139.59.129.37

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
125 reports
85 reporters · latest 7 minutes ago
ISP
DigitalOcean, LLC
Usage Type
Data Center/Web Hosting/Transit
ASN
AS14061
Domain Name
digitalocean.com
Country
🇩🇪 Germany
City
Frankfurt am Main, Hesse
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
125 from 85 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇫🇷 France 24 🇩🇪 Germany 12 🇺🇸 United States of America 9
Most common categories Port Scan 37 Web App Attack 25 Brute-Force 23 Bad Web Bot 12 Hacking 9
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇩🇪 D3vNu11
Level: (LOW): Service Abuse via Mailoney IOC Country: Germany 2x -> Target Country: Polen EMAIL
Brute-Force SSH
Anonymous
Kept connecting and disconnecting without issuing any commands
DDoS Attack
🇺🇸 lavnet.net
Brute-Force Web App Attack
🇫🇷 Kejult
Honeypot Finding: repeated TCP service probing on TCP/9042 (service); 2 application-level events across 2 source port(s). Sensor(s): Honeytrap.
Port Scan
🇫🇷 uthul
T-Pot honeypot: 8 hits on ports [6000] (automated)
Port Scan
🇫🇷 Kejult
Honeypot Finding: repeated TCP service probing on TCP/1234 (service); 2 application-level events across 2 source port(s). Sensor(s): Honeytrap.
Port Scan
🇧🇷 diego
[probe-168-134] 2026-11-09 14:40:03, Client: 139.59.129.37, Protocol: 6, Unauthorized activity to HTTP: GET /cgi-bin/authLogin.cgi
Web App Attack
🇵🇾 armandosaucedo.me
Threat Intelligence via ARMTI, Web Attack: GET /v2/_catalog
Web App Attack
🇫🇷 Kejult
Honeypot Finding: repeated TCP service probing on TCP/4891 (service); 2 application-level events across 2 source port(s). Sensor(s): Honeytrap.
Port Scan
🇺🇸 chronos
Brute-Force Email Spam Spoofing Phishing Hacking
🇫🇷 Kejult
Honeypot Finding: repeated TCP service probing on TCP/23 (Telnet); 2 application-level events across 2 source port(s). Sensor(s): Cowrie.
Port Scan
🇧🇪 sid3windr
GET /solr/admin/cores?action=STATUS&wt=json (Tarpitted for 1m4s, wasted 3.87kB)
Web App Attack
🇫🇷 EvoX
🛡️ Honeypot [bsts-tpot-sensor]: HTTP/1.1 request on 8500 GET / User-Agent: Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/) Accept: */* Accept-Encoding: gzip; 8500 [2] TCP
Hacking Bad Web Bot
Anonymous
SSH Port Scan Brute-Force
🇫🇷 Kejult
Honeypot Finding: repeated TCP service probing on TCP/18789 (service); 2 application-level events across 2 source port(s). Sensor(s): Honeytrap.
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 70.183.233.204
🇨🇴 190.61.44.37
🇪🇨 186.68.83.105
🇨🇳 116.179.32.30
🇨🇳 101.66.165.103
🇺🇦 93.170.162.49
🇳🇱 77.239.124.150
🇨🇳 36.25.251.109
🇰🇷 218.238.5.110
🇨🇴 181.52.151.86
🇵🇾 177.250.30.154
🇧🇷 177.220.177.158
🇧🇷 168.90.65.199
🇭🇰 156.236.66.15
🇮🇷 130.193.77.236
🇺🇸 34.22.50.240
feedback