AbuseIPDB » 139.59.57.70

139.59.57.70 was found in our database!

This IP was reported 64 times. Confidence of Abuse is 32%: ?

32%

ISP	DigitalOcean LLC
Usage Type	Data Center/Web Hosting/Transit
Domain Name	digitalocean.com
Country	India
City	Bengaluru, Karnataka

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 139.59.57.70

Whois 139.59.57.70

IP Abuse Reports for 139.59.57.70:

This IP address has been reported a total of 64 times from 39 distinct sources. 139.59.57.70 was first reported on August 3rd 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
weblite	2024-08-06 01:19:10 (2 months ago)	WP_LOGIN_FAIL WP_XMLRPC_ABUSE	Brute-Force Web App Attack
Savvii	2024-08-06 01:08:59 (2 months ago)	10 attempts against mh-misc-ban on tin	Web App Attack
Anonymous	2024-08-06 00:36:02 (2 months ago)	Bot / scanning and/or hacking attempts: POST //xmlrpc.php HTTP/1.1	Hacking Web App Attack
pusathosting.com	2024-08-05 18:30:03 (2 months ago)	2ds22 bruteforce	Brute-Force Web App Attack
Anonymous	2024-08-05 07:32:42 (2 months ago)	Ports: *; Direction: 0; Trigger: CT_LIMIT	Brute-Force SSH
TPI-Abuse	2024-08-05 06:23:50 (2 months ago)	(mod_security) mod_security (id:225170) triggered by 139.59.57.70 (-): 1 in the last 300 secs; Ports ... show more(mod_security) mod_security (id:225170) triggered by 139.59.57.70 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 05 02:23:45.640397 2024] [security2:error] [pid 2588796:tid 2588796] [client 139.59.57.70:53265] [client 139.59.57.70] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.fattoria-rendena.it\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.fattoria-rendena.it"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZrBv8Z9oakg5Hj4K50UPMAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2024-08-05 05:58:05 (2 months ago)	(mod_security) mod_security (id:225170) triggered by 139.59.57.70 (-): 1 in the last 300 secs; Ports ... show more(mod_security) mod_security (id:225170) triggered by 139.59.57.70 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 05 01:58:00.120023 2024] [security2:error] [pid 20985:tid 20985] [client 139.59.57.70:56721] [client 139.59.57.70] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.casamoresc.it\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.casamoresc.it"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZrBp6I35fHsnjwejzQQXvQAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-08-05 05:25:48 (2 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Mr-Money	2024-08-05 01:54:04 (2 months ago)	139.59.57.70 - - [05/Aug/2024:03:54:03 +0200] "GET /wp-includes/ID3/license.txt HTTP/1.1" 404 490 "- ... show more139.59.57.70 - - [05/Aug/2024:03:54:03 +0200] "GET /wp-includes/ID3/license.txt HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 139.59.57.70 - - [05/Aug/2024:03:54:03 +0200] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 139.59.57.70 - - [05/Aug/2024:03:54:04 +0200] "GET /web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" ... show less	Hacking SQL Injection Bad Web Bot Exploited Host Web App Attack
VHosting	2024-08-04 13:51:11 (2 months ago)	Attempt from 139.59.57.70, reason: FailedCaptchaVerify	DDoS Attack Bad Web Bot
WeekendWeb	2024-08-04 12:01:44 (2 months ago)	Wordpress Vunerability attack	Web App Attack
Savvii	2024-08-04 08:31:33 (2 months ago)	10 attempts against mh-misc-ban on pine	Web App Attack
Savvii	2024-08-04 07:48:02 (2 months ago)	10 attempts against mh-misc-ban on glow	Web App Attack
mondor.ro	2024-08-04 05:14:43 (2 months ago)	Cluster member 148.251.176.225 (DE/Germany/antares.webyouridea.ro) said, DENY 139.59.57.70, Reason:[ ... show moreCluster member 148.251.176.225 (DE/Germany/antares.webyouridea.ro) said, DENY 139.59.57.70, Reason:[(manifest) WordPress wlwmanifest.xml Attack 139.59.57.70 (IN/India/-): 10 in the last 3600 secs]; Ports: *; Direction: inout; Trigger: LF_CLUSTER; Logs: show less	Port Scan
Anonymous	2024-08-04 04:55:29 (2 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH