JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 139.59.151.64

139.59.151.64 was found in our database!

This IP was reported 45 times. Confidence of Abuse is 100%: ?

100%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 139.59.151.64

Whois 139.59.151.64

IP Abuse Reports for 139.59.151.64:

This IP address has been reported a total of 45 times from 34 distinct sources. 139.59.151.64 was first reported on January 2nd 2022, and the most recent report was 7 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 gregoo23	2026-05-29 11:00:36 (5 days ago)	...	Brute-Force
🇺🇸 gu-alvareza	2026-05-29 07:05:08 (5 days ago)	Nmap.Script.Scanner	Port Scan
🇯🇵 VXG-NET	2026-05-29 06:26:09 (5 days ago)	port=8080, indicator_type=hacktool	Hacking
🇩🇪 lespbaj	2026-05-29 05:44:06 (5 days ago)	139.59.151.64 - - [29/May/2026:05:44:04 +0000] "GET / HTTP/1.0" 400 230 "-" "-" 139.59.151.64 - - [2 ... show more 139.59.151.64 - - [29/May/2026:05:44:04 +0000] "GET / HTTP/1.0" 400 230 "-" "-" 139.59.151.64 - - [29/May/2026:05:44:04 +0000] "GET /odinhttpcall1780033444 HTTP/1.1" 400 230 "-" "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)" 139.59.151.64 - - [29/May/2026:05:44:04 +0000] "POST /sdk HTTP/1.1" 400 230 "-" "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)" 139.59.151.64 - - [29/May/2026:05:44:04 +0000] "GET /evox/about HTTP/1.1" 400 230 "-" "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)" 139.59.151.64 - - [29/May/2026:05:44:04 +0000] "GET /HNAP1 HTTP/1.1" 400 230 "-" "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)" ... show less	Web App Attack
🇧🇾 hbars.by	2026-05-28 18:04:14 (6 days ago)	2026-05-28T21:04:14.061537+03:00 radionet dovecot: imap-login: Disconnected: Connection closed (no a ... show more 2026-05-28T21:04:14.061537+03:00 radionet dovecot: imap-login: Disconnected: Connection closed (no auth attempts in 0 secs): user=<>, rip=139.59.151.64, lip=192.168.3.3, session=</JJSjuRSh9WLO5dA> 2026-05-28T21:04:14.289418+03:00 radionet dovecot: imap-login: Disconnected: Connection closed (no auth attempts in 0 secs): user=<>, rip=139.59.151.64, lip=192.168.3.3, session=<eA1WjuRSETuLO5dA> show less	Brute-Force
🇺🇸 Hobby Bob	2026-05-28 17:10:44 (6 days ago)	2026-05-28T17:10:44.818125+00:00 server dovecot: imap-login: Disconnected: Connection closed (no aut ... show more 2026-05-28T17:10:44.818125+00:00 server dovecot: imap-login: Disconnected: Connection closed (no auth attempts in 0 secs): user=, rip=139.59.151.64, lip=X.X.X.X session= show less	Port Scan Hacking
🇩🇪 licen777	2026-05-28 12:27:42 (6 days ago)	Cowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-05-28T12:26:42Z and 2026-05-2 ... show more Cowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-05-28T12:26:42Z and 2026-05-28T12:27:41Z show less	Brute-Force SSH
🇬🇷 ggb_st	2026-05-28 02:58:01 (6 days ago)	[2026-05-28 02:58:00] 139.59.151.64 triggered a honeypot. Requested on port 80. URI: /HNAP1, UA: Moz ... show more [2026-05-28 02:58:00] 139.59.151.64 triggered a honeypot. Requested on port 80. URI: /HNAP1, UA: Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/) ... show less	Bad Web Bot Brute-Force Web App Attack Hacking SQL Injection
🇦🇪 abusiveIntelligence	2026-05-27 19:50:00 (1 week ago)	RDP connect attempt: Nmap Scanner	Brute-Force
🇫🇮 licen777	2026-05-27 07:26:36 (1 week ago)	Cowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-05-27T07:25:33Z and 2026-05-2 ... show more Cowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-05-27T07:25:33Z and 2026-05-27T07:26:35Z show less	Brute-Force SSH
🇬🇧 seniorlinuxadmin	2026-05-27 07:15:40 (1 week ago)	May 27 08:15:33 - dovecot: imap-login: Disconnected: Connection closed: read(size=1026) failed: Conn ... show more May 27 08:15:33 - dovecot: imap-login: Disconnected: Connection closed: read(size=1026) failed: Connection reset by peer (no auth attempts in 0 secs): user=<>, rip=139.59.151.64, lip=host, TLS handshaking: read(size=1026) failed: Connection reset by peer, session=<f66eYMdSyaqLO5dA> May 27 08:15:39 - dovecot: imap-login: Disconnected: Connection closed: SSL_accept() failed: error:0A00018C:SSL routines::version too low (no auth attempts in 6 secs): user=<>, rip=139.59.151.64, lip=host, TLS handshaking: SSL_accept() failed: error:0A00018C:SSL routines::version too low, session=<qzX+YMdSfUKLO5dA> May 27 08:15:39 - dovecot: imap-login: Disconnected: Connection closed: SSL_accept() failed: error:0A0000C1:SSL routines::no shared cipher (no auth attempts in 0 secs): user=<>, rip=139.59.151.64, lip=host, TLS handshaking: SSL_accept() failed: error:0A0000C1:SSL routines::no shared cipher, session=<sun/YMdSZw2LO5dA> show less	Port Scan Brute-Force
🇺🇸 gu-alvareza	2026-05-27 07:05:18 (1 week ago)	Nmap.Script.Scanner	Port Scan
🇩🇪 excill	2026-05-27 03:13:45 (1 week ago)	Honeypot mesh observed 48 attack events in 24h — cowrie/dionaea/heralding/suricata	Port Scan Hacking Brute-Force SSH
🇹🇷 0xi	2026-05-27 03:00:32 (1 week ago)	Malicious scanning and attack activity detected (149 attempts). Targeted ports: 8000. Triggered sens ... show more Malicious scanning and attack activity detected (149 attempts). Targeted ports: 8000. Triggered sensors: P0f, Suricata, Honeytrap. Observed via distributed honeypot network. show less	Port Scan
🇦🇪 abusiveIntelligence	2026-05-27 00:50:00 (1 week ago)	RDP connect attempt: Nmap Scanner	Brute-Force

Showing 16 to 30 of 45 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 193.3.53.8

🇺🇸 185.255.100.250

🇨🇳 153.37.227.44

🇮🇳 122.187.230.162

🇫🇷 88.138.20.172

🇲🇾 47.250.155.223

🇳🇱 45.148.10.121

🇨🇳 27.18.68.250

🇳🇱 213.177.179.127

🇧🇷 200.165.15.78

🇬🇧 185.247.137.196

🇺🇸 167.172.223.199

🇫🇮 147.185.133.225

🇰🇷 121.66.124.147

🇸🇬 121.6.81.59

🇨🇳 117.80.152.104

🇷🇺 94.25.40.30

🇨🇳 61.146.129.133

🇫🇮 45.154.244.2

🇮🇳 36.50.167.81