JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 139.59.242.36

139.59.242.36 was found in our database!

This IP was reported 49 times. Confidence of Abuse is 100%: ?

100%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 139.59.242.36

Whois 139.59.242.36

IP Abuse Reports for 139.59.242.36:

This IP address has been reported a total of 49 times from 43 distinct sources. 139.59.242.36 was first reported on April 16th 2021, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 erwindecker	2026-10-22 14:28:46 (1 hour ago)	139.59.242.36 - - [22/Oct/2026:16:28:44 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 1 ... show more 139.59.242.36 - - [22/Oct/2026:16:28:44 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 139.59.242.36 - - [22/Oct/2026:16:28:45 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 139.59.242.36 - - [22/Oct/2026:16:28:45 +0200] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" ... show less	Port Scan Bad Web Bot Web App Attack
🇵🇱 Budyn	2026-10-22 06:37:10 (9 hours ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: sweetpuddingtrap.xyz \| URI: //wp-login.php \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36 \| BODY: [Empty / GET Request] \| HEADERS: {"Accept-Encoding":"gzip, br","X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"SG","Cf-Connecting-Ip":"139.59.242.36","Cdn-Loop":"cloudflare; loops=1","Cf-Ray":"a4e67de9e825c84f-MRS","Connection":"Keep-Alive","Accept-Language":"en-US,en;q=0.5","Accept":"t show less	Bad Web Bot Web App Attack
🇺🇸 han35	2026-10-22 06:00:03 (9 hours ago)	ProtocolSecure - WP honeypot: /wp-includes/wlwmanifest.xml (kez: 5)	Hacking Bad Web Bot Web App Attack
🇺🇸 IndigoRidge	2026-10-22 05:25:50 (10 hours ago)	139.59.242.36 - - [22/Oct/2026:01:25:47 -0400] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 301 4861 ... show more 139.59.242.36 - - [22/Oct/2026:01:25:47 -0400] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 301 4861 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 139.59.242.36 - - [22/Oct/2026:01:25:48 -0400] "GET //xmlrpc.php?rsd HTTP/1.1" 200 5712 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 139.59.242.36 - - [22/Oct/2026:01:25:49 -0400] "GET //?author=1 HTTP/1.1" 301 4847 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 139.59.242.36 - - [22/Oct/2026:01:25:49 -0400] "GET //?author=2 HTTP/1.1" 301 4852 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 139.59.242.36 - - [22/Oct/2026:01:25:50 -0400] "GET //wp-json/wp/v2/users/ HTTP/1.1" 200 7397 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537. ... show less	Web App Attack
Anonymous	2026-10-22 05:23:39 (10 hours ago)	WordPress login and plugin enumeration; e.g. //2019/wp-includes/wlwmanifest.xml, //wp1/wp-includes/w ... show more WordPress login and plugin enumeration; e.g. //2019/wp-includes/wlwmanifest.xml, //wp1/wp-includes/wlwmanifest.xml, //2018/wp-includes/wlwmanifest.xml. Requests blocked by our WAF (automated report). show less	Web App Attack Bad Web Bot
🇨🇭 backslash	2026-10-22 05:18:00 (10 hours ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
Anonymous	2026-10-22 05:12:30 (10 hours ago)	IP matched detection query 20 more in short time bad rqs.	Brute-Force Web App Attack Hacking
🇳🇱 Site.eu	2026-10-22 05:03:57 (10 hours ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇫🇷 Stara	2026-10-22 04:55:08 (10 hours ago)	Automated block - Joomla/WordPress/OpenCart vulnerability scanner exploitation detected (Mala Kinesk ... show more Automated block - Joomla/WordPress/OpenCart vulnerability scanner exploitation detected (Mala Kineskinja) show less	Hacking Brute-Force Web App Attack
🇩🇪 rh24	2026-10-22 04:54:43 (10 hours ago)	(secretscan) Secret-Scanner (env/git/ssh/credentials) from 139.59.242.36 (SG/Singapore/-)	Hacking
🇩🇪 big-cloud.nl	2026-10-22 04:48:07 (10 hours ago)	Try to access /xmlrpc.php?rsd	Web App Attack
🇺🇸 mnsf	2026-10-22 04:05:31 (11 hours ago)	Abuse Detected (9)	Brute-Force Web App Attack
Anonymous	2026-10-22 03:50:01 (11 hours ago)	Bot / scanning and/or hacking attempts: POST //wp-login.php HTTP/1.1, POST //xmlrpc.php HTTP/1.1	Hacking Web App Attack
🇨🇭 zynex	2026-10-22 03:49:24 (11 hours ago)	URL Probing: /2019/wp-includes/wlwmanifest.xml	Web App Attack
🇫🇷 masterguru	2026-10-22 03:48:45 (11 hours ago)	(wordpress) Apache: Failed WordPress login from 139.59.242.36 (SG/Singapore/-): 10 in the last 3600 ... show more (wordpress) Apache: Failed WordPress login from 139.59.242.36 (SG/Singapore/-): 10 in the last 3600 secs (0-193) show less	Hacking

Showing 1 to 15 of 49 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇪🇸 185.214.138.85

🇺🇸 159.223.162.199

🇺🇸 66.132.172.132

🇳🇱 45.156.87.72

🇦🇺 20.5.85.204

🇩🇪 2a01:4f8:121:12c9::2

🇨🇳 221.233.50.135

🇮🇳 202.62.88.25

🇧🇬 193.24.211.219

🇸🇻 190.62.87.186

🇧🇷 187.19.137.55

🇺🇸 172.236.228.193

🇭🇰 172.68.225.42

🇲🇽 129.222.64.244

🇨🇳 118.196.119.108

🇪🇸 80.31.92.246

🇦🇹 62.83.32.117

🇰🇷 59.8.42.47

🇺🇸 34.182.140.74

🇰🇷 220.126.215.120