This IP address has been reported a total of
15
times from
13 distinct
sources.
139.59.128.145 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Honeypot Finding: repeated TCP service probing on TCP/9042 (service); 2 application-level events acr ...
show moreHoneypot Finding: repeated TCP service probing on TCP/9042 (service); 2 application-level events across 2 source port(s). Sensor(s): Honeytrap.
show less
Oct 27 14:37:10 fermi postfix/submission/smtpd[1182509]: lost connection after STARTTLS from unknown ...
show moreOct 27 14:37:10 fermi postfix/submission/smtpd[1182509]: lost connection after STARTTLS from unknown[139.59.128.145]
Oct 27 14:37:12 fermi postfix/submission/smtpd[1182507]: lost connection after CONNECT from unknown[139.59.128.145]
Oct 27 14:37:12 fermi postfix/submission/smtpd[1182509]: lost connection after CONNECT from unknown[139.59.128.145]
Oct 27 14:37:12 fermi postfix/submission/smtpd[1182507]: lost connection after CONNECT from unknown[139.59.128.145]
Oct 27 14:37:12 fermi postfix/submission/smtpd[1182509]: lost connection after CONNECT from unknown[139.59.128.145]
Oct 27 14:37:13 fermi postfix/submission/smtpd[1182507]: lost connection after CONNECT from unknown[139.59.128.145]
Oct 27 14:37:13 fermi postfix/submission/smtpd[1182509]: lost connection after CONNECT from unknown[139.59.128.145]
Oct 27 14:37:13 fermi postfix/submission/smtpd[1182507]: lost connection after CONNECT from unknown[139.59.128.145]
Oct 27 14:37:13 fermi postfix/submission/smtpd[1182509]: lost connectio
...
show less
Honeypot hit: HTTP/1.1 request on 11434
GET /solr/admin/info/system
User-Agent: Go-http-client/1.1; ...
show moreHoneypot hit: HTTP/1.1 request on 11434
GET /solr/admin/info/system
User-Agent: Go-http-client/1.1; 11434 [7] TCP
show less
2026-10-27 07:27:33 SMTP protocol synchronization error \(input sent without waiting for greeting\): ...
show more2026-10-27 07:27:33 SMTP protocol synchronization error \(input sent without waiting for greeting\): rejected connection from H=\[139.59.128.145\] input="\026\003\003\001\250\001"
2026-10-27 07:27:38 SMTP protocol synchronization error \(input sent without waiting for greeting\): rejected connection from H=\[139.59.128.145\] input="\026\003\003\001\250\001"
2026-10-27 07:27:43 SMTP protocol synchronization error \(input sent without waiting for greeting\): rejected connection from H=\[139.59.128.145\] input="\026\003\003\001Y\001"
...
show less
🛡️ Honeypot [bsts-tpot-hive]: Unsolicited SMB connection (dst port 445/tcp, src port 52864) to a pas ...
show more🛡️ Honeypot [bsts-tpot-hive]: Unsolicited SMB connection (dst port 445/tcp, src port 52864) to a passive honeypot sensor. No legitimate SMB service is exposed here; this traffic is consistent with automated internet-wide scanning or exploitation attempts targeting SMB (e.g. EternalBlue-class vulnerabilities).
show less
Honeypot Finding: active TCP application payload captured by Honeytrap; 4 payload-bearing connection ...
show moreHoneypot Finding: active TCP application payload captured by Honeytrap; 4 payload-bearing connection/event(s), 594 payload byte(s) total, maximum payload 273 byte(s). Target port(s): 8086.
show less
Port Scan
Hacking
Showing 1 to
15
of 15 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩