This IP address has been reported a total of
149
times from
117 distinct
sources.
139.59.135.96 was first reported on
, and the most recent report was
.
In the last 60 days, the only reporter location was:
Germany
with 1
report.
The most common categories in these recent reports were:
Port Scan
1
time;
Hacking
1
time.
Old Reports
The most recent abuse report for this IP address is from
. It is possible that this IP is no
longer involved in abusive activities.
Attack against a personal web server: HTTP scanning for common exploit paths (wp-login, .env, phpMyA ...
show moreAttack against a personal web server: HTTP scanning for common exploit paths (wp-login, .env, phpMyAdmin, etc.). Detected + blocked by fail2ban / nginx / firewall. Automated report.
show less
Attack against a personal web server: HTTP scanning for common exploit paths (wp-login, .env, phpMyA ...
show moreAttack against a personal web server: HTTP scanning for common exploit paths (wp-login, .env, phpMyAdmin, etc.). Detected + blocked by fail2ban / nginx / firewall. Automated report.
show less
Attack against a personal web server: HTTP scanning for common exploit paths (wp-login, .env, phpMyA ...
show moreAttack against a personal web server: HTTP scanning for common exploit paths (wp-login, .env, phpMyAdmin, etc.). Detected + blocked by fail2ban / nginx / firewall. Automated report.
show less
Attack against a personal web server: HTTP scanning for common exploit paths (wp-login, .env, phpMyA ...
show moreAttack against a personal web server: HTTP scanning for common exploit paths (wp-login, .env, phpMyAdmin, etc.). Detected + blocked by fail2ban / nginx / firewall. Automated report.
show less
Aug 8 15:23:57 mail dovecot: pop3-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=13 ...
show moreAug 8 15:23:57 mail dovecot: pop3-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=139.59.135.96, lip=192.168.1.80, TLS, session=<YOT+MYhYJhaLO4dg>
Aug 8 15:23:58 mail dovecot: pop3-login: Disconnected: Too many bad commands (no auth attempts in 0 secs): user=<>, rip=139.59.135.96, lip=192.168.1.80, session=<fSoQMohYKhaLO4dg>
Aug 8 15:23:59 mail dovecot: pop3-login: Disconnected: Too many bad commands (no auth attempts in 0 secs): user=<>, rip=139.59.135.96, lip=192.168.1.80, session=<Qq8SMohYLhaLO4dg>
show less
Attack against a personal web server: HTTP scanning for common exploit paths (wp-login, .env, phpMyA ...
show moreAttack against a personal web server: HTTP scanning for common exploit paths (wp-login, .env, phpMyAdmin, etc.). Detected + blocked by fail2ban / nginx / firewall. Automated report.
show less
Automated report from fail2ban on mail.fitzgerald.eu. Jail: postfix. First seen: 2026-08-09 03:00:10 ...
show moreAutomated report from fail2ban on mail.fitzgerald.eu. Jail: postfix. First seen: 2026-08-09 03:00:10. Events: 21. Reported by ipdb-security/fitzgerald.eu
show less
Attack against a personal web server: HTTP scanning for common exploit paths (wp-login, .env, phpMyA ...
show moreAttack against a personal web server: HTTP scanning for common exploit paths (wp-login, .env, phpMyAdmin, etc.). Detected + blocked by fail2ban / nginx / firewall. Automated report.
show less
Connection to port 8500 with data transfer.
Data preview: GET /v1/agent/self HTTP/1.1
Host: 107.175 ...
show moreConnection to port 8500 with data transfer.
Data preview: GET /v1/agent/self HTTP/1.1
Host: 107.175.212.44:8500
User-Agent: Go-http-client/1.1
Connection:
show less
Aug 8 15:23:57 mail dovecot: pop3-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=13 ...
show moreAug 8 15:23:57 mail dovecot: pop3-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=139.59.135.96, lip=192.168.1.80, TLS, session=<YOT+MYhYJhaLO4dg>
Aug 8 15:23:58 mail dovecot: pop3-login: Disconnected: Too many bad commands (no auth attempts in 0 secs): user=<>, rip=139.59.135.96, lip=192.168.1.80, session=<fSoQMohYKhaLO4dg>
Aug 8 15:23:59 mail dovecot: pop3-login: Disconnected: Too many bad commands (no auth attempts in 0 secs): user=<>, rip=139.59.135.96, lip=192.168.1.80, session=<Qq8SMohYLhaLO4dg>
show less
