JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 139.59.5.68

139.59.5.68 was found in our database!

This IP was reported 859 times. Confidence of Abuse is 100%: ?

100%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇮🇳 India
City	Bashettihalli, Karnataka

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 139.59.5.68

Whois 139.59.5.68

IP Abuse Reports for 139.59.5.68:

This IP address has been reported a total of 859 times from 278 distinct sources. 139.59.5.68 was first reported on April 4th 2023, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 bigscoots.com	2026-06-18 10:56:35 (1 day ago)	139.59.5.68 (IN/India/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ... show more 139.59.5.68 (IN/India/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jun 18 05:56:17 13374 sshd[1395]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.40.89.57 user=root Jun 18 05:52:27 13374 sshd[31914]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.5.68 user=root Jun 18 05:52:29 13374 sshd[31914]: Failed password for root from 139.59.5.68 port 57268 ssh2 Jun 18 05:40:52 13374 sshd[26104]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.157.223.17 user=root Jun 18 05:40:54 13374 sshd[26104]: Failed password for root from 185.157.223.17 port 35326 ssh2 IP Addresses Blocked: 119.40.89.57 (BD/Bangladesh/119-40-89-57.bdcom.com) show less	Brute-Force SSH
🇺🇸 TurboTechieSystems	2026-06-18 04:18:42 (2 days ago)	MySQL BruteForce 2026-06-17 22:56:19 5669211 Access Denied for Redacted '' using password: YES 2026 ... show more MySQL BruteForce 2026-06-17 22:56:19 5669211 Access Denied for Redacted '' using password: YES 2026-06-17 23:18:42 5671775 Access Denied for Redacted '' using password: YES show less	Hacking Brute-Force Web App Attack
🇬🇧 andypiper	2026-06-16 01:02:12 (4 days ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
🇺🇸 mnsf	2026-06-16 00:14:03 (4 days ago)	Abuse Detected (1)	Brute-Force Web App Attack
🇦🇺 nzhost.co.nz	2026-06-15 18:10:24 (4 days ago)	$f2bV_matches	Hacking Brute-Force
🇩🇪 4server	2026-06-15 10:16:44 (4 days ago)	[MonJun1512:16:38.0470322026][security2:error][pid4004235:tid4004275][client139.59.5.68:0]ModSecurit ... show more [MonJun1512:16:38.0470322026][security2:error][pid4004235:tid4004275][client139.59.5.68:0]ModSecurity:Accessdeniedwithcode403$phase2$.Patternmatch\"$\?:\\\\\\\\b\(\?:\\\\\\\\.\(\?:ht\(\?:access\\|passwd\\|group$\\|www_\?acl\)\\|global\\\\\\\\.asa\\|httpd\\\\\\\\.conf\\|boot\\\\\\\\.ini\\|web.config\)\\\\\\\\b\\|$\\|\^\\|\\\\\\\\.\\\\\\\\.$/etc/\\|/\\\\\\\\.$\?:history\\|bash_history\\|sh_history\\|env$\$\)\"atREQUEST_FILENAME.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"204\"][id\"390709\"][rev\"30\"][msg\"Atomicorp.comWAFRules:Attempttoaccessprotectedfileremotely\"][data\"/.env\"][severity\"CRITICAL\"][hostname\"b4consulting.ch\"][uri\"/database/.env\"][unique_id\"ai_RBtNgIvVgLjb6pFFLNgAAAEQ\"] show less	Port Scan Brute-Force Web App Attack
🇧🇷 Halux	2026-06-15 09:58:25 (4 days ago)	139.59.5.68 Probing protected path or service	Web App Attack
🇩🇪 BlueWire Hosting	2026-06-15 09:17:06 (5 days ago)	Bad bot ignoring robot.txt	Bad Web Bot
🇩🇪 cloudmax	2026-06-14 20:29:36 (5 days ago)	Cloudmax IPS Block - Suspicious activity. Possible port scanning, service reconnaissance, or vulnera ... show more Cloudmax IPS Block - Suspicious activity. Possible port scanning, service reconnaissance, or vulnerability probing show less	Port Scan
🇫🇷 vhnmn	2026-06-13 02:54:16 (1 week ago)	spam/brute force attack blocked attempt from fail2ban ...	Email Spam Brute-Force
Anonymous	2026-06-11 14:17:34 (1 week ago)	spamd: identified spam	Email Spam
🇺🇸 kosada.com	2026-06-11 05:08:30 (1 week ago)	IMAP password guessing	Brute-Force
🇺🇦 llighthunter	2026-06-10 23:00:17 (1 week ago)	Jun 9 13:36:09 mail dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 0 secs): user=<sa ... show more Jun 9 13:36:09 mail dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 0 secs): user=<[email protected]>, rip=139.59.5.68, lip=192.168.1.80, session=<ECT2sc9TktmLOwVE> Jun 9 13:48:12 mail dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 0 secs): user=<[email protected]>, rip=139.59.5.68, lip=192.168.1.80, session=<7IgS3c9TxIKLOwVE> Jun 9 14:00:07 mail dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 0 secs): user=<[email protected]>, rip=139.59.5.68, lip=192.168.1.80, session=<8virB9BTgJGLOwVE> show less	Port Scan Hacking Spoofing
🇫🇷 basing	2026-06-10 10:40:35 (1 week ago)	2026-06-10 11:40:35 pzb SASL PLAIN auth failed: rhost=139.59.5.68...	Brute-Force
🇩🇪 itak	2026-06-10 09:14:49 (1 week ago)	IMAP SASL Brute-Force Attack	Port Scan Hacking Brute-Force

Showing 1 to 15 of 859 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2400:cb00:509:1000:ef7e:262a:35a1:dc17

🇫🇷 136.244.118.129

🇩🇪 85.214.180.225

🇸🇦 188.53.60.207

🇫🇮 178.20.210.208

🇻🇳 171.234.9.189

🇹🇼 111.70.34.159

🇳🇬 102.141.212.80

🇿🇦 102.33.32.103

🇺🇸 54.144.189.179

🇷🇴 141.98.83.240

🇺🇸 107.167.34.125

🇰🇪 102.210.148.92

🇩🇪 93.185.156.121

🇳🇱 91.92.40.49

🇫🇷 85.217.140.31

🇳🇱 45.148.10.240

🇷🇺 31.173.0.140

🇨🇳 27.8.172.202

🇵🇰 203.215.165.237