JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

139.59.127.44

Recent Activity

Abuse confidence score ?

60% Elevated

27 reports

24 reporters · latest 19 hours ago

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇸🇬 Singapore
City	Singapore

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 139.59.127.44

Export CSV

This IP address has been reported a total of 27 times from 24 distinct sources. 139.59.127.44 was first reported on July 4th 2024, and the most recent report was 19 hours ago. In the last 60 days, the top reporter locations were: Australia with 3 reports; Germany with 2 reports; Spain with 2 reports. The most common categories in these recent reports were: Web App Attack 12 times; Exploited Host 2 times; Hacking 2 times; Brute-Force 1 time; Bad Web Bot 1 time; Other 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 soc-yk	2026-10-14 23:06:12 (19 hours ago)	Type: suspicious_network_activity Risk: 76 Events: 264 Evidence: - Persistent suspicious network ac ... show more Type: suspicious_network_activity Risk: 76 Events: 264 Evidence: - Persistent suspicious network activity detected - Repeated hostile operational behavior observed - Multi-event operational persistence identified - Threat escalation behavior observed show less	Port Scan Hacking
🇩🇪 FeG Deutschland	2026-10-10 08:57:57 (5 days ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
🇪🇸 robotstxt	2026-10-10 03:59:15 (5 days ago)	139.59.127.44 - - [10/Oct/2026:03:58:21 +0000] "GET /wp-admin/ HTTP/1.1" 403 31 "https://yandex.com/ ... show more 139.59.127.44 - - [10/Oct/2026:03:58:21 +0000] "GET /wp-admin/ HTTP/1.1" 403 31 "https://yandex.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" "-" edge="139.59.127.44" 139.59.127.44 - - [10/Oct/2026:03:58:22 +0000] "GET /wp-content/ HTTP/1.1" 403 27335 "https://www.google.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 Edg/136.0.0.0" "-" edge="139.59.127.44" 139.59.127.44 - - [10/Oct/2026:03:58:23 +0000] "GET /wp-includes/ HTTP/1.1" 403 27333 "https://duckduckgo.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/109.0.0.0" "-" edge="139.59.127.44" 139.59.127.44 - - [10/Oct/2026:03:58:24 +0000] "GET /wp-config/ HTTP/1.1" 403 27340 "https://www.google.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14.4; rv:137.0) Gecko/20100101 Firefox/137.0" "-" edge="139.59.127.44" 139.59.12 ... show less	Web App Attack
🇪🇸 robotstxt	2026-10-10 03:39:20 (5 days ago)	2026/10/10 03:39:09 [error] 919#919: 382963 [client 139.59.127.44] ModSecurity: Access denied with ... show more 2026/10/10 03:39:09 [error] 919#919: 382963 [client 139.59.127.44] ModSecurity: Access denied with code 403 (phase 2). Matched "Operator `Ge' with parameter `5' against variable `TX:BLOCKING_INBOUND_ANOMALY_SCORE' (Value: `5' ) [file "/var/lib/angie/modsecurity/coreruleset/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "222"] [id "949110"] [rev ""] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [data ""] [severity "0"] [ver "OWASP_CRS/4.30.0"] [maturity "0"] [accuracy "0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "www.nascapers.es"] [uri "/.well-known"] [unique_id "179160354986.866016"] [ref ""], client: "139.59.127.44", server: "www.nascapers.es", request_line: "GET /.well-known HTTP/1.1", host: "www.nascapers.es", referrer: "https://www.google.com/" 2026/10/10 03:39:11 [error] 919#919: *382963 [client 139.59.127.44] ModSecurity: Access denied with code 403 (phase 2). Matched "Operator `Ge' with parameter `5' against variable `TX:BLOCKING_INBOUND_ANOMALY_SC ... show less	Web App Attack
Anonymous	2026-10-09 22:14:23 (5 days ago)	RdpGuard detected brute-force attempt on HTTP	Brute-Force
🇫🇷 david.houstin	2026-10-09 21:58:45 (5 days ago)	139.59.127.44 - - [09/Oct/2026:23:58:41 +0200] "GET /wp-content/themes HTTP/1.1" 404 8250 "https://w ... show more 139.59.127.44 - - [09/Oct/2026:23:58:41 +0200] "GET /wp-content/themes HTTP/1.1" 404 8250 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 15; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Mobile Safari/537.36 OPR/110.0.0.0" 16603 - 139.59.127.44 - - [09/Oct/2026:23:58:41 +0200] "GET /wp-content/plugins HTTP/1.1" 404 4533 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_5 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/136.0.0.0 Mobile/15E148 Safari/604.1" 21565 - 139.59.127.44 - - [09/Oct/2026:23:58:41 +0200] "GET /wp-content/uploads HTTP/1.1" 404 4533 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 15; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Mobile Safari/537.36 EdgA/136.0.0.0" 12083 - 139.59.127.44 - - [09/Oct/2026:23:58:42 +0200] "GET /wp-content/cache HTTP/1.1" 404 4533 "https://www.bing.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14.5; rv:138.0) Gecko/20100101 Firefox/138.0" 13630 - 139.59.12 ... show less	Web App Attack Bad Web Bot
🇬🇧 consul.to	2026-10-09 16:14:46 (6 days ago)	Web attack/malicious scanning detected	Web App Attack
🇩🇪 paissangroup	2026-10-09 15:49:09 (6 days ago)	Multiple WAF Violations	Web App Attack
🇵🇱 nfsec.pl	2026-10-08 14:59:07 (1 week ago)	139.59.127.44 - - [08/Oct/2026:14:58:58 +0000] "GET /.github HTTP/1.1" 403 7712 "https://www.bing.co ... show more 139.59.127.44 - - [08/Oct/2026:14:58:58 +0000] "GET /.github HTTP/1.1" 403 7712 "https://www.bing.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/605.1.15" 139.59.127.44 - - [08/Oct/2026:14:59:05 +0000] "GET /wp-content/cache HTTP/1.1" 404 26329 "https://yandex.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" 139.59.127.44 - - [08/Oct/2026:14:59:06 +0000] "GET /wp-content/upgrade/ HTTP/1.1" 403 2070 "https://search.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 18_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Mobile/15E148 Safari/604.1" 139.59.127.44 - - [08/Oct/2026:14:59:06 +0000] "GET /wp-content/backup HTTP/1.1" 404 26183 "https://www.google.com/" "Mozilla/5.0 (X11; Linux x86_64; rv:138.0) Gecko/20100101 Firefox/138.0" 139.59.127.44 - - [08/Oct/2026:14:59:06 +0000] "GET /wp-content/mu-plugins HTTP/1.1" 404 26383 "https://www.bing.com/" "Mozi ... show less	Web App Attack Exploited Host
🇵🇱 TaKeN	2026-10-08 13:06:12 (1 week ago)	Automated Wazuh observation. Wazuh rule 31151 lvl=10 detected repeated HTTP web application probing ... show more Automated Wazuh observation. Wazuh rule 31151 lvl=10 detected repeated HTTP web application probing from this source IP. Observed 1 matching Wazuh alert(s) between 2026-10-08T15:06:12+02:00 and 2026-10-08T15:06:12+02:00. show less	Web App Attack Hacking
🇦🇺 paulshipley.com.au	2026-10-08 01:56:54 (1 week ago)	[Thu Oct 08 12:56:54.245288 2026] [security2:error] [pid 459418] [client 139.59.127.44:51077] [clien ... show more [Thu Oct 08 12:56:54.245288 2026] [security2:error] [pid 459418] [client 139.59.127.44:51077] [client 139.59.127.44] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "paulshipley.id.au"] [uri "/.github"] [unique_id "asb4Zkba782l9epw_wwlAwAAAAE"], referer: https://duckduckgo.com/ ... show less	Web App Attack
🇦🇺 paulshipley.com.au	2026-10-07 23:41:32 (1 week ago)	[Thu Oct 08 10:41:32.124340 2026] [security2:error] [pid 440228] [client 139.59.127.44:55828] [clien ... show more [Thu Oct 08 10:41:32.124340 2026] [security2:error] [pid 440228] [client 139.59.127.44:55828] [client 139.59.127.44] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "paulshipley.id.au"] [uri "/.github"] [unique_id "asbYrBMfNaYvIe5ZsnhUQwAAAAM"], referer: https://search.yahoo.com/ ... show less	Web App Attack
🇮🇩 Burayot	2026-10-07 21:45:28 (1 week ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 139.59.127.44 (SG/Singapore/-): 2 i ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 139.59.127.44 (SG/Singapore/-): 2 in the last 3600 secs show less	Web App Attack
🇦🇺 paulshipley.com.au	2026-10-07 21:34:40 (1 week ago)	[Thu Oct 08 08:34:39.699147 2026] [security2:error] [pid 435730] [client 139.59.127.44:59865] [clien ... show more [Thu Oct 08 08:34:39.699147 2026] [security2:error] [pid 435730] [client 139.59.127.44:59865] [client 139.59.127.44] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "paulshipley.id.au"] [uri "/.github"] [unique_id "asa676cqNHfok_sAAxIfngAAAAE"], referer: https://www.google.com/ ... show less	Web App Attack
🇩🇪 mxinfra	2025-04-22 22:48:05 (1 year ago)	Blocked by Fail2Ban (plesk-modsecurity)	Hacking Brute-Force Web App Attack

Showing 1 to 15 of 27 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 218.78.21.134

🇺🇸 66.228.53.157

🇦🇺 34.129.173.241

🇺🇸 3.89.209.40

🇺🇸 209.87.169.142

🇳🇱 193.47.62.69

🇸🇬 193.37.32.186

🇫🇷 185.177.72.75

🇱🇧 185.76.178.77

🇺🇸 184.105.247.242

🇺🇸 172.121.178.246

🇲🇦 160.178.246.163

🇸🇬 139.59.234.78

🇳🇱 109.160.32.105

🇵🇰 103.255.67.117

🇳🇱 77.83.39.94

🇳🇱 45.148.10.152

🇺🇸 34.19.112.152

🇬🇧 5.252.83.131

🇬🇧 200.138.46.152