JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 139.59.254.187

139.59.254.187 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 48%: ?

48%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 139.59.254.187

Whois 139.59.254.187

IP Abuse Reports for 139.59.254.187:

This IP address has been reported a total of 20 times from 13 distinct sources. 139.59.254.187 was first reported on June 2nd 2026, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 hermawan	2026-06-07 23:49:37 (2 weeks ago)	1780876165.660724 139.59.254.187 103.166.156.58 8192_2-1-1-4_1460_0 2026-06-08 06:49:25 WIB ...	Email Spam Hacking
🇮🇩 Diskominfo Lumajang	2026-06-07 22:30:05 (2 weeks ago)	Security Event Detected by SOC Diskominfo Lumajang: event=alert, hits=3	Brute-Force
🇮🇩 PENJAGA.AUM	2026-06-07 15:35:28 (2 weeks ago)	139.59.254.187 - Attack: ET WEB_SERVER PHP tags in HTTP POST	Web App Attack SQL Injection Spoofing
🇮🇩 zam	2026-06-07 11:36:36 (2 weeks ago)	139.59.254.187 - - [07/Jun/2026:11:36:33 +0000] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin ... show more 139.59.254.187 - - [07/Jun/2026:11:36:33 +0000] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 315 show less	Web App Attack
🇮🇩 zam	2026-06-07 09:50:55 (2 weeks ago)	139.59.254.187 - - [07/Jun/2026:09:50:50 +0000] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin ... show more 139.59.254.187 - - [07/Jun/2026:09:50:50 +0000] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 236 show less	Web App Attack
🇮🇩 origrata	2026-06-07 08:49:24 (2 weeks ago)	[OGWAF] crs_932 attack blocked \| severity: high \| GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdi ... show more [OGWAF] crs_932 attack blocked \| severity: high \| GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0 \| payload: Remote code execution (shell metachar) show less	Web App Attack
🇮🇩 Burayot	2026-06-07 07:44:44 (2 weeks ago)	LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 139.59.254.187 (SG/Singapore/-): 2 i ... show more LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 139.59.254.187 (SG/Singapore/-): 2 in the last 3600 secs show less	Web App Attack
🇮🇩 Burayot	2026-06-06 16:23:02 (2 weeks ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 139.59.254.187 (SG/Singapore/-): 1 ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 139.59.254.187 (SG/Singapore/-): 1 in the last 3600 secs show less	Web App Attack
🇮🇩 zam	2026-06-06 16:18:49 (2 weeks ago)	139.59.254.187 - - [06/Jun/2026:16:18:30 +0000] "GET /vendor/phpunit/phpunit/src/Util/ HTTP/1.1" 404 ... show more 139.59.254.187 - - [06/Jun/2026:16:18:30 +0000] "GET /vendor/phpunit/phpunit/src/Util/ HTTP/1.1" 404 27293 139.59.254.187 - - [06/Jun/2026:16:18:30 +0000] "GET /vendor/phpunit/phpunit/src/Util/ HTTP/1.1" 404 27293 139.59.254.187 - - [06/Jun/2026:16:18:31 +0000] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 404 27293 139.59.254.187 - - [06/Jun/2026:16:18:32 +0000] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 404 27293 139.59.254.187 - - [06/Jun/2026:16:18:32 +0000] "GET /vendor/phpunit/phpunit/Util/ HTTP/1.1" 404 27293 {"log":"139.59.254.187 - - [06/Jun/2026:16:18:33 +0000] show less	Web App Attack
🇺🇸 fazar	2026-06-06 11:10:59 (2 weeks ago)	crowdsecurity/CVE-2017-9841 on node: us01	Web App Attack
🇮🇩 Burayot	2026-06-06 04:31:59 (2 weeks ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 139.59.254.187 (SG/Singapore/-): 2 ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 139.59.254.187 (SG/Singapore/-): 2 in the last 3600 secs show less	Web App Attack
🇮🇩 sockominfo	2026-06-06 00:00:39 (2 weeks ago)	Suspicious user agent detected python-httpx/0.28.1. Threat Score: 3.8/10 (LOW). Confidence: 30%. CVS ... show more Suspicious user agent detected python-httpx/0.28.1. Threat Score: 3.8/10 (LOW). Confidence: 30%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 40%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 fazar	2026-06-05 23:02:30 (2 weeks ago)	crowdsecurity/http-sensitive-files on node: bdj03	Web App Attack Hacking
🇮🇩 sockominfo	2026-06-05 23:00:11 (2 weeks ago)	Suspicious user agent detected python-httpx/0.28.1. Threat Score: 0/10 (INFORMATIONAL). Reported by ... show more Suspicious user agent detected python-httpx/0.28.1. Threat Score: 0/10 (INFORMATIONAL). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 penjaga BRIN	2026-06-05 22:25:40 (2 weeks ago)	Web application attack	Web App Attack

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 200.165.1.48

🇺🇸 162.158.175.55

🇫🇮 147.185.133.179

🇮🇳 103.86.180.10

🇸🇬 98.159.43.133

🇮🇹 93.36.184.23

🇫🇷 91.231.89.229

🇺🇸 91.230.168.248

🇸🇪 82.118.29.246

🇳🇿 2401:7000:dea0:8c01:1d48:d629:e8e5:b5b0

🇦🇹 213.225.9.147

🇸🇬 161.118.246.126

🇨🇦 158.69.215.39

🇨🇳 101.227.222.138

🇺🇸 45.21.251.124

🇨🇦 24.212.56.34

🇨🇳 14.103.118.177

🇨🇳 219.151.190.227

🇨🇦 172.70.80.178

🇸🇬 151.246.1.47