JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 139.59.147.123

139.59.147.123 was found in our database!

This IP was reported 37 times. Confidence of Abuse is 100%: ?

100%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 139.59.147.123

Whois 139.59.147.123

IP Abuse Reports for 139.59.147.123:

This IP address has been reported a total of 37 times from 27 distinct sources. 139.59.147.123 was first reported on October 14th 2026, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇦 llighthunter	2026-10-17 14:14:21 (5 hours ago)	Oct 17 17:14:11 mail dovecot: pop3-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=13 ... show more Oct 17 17:14:11 mail dovecot: pop3-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=139.59.147.123, lip=192.168.1.80, TLS handshaking: read(size=1026) failed: Connection reset by peer, session=<7/oW5Qlec1uLO5N7> Oct 17 17:14:17 mail dovecot: pop3-login: Disconnected (no auth attempts in 6 secs): user=<>, rip=139.59.147.123, lip=192.168.1.80, TLS handshaking: SSL_accept() failed: error:1420918C:SSL routines:tls_early_post_process_client_hello:version too low, session=<EuZw5QleHR6LO5N7> Oct 17 17:14:19 mail dovecot: pop3-login: Disconnected (no auth attempts in 2 secs): user=<>, rip=139.59.147.123, lip=192.168.1.80, TLS handshaking: Connection closed, session=<hxqM5QlepRqLO5N7> show less	Port Scan Hacking Spoofing
🇫🇷 Kraften	2026-10-17 14:07:51 (5 hours ago)	Dovecot imap-login 2 ...	DDoS Attack Brute-Force
🇦🇪 abusiveIntelligence	2026-10-17 13:30:00 (6 hours ago)	RDP connect attempt: Nmap Scanner	Brute-Force
🇨🇦 dpinse	2026-10-17 11:40:10 (8 hours ago)	Honeypot [honeypot-ca-sensor1]: Brute-force attack detected on 23/TELNET • Credentials: GET / HTTP/1 ... show more Honeypot [honeypot-ca-sensor1]: Brute-force attack detected on 23/TELNET • Credentials: GET / HTTP/1.0:, OPTIONS / HTTP/1.0:, OPTIONS / RTSP/1.0:, OPTIONS sip:nm SIP/2.0:Via: SIP/2.0/TCP nm;branch=foo, From: <sip:nm@nm>;tag=root:To: <sip:nm2@nm2>, Call-ID: 50000:CSeq: 42 OPTIONS, Max-Forwards: 70:Content-Length: 0, Contact: <sip:nm@nm>:Accept: application/sdp • Number of login attempts: 8 show less	Brute-Force Hacking
🇨🇭 foobar	2026-10-17 07:48:07 (12 hours ago)	SMTP nagging	Email Spam Brute-Force
Anonymous	2026-10-17 06:51:10 (13 hours ago)	139.59.147.123 - - [17/Oct/2026:15:51:08 +0900] "GET / HTTP/1.0" 403 4659 "-" "-" 139.59.147.123 - - ... show more 139.59.147.123 - - [17/Oct/2026:15:51:08 +0900] "GET / HTTP/1.0" 403 4659 "-" "-" 139.59.147.123 - - [17/Oct/2026:15:51:09 +0900] "GET /odinhttpcall1792219868 HTTP/1.1" 403 4656 "-" "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)" 139.59.147.123 - - [17/Oct/2026:15:51:09 +0900] "POST /sdk HTTP/1.1" 403 4657 "-" "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)" 139.59.147.123 - - [17/Oct/2026:15:51:10 +0900] "GET /HNAP1 HTTP/1.1" 403 4655 "-" "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)" 139.59.147.123 - - [17/Oct/2026:15:51:10 +0900] "GET /evox/about HTTP/1.1" 403 4655 "-" "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)" ... show less	Brute-Force
🇺🇸 gu-alvareza	2026-10-17 05:06:09 (15 hours ago)	Nmap.Script.Scanner	Port Scan
🇫🇷 Kejult	2026-10-17 05:03:46 (15 hours ago)	Honeypot Finding: repeated TCP service probing on TCP/443 (HTTPS); 8 application-level events across ... show more Honeypot Finding: repeated TCP service probing on TCP/443 (HTTPS); 8 application-level events across 8 source port(s). Sensor(s): H0neytr4p. show less	Port Scan
🇫🇮 23p02732	2026-10-17 03:08:17 (16 hours ago)	Mailserver and mailaccount attacks	Brute-Force Bad Web Bot Exploited Host Web App Attack
🇫🇷 Kejult	2026-10-17 02:13:13 (17 hours ago)	Honeypot Finding: active TCP application payload captured by Honeytrap; 16 payload-bearing connectio ... show more Honeypot Finding: active TCP application payload captured by Honeytrap; 16 payload-bearing connection/event(s), 973 payload byte(s) total, maximum payload 223 byte(s). Target port(s): 8000. show less	Port Scan Hacking
🇩🇪 Kejult	2026-10-16 23:03:31 (21 hours ago)	Honeypot Finding: repeated TCP service probing on TCP/10250 (service); 13 application-level events a ... show more Honeypot Finding: repeated TCP service probing on TCP/10250 (service); 13 application-level events across 13 source port(s). Sensor(s): Honeytrap. show less	Port Scan
🇮🇹 CoreTech srl	2026-10-16 22:06:18 (21 hours ago)	[DC: IP:151.1.252.27] ntopng alert: blacklisted_client_contact,ndpi_unsafe_protocol	Hacking
🇸🇬 drewf.ink	2026-10-16 17:44:52 (1 day ago)	[17:44] Port scanning. Port(s) scanned: TCP/6000	Port Scan
🇫🇷 Kejult	2026-10-16 08:46:32 (1 day ago)	Honeypot Finding: SMB activity on TCP/445; 13 Dionaea events.	Port Scan
🇺🇸 zwebvigil	2026-10-16 06:27:38 (1 day ago)	139.59.147.123 [15/Oct/2026:23:27:37 -0700] "GET / HTTP/1.0" 401 381 "-" port=21543 "-" "-" "-" "-" ... show more 139.59.147.123 [15/Oct/2026:23:27:37 -0700] "GET / HTTP/1.0" 401 381 "-" port=21543 "-" "-" "-" "-" 1238 139.59.147.123 [15/Oct/2026:23:27:37 -0700] "GET /odinhttpcall1792132057 HTTP/1.1" 401 381 "-" port=22839 "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)" "-" "-" "<ipaddr>" 902 139.59.147.123 [15/Oct/2026:23:27:37 -0700] "POST /sdk HTTP/1.1" 401 381 "-" port=3395 "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)" "-" "-" "<ipaddr>" 550 139.59.147.123 [15/Oct/2026:23:27:37 -0700] "GET / HTTP/1.0" 401 381 "-" port=14317 "-" "-" "-" "-" 2082 139.59.147.123 [15/Oct/2026:23:27:37 -0700] "GET /evox/about HTTP/1.1" 401 381 "-" port=9161 "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)" "-" "-" "<ipaddr>" 928 139.59.147.123 [15/Oct/2026:23:27:37 -0700] "GET /odinhttpcall1792132057 HTTP/1.1" 401 381 "-" port=20437 "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)" "-" "-" show less	Web App Attack

Showing 1 to 15 of 37 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇦 188.54.121.72

🇫🇷 185.41.28.5

🇵🇱 176.53.159.198

🇧🇯 137.255.22.193

🇳🇱 109.160.32.174

🇿🇦 102.211.186.88

🇨🇦 85.217.149.64

🇮🇷 85.198.19.217

🇳🇱 77.239.124.69

🇺🇸 20.96.179.87

🇸🇦 2.90.67.186

🇺🇸 216.25.89.119

🇳🇱 206.189.2.243

🇧🇷 189.28.166.99

🇺🇸 188.241.205.58

🇲🇽 187.189.174.239

🇳🇮 186.77.199.111

🇧🇷 177.172.146.150

🇩🇪 154.91.170.52

🇭🇰 152.32.175.168