AbuseIPDB » 139.59.152.243

139.59.152.243 was found in our database!

This IP was reported 117 times. Confidence of Abuse is 0%: ?

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 139.59.152.243

Whois 139.59.152.243

IP Abuse Reports for 139.59.152.243:

This IP address has been reported a total of 117 times from 88 distinct sources. 139.59.152.243 was first reported on December 30th 2023, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Soapy7261	2024-11-11 22:39:22 (2 months ago)	HTTP Method: GET \| Tried to access: /v2/_catalog --- This report is automated ---	Brute-Force Web App Attack
Largnet SOC	2024-11-11 22:38:39 (2 months ago)	139.59.152.243 triggered Icarus honeypot on port 110. Check us out on github.	Port Scan Hacking
Eric	2024-11-11 22:16:58 (2 months ago)	Blocked by jail apache-security2	Hacking Web App Attack
drewf.ink	2024-11-11 20:46:50 (2 months ago)	[20:46] Port scanning. Port(s) scanned: TCP/143	Port Scan
ParaBug	2024-11-11 13:14:28 (2 months ago)	139.59.152.243 - - [11/Nov/2024:14:14:27 +0100] "GET /query?q=SHOW+DIAGNOSTICS HTTP/1.1" 403 363 "-" ... show more139.59.152.243 - - [11/Nov/2024:14:14:27 +0100] "GET /query?q=SHOW+DIAGNOSTICS HTTP/1.1" 403 363 "-" "Go-http-client/1.1" ... show less	Phishing Brute-Force Web App Attack
m2jest1c	2024-11-11 13:05:01 (2 months ago)	2024-11-11T08:05:00.380201-05:00 debian-8gb-ash-1 sshd[2367632]: Connection closed by 139.59.152.243 ... show more2024-11-11T08:05:00.380201-05:00 debian-8gb-ash-1 sshd[2367632]: Connection closed by 139.59.152.243 port 18786 [preauth] ... show less	Brute-Force SSH
dpinse	2024-11-11 13:03:38 (2 months ago)	teler detected Bad Crawler against resource /solr/admin/info/system from 139.59.152.243	Bad Web Bot
Anonymous	2024-11-11 11:46:29 (2 months ago)	[10/Nov/2024:17:10:11 -0500] \"GET /solr/admin/info/system HTTP/1.1\" \"Go-http-client/1.1\" [ ... show more[10/Nov/2024:17:10:11 -0500] \"GET /solr/admin/info/system HTTP/1.1\" \"Go-http-client/1.1\" [10/Nov/2024:17:10:11 -0500] \"GET /cgi-bin/authLogin.cgi HTTP/1.1\" \"Go-http-client/1.1\" [10/Nov/2024:17:10:12 -0500] \"GET /solr/admin/cores?action=STATUS&wt=json HTTP/1.1\" \"Go-http-client/1.1\" show less	Hacking
pinguin	2024-11-11 10:32:38 (2 months ago)	Fail2Ban ...	Brute-Force
essinghigh	2024-11-11 10:25:10 (2 months ago)	1731320708 # Service_probe # SIGNATURE_SEND # source_ip:139.59.152.243 # dst_port:995 ...	Port Scan
robotstxt	2024-11-11 08:57:21 (2 months ago)	139.59.152.243 - - [11/Nov/2024:08:56:29 +0000] "GET /cgi-bin/authLogin.cgi HTTP/1.1" 400 254 "-" rt ... show more139.59.152.243 - - [11/Nov/2024:08:56:29 +0000] "GET /cgi-bin/authLogin.cgi HTTP/1.1" 400 254 "-" rt="0.000" "Go-http-client/1.1" "-" h="82.152.2.54" sn="nutridoc.aymonline.events" ru="/cgi-bin/authLogin.cgi" u="/cgi-bin/authLogin.cgi" ucs="-" ua="-" us="-" uct="-" urt="-" 139.59.152.243 - - [11/Nov/2024:08:56:29 +0000] "GET /solr/admin/info/system HTTP/1.1" 400 254 "-" rt="0.000" "Go-http-client/1.1" "-" h="82.152.2.54" sn="nutridoc.aymonline.events" ru="/solr/admin/info/system" u="/solr/admin/info/system" ucs="-" ua="-" us="-" uct="-" urt="-" 139.59.152.243 - - [11/Nov/2024:08:56:29 +0000] "GET /solr/admin/cores?action=STATUS&wt=json HTTP/1.1" 400 254 "-" rt="0.000" "Go-http-client/1.1" "-" h="82.152.2.54" sn="nutridoc.aymonline.events" ru="/solr/admin/cores?action=STATUS&wt=json" u="/solr/admin/cores" ucs="-" ua="-" us="-" uct="-" urt="-" 139.59.152.243 - - [11/Nov/2024:08:56:29 +0000] "GET /cgi-bin/authLogin.cgi HTTP/1.1" 400 254 "-" "Go-http-client/1.1" "-" 139.59.152.243 - - [11/ ... show less	Web Spam Web App Attack
Mailguard-FRD	2024-11-11 08:56:36 (2 months ago)	Nov 11 09:56:35 [redacted] dovecot: imap-login: Disconnected (no auth attempts in 30 secs): user=<>, ... show moreNov 11 09:56:35 [redacted] dovecot: imap-login: Disconnected (no auth attempts in 30 secs): user=<>, rip=139.59.152.243, lip=[redacted], TLS handshaking: Connection closed, session=<ZkIhR58mVnyLO5jz> ... show less	Email Spam Brute-Force
Anonymous	2024-11-11 08:55:10 (2 months ago)	postfix	Email Spam Web App Attack
llighthunter	2024-11-11 08:51:52 (2 months ago)	Nov 8 07:03:50 mail dovecot: pop3-login: Disconnected (no auth attempts in 1 secs): user=<>, rip=13 ... show moreNov 8 07:03:50 mail dovecot: pop3-login: Disconnected (no auth attempts in 1 secs): user=<>, rip=139.59.152.243, lip=192.168.1.80, TLS, session=<eao2rV8mFBGLO5jz> Nov 8 07:03:51 mail dovecot: pop3-login: Disconnected: Too many bad commands (no auth attempts in 0 secs): user=<>, rip=139.59.152.243, lip=192.168.1.80, session=<qi1RrV8mGBGLO5jz> Nov 8 07:03:51 mail dovecot: pop3-login: Disconnected: Too many bad commands (no auth attempts in 0 secs): user=<>, rip=139.59.152.243, lip=192.168.1.80, session=<bZFTrV8mHBGLO5jz> show less	Port Scan Hacking Spoofing
netfactotum	2024-11-11 08:40:34 (2 months ago)		Hacking Web App Attack