JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

139.59.3.79

Neutral Activity

Abuse Confidence Score

0% Low Risk

13 reports

10 reporters · latest 8 months ago

ISP: DigitalOcean, LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS14061
Domain Name: digitalocean.com
Country: 🇮🇳 India
City: Bengaluru, Karnataka

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

139.59.3.79 has been reported 13 times. The most recent report is from 8 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

13 from 10 distinct reporters

First reported

November 18th 2025

Most recent report

8 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 SpaceHost-Server	2026-03-10 01:10:12 UTC · (8 months ago)		Brute-Force Web App Attack
🇹🇷 rtbh.com.tr	2026-03-09 20:11:58 UTC · (8 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇫🇷 SpaceHost-Server	2026-03-08 23:30:40 UTC · (8 months ago)		Brute-Force Web App Attack
🇹🇷 rtbh.com.tr	2026-03-08 20:11:59 UTC · (8 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
Anonymous	2026-03-08 08:05:30 UTC · (8 months ago)	Blocked: Reason='Suspicious traffic score=60 (review-based detection)'; Requests=20	Hacking
🇧🇪 taivas.nl	2026-03-08 08:02:21 UTC · (8 months ago)	Bad_requests	Bad Web Bot
🇩🇪 fds.io	2026-03-08 07:50:05 UTC · (8 months ago)	detected and blocked multiple http 400 bad-request attempts	Bad Web Bot Web App Attack
🇩🇪 macrob	2026-03-08 07:37:03 UTC · (8 months ago)	2026/03/08 07:37:01 [error] 3361332#3361332: 60117959 access forbidden by rule, client: 139.59.3.79, server: finami.es, request: "GET //wp-includes/wlwmanifest.xml HTTP/2.0", host: "finami.es" 2026/03/08 07:37:01 [error] 3361332#3361332: 60117962 a ... show more 2026/03/08 07:37:01 [error] 3361332#3361332: 60117959 access forbidden by rule, client: 139.59.3.79, server: finami.es, request: "GET //wp-includes/wlwmanifest.xml HTTP/2.0", host: "finami.es" 2026/03/08 07:37:01 [error] 3361332#3361332: 60117962 access forbidden by rule, client: 139.59.3.79, server: finami.es, request: "GET //xmlrpc.php?rsd HTTP/2.0", host: "finami.es" 2026/03/08 07:37:02 [error] 3361332#3361332: *60117972 access forbidden by rule, client: 139.59.3.79, server: finami.es, request: "GET //blog/wp-includes/wlwmanifest.xml HTTP/2.0", host: "finami.es" ... show less	Web App Attack
🇮🇹 VHosting	2026-03-08 07:20:10 UTC · (8 months ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇩🇪 McClay	2026-03-08 07:19:23 UTC · (8 months ago)	HTTP-404 spam:139.59.3.79 - - [08/Mar/2026:08:19:20 +0100] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 404 1050 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 139.59.3.79 - - ... show more HTTP-404 spam:139.59.3.79 - - [08/Mar/2026:08:19:20 +0100] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 404 1050 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 139.59.3.79 - - [08/Mar/2026:08:19:20 +0100] "GET /xmlrpc.php?rsd HTTP/1.1" 404 245 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 139.59.3.79 - - [08/Mar/2026:08:19:20 +0100] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 1050 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 139.59.3.79 - - [08/Mar/2026:08:19:20 +0100] "GET /web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 1050 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 139.59.3.79 - - [08/Mar/2026:08:19:20 +0100] "GET /wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 404 1050 "-" "Mozilla/5.0 ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-03-08 07:17:44 UTC · (8 months ago)	(mod_security) mod_security (id:240335) triggered by 139.59.3.79 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 08 03:17:39.604004 2026] [security2:error] [pid 6597:tid 6597] [client 139.59.3.79:62142] ModSecu ... show more (mod_security) mod_security (id:240335) triggered by 139.59.3.79 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 08 03:17:39.604004 2026] [security2:error] [pid 6597:tid 6597] [client 139.59.3.79:62142] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 139.59.3.79 (+1 hits since last alert)\|www.investorscalifornia.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.investorscalifornia.com"] [uri "/xmlrpc.php"] [unique_id "aa0ikzXgkBDSTMLABzA5uQAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 MPL	2025-11-21 07:26:28 UTC · (11 months ago)	tcp/80 (3 or more attempts)	Port Scan
🇺🇸 MPL	2025-11-18 08:13:26 UTC · (11 months ago)	tcp/1244 (3 or more attempts)	Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇬🇧 2a01:4020:1:1:101::194

🇭🇰 165.154.41.182

🇳🇱 109.160.32.168

🇳🇱 64.205.72.34

🇺🇸 48.217.66.50

🇫🇷 45.80.27.169

🇺🇸 20.96.179.87

🇺🇸 184.105.247.219

🇺🇸 165.22.8.174

🇸🇬 47.79.201.42

🇫🇷 185.177.72.205

🇺🇸 185.61.220.84

🇺🇸 173.79.110.32

🇸🇮 102.220.161.248

🇪🇨 38.19.74.82

🇺🇸 194.180.233.118

🇫🇷 185.177.72.70

🇷🇺 94.243.8.253

🇬🇶 41.222.112.227

🇦🇷 190.139.79.99