139.59.166.179
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- DigitalOcean, LLC
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS14061
- Domain Name
- digitalocean.com
- Country
- 🇬🇧 United Kingdom of Great Britain and Northern Ireland
- City
- London, England
Abuse Reports
Total reports
28 from
25 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇵🇱 Budyn |
|
Bad Web Bot Web App Attack | |
| 🇧🇪 cmbplf |
4.010 POST requests with url.path */wp-login.php
|
Brute-Force Bad Web Bot | |
| 🇳🇱 Site.eu |
Suspicious multiple login attempts
|
Brute-Force Web App Attack | |
| 🇵🇱 Budyn |
[Budyn Fail2ban] | What happened: Web vulnerability scan | repeated probes for sensitive or exploitable paths triggered the web jail; source IP blocked.
|
Bad Web Bot Web App Attack | |
| 🇫🇮 toolbit.online |
Automated web reconnaissance - 1 suspicious requests within 1 seconds. Auto-banned by CrowdSec.
|
Web App Attack | |
| 🇩🇪 EGP Abuse Dept |
Scanning for web/db/file exploits on vianen.viaoptiek.nl
|
SQL Injection Bad Web Bot Web App Attack | |
| 🇺🇦 URAN Publishing Service |
[10/Nov/2026:04:13:56 +0200] -- 139.59.166.179 Ban reason: Scanner [CMS_GENERIC] | Request: GET /wp-login.php HTTP/1.1
|
Bad Web Bot Web App Attack | |
| 🇵🇱 Budyn |
[Budyn Honeypot Sinkhole] | Attack type: WP Path Scanning (Recon) | Summary: Web scanner triggered an emulated security trap. | Evidence: | Host: vault.teddypot.website | Path: /wp-login.php | User-Agent: Mozilla/5.0 | Request: [Empty / GET Request]
|
Bad Web Bot Web App Attack | |
| 🇨🇦 CentiDevOps |
Web app scan: 11 requests in 19 min across 4 domains (301/404/444). Paths: /wp-login.php, /wp-json/batch/v1, /fr/wp-json/batch/v1. Sample: 2026-11-10T02:03:08Z "GET /wp-login.php" 444
|
Brute-Force Web App Attack | |
| 🇯🇵 jsys |
Automated report (nfacl NetFlow analysis, 300s window): host sweep (256 distinct dst hosts)
|
Port Scan | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 993)
Source port: 35918
TTL: 48
Packet length: 60
TOS: 0x00
This report (for 139.59.166.179) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇹🇷 mixnet |
Port scan: SYN-only probes to 512 hosts / 1 port (993) in 10 minutes. Detected by Mixnet network flow monitoring.
|
Port Scan | |
| 🇹🇷 Domainhizmetleri.com |
Source: DH Hunter (Honeypot) | Reason: TLS Handshake Probe (993/tcp) [non-standard port]
|
Port Scan Hacking | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 993)
Source port: 37706
TTL: 53
Packet length: 60
TOS: 0x00
This report (for 139.59.166.179) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇫🇮 anycast_ac |
Blocked by UFW on legacypanel [993/tcp] | SPT: 43668 | TTL: 52 | LEN: 60 | TOS: 0x00 • Reported by: FemboyHolding LTD
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown