AbuseIPDB » 139.59.153.66

139.59.153.66 was found in our database!

This IP was reported 42 times. Confidence of Abuse is 63%: ?

63%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
Domain Name	digitalocean.com
Country	Germany
City	Frankfurt am Main, Hesse

Report 139.59.153.66

Whois 139.59.153.66

IP Abuse Reports for 139.59.153.66:

This IP address has been reported a total of 42 times from 31 distinct sources. 139.59.153.66 was first reported on August 31st 2021, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
marioselgreco	2024-11-16 01:03:28 (3 weeks ago)	Automated report from mail server logs	Email Spam Hacking Spoofing
marioselgreco	2024-11-15 01:03:15 (3 weeks ago)	Automated report from mail server logs	Email Spam Hacking Spoofing
rtbh.com.tr	2024-11-14 20:53:19 (3 weeks ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
marioselgreco	2024-11-14 00:03:56 (4 weeks ago)	Automated report from mail server logs	Email Spam Hacking Spoofing
chronos	2024-11-13 22:57:51 (4 weeks ago)	[AUTORAVALT][[13/11/2024 - 19:57:51 -03:00 UTC] Attack from [Asia Pacific Network Information ... show more[AUTORAVALT][[13/11/2024 - 19:57:51 -03:00 UTC] Attack from [Asia Pacific Network Information Centre] [139.59.153.66]-[RANGE:139.59.128.0 - 139.59.159.255] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infected attachments, and phishing emails. Hacking... Unauthorized attempts to access the server. Spoofing -> E] ... show less	Phishing Email Spam Hacking Spoofing Brute-Force
rtbh.com.tr	2024-11-13 20:53:19 (4 weeks ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
Lazarus	2024-11-13 07:31:04 (4 weeks ago)	SMTP probe.	Brute-Force
gu-alvareza	2024-11-13 07:05:22 (4 weeks ago)	Nmap.Script.Scanner	Port Scan
itak	2024-11-12 21:33:54 (4 weeks ago)	postfix Server DDoS - AUTH drops, early HANGUPs, other DDoS attacks, etc. Might contain brute-force ... show morepostfix Server DDoS - AUTH drops, early HANGUPs, other DDoS attacks, etc. Might contain brute-force dictionary attack sightings on IMAP and SMTP. show less	DDoS Attack Port Scan
Anonymous	2024-11-12 19:28:12 (4 weeks ago)	Attempted Evox shell access: /evox/about	Hacking Bad Web Bot
mw	2024-11-12 07:26:10 (4 weeks ago)	139.59.153.66 - - [12/Nov/2024:01:26:00 -0600] "GET /nice%20ports%2C/Tri%6Eity.txt%2ebak HTTP/1.0" 4 ... show more139.59.153.66 - - [12/Nov/2024:01:26:00 -0600] "GET /nice%20ports%2C/Tri%6Eity.txt%2ebak HTTP/1.0" 404 180241 "-" "-" 139.59.153.66 - - [12/Nov/2024:01:26:08 -0600] "GET /odinhttpcall1731396366 HTTP/1.1" 404 178567 "-" "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)" 139.59.153.66 - - [12/Nov/2024:01:26:08 -0600] "POST /sdk HTTP/1.1" 404 178529 "-" "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)" 139.59.153.66 - - [12/Nov/2024:01:26:09 -0600] "GET /HNAP1 HTTP/1.1" 404 178534 "-" "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)" 139.59.153.66 - - [12/Nov/2024:01:26:09 -0600] "GET /evox/about HTTP/1.1" 404 178544 "-" "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)" ... show less	Bad Web Bot Web App Attack
gu-alvareza	2024-11-12 07:05:23 (4 weeks ago)	Nmap.Script.Scanner	Port Scan
rakkor	2024-11-12 01:09:16 (1 month ago)	2024/11/12 01:09:15 [error] 8225#8225: 347108 open() "/var/services/web/sdk" failed (2: No such fil ... show more2024/11/12 01:09:15 [error] 8225#8225: 347108 open() "/var/services/web/sdk" failed (2: No such file or directory), client: 139.59.153.66, server: , request: "POST /sdk HTTP/1.1", host: "86.18.121.28" 2024/11/12 01:09:15 [error] 8224#8224: *347110 open() "/var/services/web/odinhttpcall1731373755" failed (2: No such file or directory), client: 139.59.153.66, server: , request: "GET /odinhttpcall1731373755 HTTP/1.1", host: "86.18.121.28" ... show less	Hacking Brute-Force Web App Attack
JCB	2024-11-11 18:44:00 (1 month ago)	139.59.153.66 - - [11/Nov/2024:00:38:17 +0200] "POST /sdk HTTP/1.1" 404 196 139.59.153.66 - - ... show more139.59.153.66 - - [11/Nov/2024:00:38:17 +0200] "POST /sdk HTTP/1.1" 404 196 139.59.153.66 - - [11/Nov/2024:00:38:17 +0200] "GET /odinhttpcall1731278297 HTTP/1.1" 404 196 139.59.153.66 - - [11/Nov/2024:00:38:17 +0200] "GET /evox/about HTTP/1.1" 404 196 ... show less	Hacking Web App Attack
N3ilawx	2024-11-11 16:17:34 (1 month ago)	Fail2Ban detect something wrong with this ip 139.59.153.66 - GET - 444 - [11/Nov/2024:16:17:33 +0000 ... show moreFail2Ban detect something wrong with this ip 139.59.153.66 - GET - 444 - [11/Nov/2024:16:17:33 +0000] 139.59.153.66 - OPTIONS - 444 - [11/Nov/2024:16:17:33 +0000] 139.59.153.66 - - - 400 - [11/Nov/2024:16:17:33 +0000] 139.59.153.66 - GET - 444 - [11/Nov/2024:16:17:33 +0000] 139.59.153.66 - GET - 444 - [11/Nov/2024:16:17:33 +0000] 139.59.153.66 - POST - 444 - [11/Nov/2024:16:17:33 +0000] 139.59.153.66 - - - 400 - [11/Nov/2024:16:17:33 +0000] 139.59.153.66 - - - 400 - [11/Nov/2024:16:17:33 +0000] 139.59.153.66 - - - 400 - [11/Nov/2024:16:17:33 +0000] 139.59.153.66 - - - 400 - [11/Nov/2024:16:17:33 +0000] ... show less	Brute-Force Web App Attack