JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 139.59.233.227

139.59.233.227 was found in our database!

This IP was reported 91 times. Confidence of Abuse is 0%: ?

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 139.59.233.227

Whois 139.59.233.227

IP Abuse Reports for 139.59.233.227:

This IP address has been reported a total of 91 times from 51 distinct sources. 139.59.233.227 was first reported on February 3rd 2024, and the most recent report was 2 years ago.

Old Reports: The most recent abuse report for this IP address is from 2 years ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 Buster	2024-03-19 19:33:03 (2 years ago)	71 attack attempts from Perm Blocked ASN and country:	DDoS Attack Open Proxy VPN IP Hacking Web App Attack
🇬🇧 Buster	2024-03-11 19:33:03 (2 years ago)	71 attack attempts from Perm Blocked ASN and country:	DDoS Attack Open Proxy VPN IP Hacking Web App Attack
🇬🇧 Buster	2024-03-11 19:33:03 (2 years ago)	71 attack attempts from Perm Blocked ASN and country:	DDoS Attack Open Proxy VPN IP Hacking Web App Attack
🇩🇪 BGPengu	2024-03-01 20:12:56 (2 years ago)	139.59.233.227 - - [20/Feb/2024:00:32:36 +0000] "GET /wp HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows N ... show more 139.59.233.227 - - [20/Feb/2024:00:32:36 +0000] "GET /wp HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4859.172 Safari/537.36" ... show less	Web Spam Bad Web Bot
🇫🇮 nNordic	2024-02-19 12:52:41 (2 years ago)	Connection blocked by IDS/IPS from IP 139.59.233.227	Hacking
🇬🇧 Epimetheus	2024-02-19 00:02:49 (2 years ago)	Unauthorized access attempts: From: 139.59.233.227 Method: HTTP GET URI Path: /assets/plugins/ ... show more Unauthorized access attempts: From: 139.59.233.227 Method: HTTP GET URI Path: /assets/plugins/jquery-file-upload/server/php/ UA: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4859.172 Safari/537.36" show less	Web App Attack
🇮🇩 Burayot	2024-02-18 09:43:48 (2 years ago)	LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 139.59.233.227 (SG/Singapore/-): 2 i ... show more LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 139.59.233.227 (SG/Singapore/-): 2 in the last 3600 secs show less	Web App Attack
🇫🇷 LRNP	2024-02-18 07:30:34 (2 years ago)	mirror2.urbanterror.info:443 139.59.233.227 - - [18/Feb/2024:07:30:05 +0000] "GET /kcfinder/upload.p ... show more mirror2.urbanterror.info:443 139.59.233.227 - - [18/Feb/2024:07:30:05 +0000] "GET /kcfinder/upload.php HTTP/2.0" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4859.172 Safari/537.36" mirror2.urbanterror.info:443 139.59.233.227 - - [18/Feb/2024:07:30:09 +0000] "GET /asset/kcfinder/upload.php HTTP/2.0" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4859.172 Safari/537.36" mirror2.urbanterror.info:443 139.59.233.227 - - [18/Feb/2024:07:30:12 +0000] "GET /assets/kcfinder/upload.php HTTP/2.0" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4859.172 Safari/537.36" mirror2.urbanterror.info:443 139.59.233.227 - - [18/Feb/2024:07:30:15 +0000] "GET /js/kcfinder/upload.php HTTP/2.0" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4859.172 Safari/537.36" mirror2.urba ... show less	Bad Web Bot Web App Attack
🇺🇸 WebWizards.NZ	2024-02-17 22:13:30 (2 years ago)	Trolling for resource vulnerabilities	Web App Attack
🇨🇦 yukon.ca	2024-02-17 12:58:10 (2 years ago)	Web Server Enforcement Violation: Web Server Exposed Git Repository Information Disclosure Port:80	Hacking Exploited Host
🇳🇱 Savvii	2024-02-17 10:52:21 (2 years ago)	20 attempts against mh-misbehave-ban on thyme	Brute-Force Bad Web Bot Web App Attack
🇦🇺 MAGIC	2024-02-17 06:08:35 (2 years ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇳🇱 thedreamer.nl	2024-02-17 03:32:39 (2 years ago)	139.59.233.227 - - [17/Feb/2024:04:30:57 +0100] "GET /.env HTTP/1.1" 200 615 "-" "Mozilla/5.0 (Windo ... show more 139.59.233.227 - - [17/Feb/2024:04:30:57 +0100] "GET /.env HTTP/1.1" 200 615 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4859.172 Safari/537.36" "SG" "Singapore" "1.30780" "103.68180" 139.59.233.227 - - [17/Feb/2024:04:32:15 +0100] "GET /wordpress HTTP/1.1" 200 615 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4859.172 Safari/537.36" "SG" "Singapore" "1.30780" "103.68180" 139.59.233.227 - - [17/Feb/2024:04:32:28 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 405 552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4859.172 Safari/537.36" "SG" "Singapore" "1.30780" "103.68180" 139.59.233.227 - - [17/Feb/2024:04:32:38 +0100] "GET /_ignition/execute-solution HTTP/1.1" 200 615 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4859.172 Safari/537.36" "SG" "Singapo ... show less	Hacking Brute-Force Bad Web Bot Web App Attack
🇩🇰 buusbudde.dk	2024-02-16 17:01:45 (2 years ago)	[Fri Feb 16 18:00:23.354776 2024] [security2:error] [pid 1944315] [client 139.59.233.227:53698] [cli ... show more [Fri Feb 16 18:00:23.354776 2024] [security2:error] [pid 1944315] [client 139.59.233.227:53698] [client 139.59.233.227] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mimer.buusbudde.dk"] [uri "/.env"] [unique_id "Zc-Up-maJts_7yL5VBV4BAAAAAY"] [Fri Feb 16 18:01:44.391516 2024] [security2:error] [pid 1955892] [client 139.59.233.227:43116] [client 139.59.233.227] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICA ... show less	Web App Attack
🇲🇾 Rizzy	2024-02-16 15:23:02 (2 years ago)	Multiple WAF Violations	Brute-Force Web App Attack

Showing 1 to 15 of 91 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇭 159.192.133.140

🇹🇭 2405:9800:b910:fd0a:7b51:7a8:a778:1e78

🇹🇷 185.219.133.156

🇳🇱 91.92.42.172

🇺🇸 45.156.129.171

🇺🇸 44.182.44.143

🇹🇳 41.230.60.199

🇨🇿 212.111.4.242

🇹🇬 196.171.16.187

🇨🇳 183.151.113.111

🇸🇦 176.224.54.241

🇮🇳 159.65.148.158

🇮🇳 154.29.225.158

🇺🇸 152.32.208.116

🇷🇴 92.118.39.14

🇺🇸 64.62.197.175

🇺🇸 47.251.244.32

🇺🇸 44.176.255.11

🇧🇾 37.214.70.255

🇬🇧 35.203.210.5