AbuseIPDB » 139.59.166.15

139.59.166.15 was found in our database!

This IP was reported 164 times. Confidence of Abuse is 100%: ?

100%

ISP	DigitalOcean LLC
Usage Type	Data Center/Web Hosting/Transit
Domain Name	digitalocean.com
Country	United Kingdom of Great Britain and Northern Ireland
City	London, England

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 139.59.166.15

Whois 139.59.166.15

IP Abuse Reports for 139.59.166.15:

This IP address has been reported a total of 164 times from 57 distinct sources. 139.59.166.15 was first reported on October 9th 2022, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
statistics indonesia	2024-09-27 17:52:59 (1 week ago)	WP Admin Scan Activities	Web App Attack
Anonymous	2024-09-26 23:06:00 (1 week ago)	File inclusion	Hacking Web App Attack
statistics indonesia	2024-09-26 12:30:13 (1 week ago)	WP Admin Scan Activities	Web App Attack
rtbh.com.tr	2024-09-25 20:54:18 (1 week ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
cmbplf	2024-09-25 09:32:37 (1 week ago)	196 requests to */wp-includes/wlwmanifest.xml	Brute-Force Bad Web Bot
mnsf	2024-09-25 09:06:30 (1 week ago)	Login Too Frequent (7)	Brute-Force Web App Attack
mawan	2024-09-25 07:28:39 (1 week ago)	Suspected of having performed illicit activity on LAX server.	Web App Attack
axllent	2024-09-25 07:22:34 (1 week ago)	Scanning for exploits - //wp-includes/wlwmanifest.xml	Web App Attack
hermawan	2024-09-24 17:09:30 (1 week ago)	[Tue Sep 24 13:11:46.014298 2024] [security2:error] [pid 109486:tid 134236247951040] [client 139.59. ... show more[Tue Sep 24 13:11:46.014298 2024] [security2:error] [pid 109486:tid 134236247951040] [client 139.59.166.15:54288] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "300" at REQUEST_HEADERS:Keep-Alive. [file "/etc/modsecurity/coreruleset-4.5.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "120"] [id "440004"] [msg "Keep Alive Header"] [data "Matched Data: 300 found within REQUEST_HEADERS:Keep-Alive: 300 request_line = GET / HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/"] [unique_id "ZvJYIiHvDlmLGw2P8G6lNwAAAUw"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[109525] [Af9MYRcIS/M] [ZvJYIiHvDlmLGw2P8G6lNwAAAUw] keep_alive=[0] [2024-09-24 13:11:46.014303] [R:ZvJYIiHvDlmLGw2P8G6lNwAAAUw] UA:'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36' Host:'staklim-jatim.bmkg.go.id' ACCEPT:'text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8' Accept-Language: ... show less	Hacking Web App Attack
Burayot	2024-09-24 16:53:03 (1 week ago)	LF_APACHE_403: 139.59.166.15 (GB/United Kingdom/-), more than 10 Apache 403 hits in the last 3600 se ... show moreLF_APACHE_403: 139.59.166.15 (GB/United Kingdom/-), more than 10 Apache 403 hits in the last 3600 secs show less	Web App Attack
bigorre.org	2024-09-24 11:25:19 (1 week ago)	suspicious query, Sniffing for wordpress plugins log:/wp-content/plugins/cakil/up.php	Web App Attack
statistics indonesia	2024-09-24 10:31:43 (1 week ago)	WP Admin Scan Activities	Web App Attack
Hirte	2024-09-24 05:38:10 (1 week ago)	ABV: Web Attack GET //wp-includes/wlwmanifest.xml	Web Spam Hacking Bad Web Bot Web App Attack
mawan	2024-09-24 05:27:12 (1 week ago)	Suspected of having performed illicit activity on LAX server.	Web App Attack
bigorre.org	2024-09-24 05:23:05 (1 week ago)	suspicious query, Sniffing for wordpress log://wp-includes/wlwmanifest.xml	Web App Attack