AbuseIPDB » 139.59.57.70

139.59.57.70 was found in our database!

This IP was reported 64 times. Confidence of Abuse is 32%: ?

32%

ISP	DigitalOcean LLC
Usage Type	Data Center/Web Hosting/Transit
Domain Name	digitalocean.com
Country	India
City	Bengaluru, Karnataka

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 139.59.57.70

Whois 139.59.57.70

IP Abuse Reports for 139.59.57.70:

This IP address has been reported a total of 64 times from 39 distinct sources. 139.59.57.70 was first reported on August 3rd 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
cmbplf	2024-08-04 01:22:34 (2 months ago)	204 requests to */wp-includes/wlwmanifest.xml	Brute-Force Bad Web Bot
TPI-Abuse	2024-08-03 09:55:56 (2 months ago)	(mod_security) mod_security (id:225170) triggered by 139.59.57.70 (-): 1 in the last 300 secs; Ports ... show more(mod_security) mod_security (id:225170) triggered by 139.59.57.70 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 03 05:55:52.927964 2024] [security2:error] [pid 10902:tid 10902] [client 139.59.57.70:50143] [client 139.59.57.70] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|qed-consulting.co\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "qed-consulting.co"] [uri "/wp-json/wp/v2/users/"] [unique_id "Zq3-qDk4H-IIDRg0oZMuNQAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
paulshipley.com.au	2024-08-03 09:15:20 (2 months ago)	levellapromotions.com.au:443 139.59.57.70 - - [03/Aug/2024:19:15:00 +1000] "GET /wp-includes/id3/lic ... show morelevellapromotions.com.au:443 139.59.57.70 - - [03/Aug/2024:19:15:00 +1000] "GET /wp-includes/id3/license.txt/feed/ HTTP/1.1" 404 144696 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" levellapromotions.com.au:443 139.59.57.70 - - [03/Aug/2024:19:15:02 +1000] "GET /wp-includes/id3/license.txt/xmlrpc.php?rsd HTTP/1.1" 404 141413 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" levellapromotions.com.au:443 139.59.57.70 - - [03/Aug/2024:19:15:05 +1000] "GET /wp-includes/id3/license.txt/blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 141447 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" levellapromotions.com.au:443 139.59.57.70 - - [03/Aug/2024:19:15:07 +1000] "GET /wp-includes/id3/license.txt/web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 141446 "-" "Mozilla/5.0 (Windows NT 10 ... show less	Web App Attack
Anonymous	2024-08-03 04:27:37 (2 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH