JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 139.59.234.231

139.59.234.231 was found in our database!

This IP was reported 62 times. Confidence of Abuse is 80%: ?

80%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 139.59.234.231

Whois 139.59.234.231

IP Abuse Reports for 139.59.234.231:

This IP address has been reported a total of 62 times from 46 distinct sources. 139.59.234.231 was first reported on February 20th 2022, and the most recent report was 8 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 ipblock.com	2026-07-04 12:12:00 (8 hours ago)	IPBlock protected site ID [4055-d][s=01]. Exploit request, vulnerability scanner.	Hacking Bad Web Bot Web App Attack
Anonymous	2026-07-03 22:55:03 (22 hours ago)	Bot / scanning and/or hacking attempts: GET /1.php HTTP/1.1, GET /s.php HTTP/1.1, GET /r57.php HTTP/ ... show more Bot / scanning and/or hacking attempts: GET /1.php HTTP/1.1, GET /s.php HTTP/1.1, GET /r57.php HTTP/1.1, GET /qindex.php HTTP/1.1, GET /r.php HTTP/1.1, GET /root.php HTTP/1.1, GET /shell.php HTTP/1.1, GET /rex.php HTTP/1.1, GET /priv8.php HTTP/1.1, GET /shell20211028.php HTTP/1.1, GET /pref.php HTTP/1.1, GET /postfs.php HTTP/1.1, GET /old-index.php?daksldlkdsadas=1 HTTP/1.1, GET /priv.php HTTP/1.1 show less	Hacking Web App Attack
🇧🇪 voormedia	2026-07-03 21:05:40 (1 day ago)	Accessed trap at '/wp-login.php'	Web App Attack
🇧🇪 voormedia	2026-07-03 20:49:22 (1 day ago)	Accessed trap at '/wp-admin/install.php'	Web App Attack
🇧🇪 cmbplf	2026-07-03 14:43:10 (1 day ago)	1.258 requests with url.path *.alfa 7 requests with url.path /indoxploit.php	Brute-Force Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-03 14:29:26 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 139.59.234.231 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 139.59.234.231 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 10:29:18.332975 2026] [security2:error] [pid 10415:tid 10415] [client 139.59.234.231:52397] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.natchezbicycle.com"] [uri "/wp-config.php"] [unique_id "akfHPkVL0uPNTYvKTqbJsAAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 voormedia	2026-07-03 02:37:32 (1 day ago)	Accessed trap at '/phpinfo.php'	Web App Attack
🇺🇸 ipblock.com	2026-07-03 02:12:00 (1 day ago)	IPBlock protected site ID [4055-d][s=01]. Exploit request, vulnerability scanner.	Hacking Bad Web Bot Web App Attack
🇩🇪 ghostwarriors	2026-07-03 01:20:52 (1 day ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇪🇸 robotstxt	2026-07-02 21:11:36 (1 day ago)	139.59.234.231 - - [02/Jul/2026:21:11:26 +0000] "GET /cgi-bin/alfacgiapi/perl.alfa HTTP/1.1" 404 496 ... show more 139.59.234.231 - - [02/Jul/2026:21:11:26 +0000] "GET /cgi-bin/alfacgiapi/perl.alfa HTTP/1.1" 404 49608 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36" "-" 139.59.234.231 - - [02/Jul/2026:21:11:27 +0000] "GET /cgi-bin/alfacgiapi/perl.alfa HTTP/1.1" 404 49611 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36" "-" 139.59.234.231 - - [02/Jul/2026:21:11:30 +0000] "GET /cgi-bin/alfacgiapi/bash.alfa HTTP/1.1" 404 49608 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36" "-" 139.59.234.231 - - [02/Jul/2026:21:11:31 +0000] "GET /cgi-bin/alfacgiapi/bash.alfa HTTP/1.1" 404 49602 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 P ... show less	Bad Web Bot
🇺🇸 ipblock.com	2026-07-02 09:27:00 (2 days ago)	IPBlock protected site ID [4730-fr]. Exploit request, vulnerability scanner.	Hacking Bad Web Bot Web App Attack
🇺🇸 ipblock.com	2026-07-01 23:48:00 (2 days ago)	IPBlock protected site ID [4055-d][s=01]. Exploit request, vulnerability scanner.	Hacking Bad Web Bot Web App Attack
🇪🇸 robotstxt	2026-07-01 21:33:08 (2 days ago)	139.59.234.231 - - [01/Jul/2026:21:32:06 +0000] "GET /cgi-bin/alfacgiapi/perl.alfa HTTP/1.1" 404 144 ... show more 139.59.234.231 - - [01/Jul/2026:21:32:06 +0000] "GET /cgi-bin/alfacgiapi/perl.alfa HTTP/1.1" 404 14407 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36" 139.59.234.231 - - [01/Jul/2026:21:32:07 +0000] "GET /cgi-bin/alfacgiapi/perl.alfa HTTP/1.1" 404 14407 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36" 139.59.234.231 - - [01/Jul/2026:21:32:08 +0000] "GET /cgi-bin/alfacgiapi/bash.alfa HTTP/1.1" 404 14408 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/90.0.4430.210 Mobile Safari/537.36" 139.59.234.231 - - [01/Jul/2026:21:32:09 +0000] "GET /cgi-bin/alfacgiapi/bash.alfa HTTP/1.1" 404 14408 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ ... show less	Bad Web Bot
Anonymous	2026-06-30 22:02:16 (3 days ago)	Web attack	Bad Web Bot Web App Attack
🇺🇸 ipblock.com	2026-06-30 18:25:00 (4 days ago)	IPBlock protected site ID [4055-d][s=01]. Exploit request, vulnerability scanner.	Hacking Bad Web Bot Web App Attack

Showing 1 to 15 of 62 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇯🇵 172.71.8.78

🇮🇳 143.110.181.226

🇵🇱 143.20.97.31

🇺🇦 79.143.45.75

🇬🇧 35.203.210.253

🇰🇷 222.116.47.157

🇲🇽 189.173.77.203

🇮🇳 182.95.62.22

🇺🇸 162.216.150.207

🇮🇳 106.51.92.114

🇳🇱 91.92.40.204

🇳🇱 45.148.10.152

🇬🇧 35.203.210.24

🇮🇳 15.206.179.128

🇺🇸 162.216.149.227

🇸🇬 157.230.40.249

🇹🇼 111.70.17.73

🇨🇳 101.254.159.210

🇳🇱 91.92.241.50

🇫🇷 85.217.140.6