JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 139.59.9.252

139.59.9.252 was found in our database!

This IP was reported 31 times. Confidence of Abuse is 100%: ?

100%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇮🇳 India
City	Bashettihalli, Karnataka

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 139.59.9.252

Whois 139.59.9.252

IP Abuse Reports for 139.59.9.252:

This IP address has been reported a total of 31 times from 29 distinct sources. 139.59.9.252 was first reported on May 12th 2026, and the most recent report was 6 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 banankicks	2026-07-05 15:37:30 (6 hours ago)	Unauthorized connection attempt detected from IP address 139.59.9.252 to port 22 (banankicks-server) ... show more Unauthorized connection attempt detected from IP address 139.59.9.252 to port 22 (banankicks-server) [Q] show less	Brute-Force Exploited Host
🇫🇷 TheHoneyPotter	2026-07-05 14:26:50 (7 hours ago)	Honeypot detection: SSH brute-force authentication attempt on port 22 (2 or more attempts) - Logs: 2 ... show more Honeypot detection: SSH brute-force authentication attempt on port 22 (2 or more attempts) - Logs: 2026-07-05T14:26:49.792Z ACCEPT host=::ffff:139.59.9.252 port=37934 fd=5 n=2/4096 ... show less	Brute-Force SSH
🇺🇸 ras07	2026-07-05 12:00:06 (9 hours ago)	Brute force SSH login attempts.	Brute-Force SSH
🇲🇾 demonsword	2026-07-05 10:05:07 (11 hours ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: / show less	Open Proxy Port Scan
🇵🇱 rafamiga	2026-07-05 07:28:09 (14 hours ago)	fail2ban/ufw - Port scan detected. ...	Port Scan
🇩🇪 Tsumugi Kotobuki	2026-07-05 01:45:44 (19 hours ago)	Port Scan on Honeypot \| Ports: 8443/HTTPS-alt \| Proto: TCP(1) \| Flags: all SYN \| TTL: 47 \| Len: 64B ... show more Port Scan on Honeypot \| Ports: 8443/HTTPS-alt \| Proto: TCP(1) \| Flags: all SYN \| TTL: 47 \| Len: 64B \| Win: 65535(1) \| F2B/ufw-honeypot@2026-07-05T01:45:43Z show less	Port Scan Hacking
🇺🇸 donarev419	2026-07-03 07:36:25 (2 days ago)	Connection to port 8080 with data transfer. Data preview: GET /squid-internal-mgr/cachemgr.cgi HTTP/ ... show more Connection to port 8080 with data transfer. Data preview: GET /squid-internal-mgr/cachemgr.cgi HTTP/1.1 Host: 67.215.244.172:8080 User-Agent: Mozilla/5.0 zg show less	Port Scan Hacking
🇺🇸 knock	2026-07-03 07:23:46 (2 days ago)	Knock-Knock honeypot brute-force: proto8 (1 total hits)	Brute-Force
🇺🇸 donarev419	2026-07-03 06:55:05 (2 days ago)	Connection to port 3128 with data transfer. Data preview: GET /squid-internal-mgr/cachemgr.cgi HTTP/ ... show more Connection to port 3128 with data transfer. Data preview: GET /squid-internal-mgr/cachemgr.cgi HTTP/1.1 Host: 67.215.244.172:3128 User-Agent: Mozilla/5.0 zg show less	Port Scan Hacking
🇹🇭 Sawasdee	2026-07-03 06:27:12 (2 days ago)	Port Scan ...	Port Scan
🇩🇪 _ArminS_	2026-07-02 10:52:13 (3 days ago)	SP-Scan 49547:3389 detected 2026.07.02 12:52:13 blocked until 2026.08.21 05:55:00	Port Scan
🇬🇧 OptimusGO	2026-07-02 00:53:17 (3 days ago)	Malicious activity detected: web_attack Server: commstackbc (185.127.18.66) Attack: web_attack Time ... show more Malicious activity detected: web_attack Server: commstackbc (185.127.18.66) Attack: web_attack Timestamp: 2026-07-02 01:53:17 UTC Log evidence: 07/02/2026-01:53:16.184471 [] [1:1000103:1] SECURITY Management Port Probe - CRITICAL [] [Classification: Attempted Administrator Privilege Gain] [Priority: 1] {TCP} 139.59.9.252:55838 -> 185.127.18.66:8080 show less	Port Scan Brute-Force
🇺🇸 etu brutus	2026-07-01 19:24:58 (4 days ago)	139.59.9.252 Blocked by [Attack Vector List] ...	Hacking Brute-Force Exploited Host
🇺🇸 xmission.com	2026-07-01 17:48:07 (4 days ago)	Blocked by UFW (TCP on 3390) Source port: 48101 TTL: 41 Packet length: 64 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 3390) Source port: 48101 TTL: 41 Packet length: 64 TOS: 0x08 This report (for 139.59.9.252) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇹🇼 tyetriiix	2026-07-01 15:54:44 (4 days ago)	Wazuh Alert Evidence: 139.59.9.252 - - [01/Jul/2026:15:54:41 +0000] "SSTP_DUPLEX_POST /sra_{BA195980 ... show more Wazuh Alert Evidence: 139.59.9.252 - - [01/Jul/2026:15:54:41 +0000] "SSTP_DUPLEX_POST /sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/ HTTP/1.1" 400 150 "-" "-" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-" show less	Web App Attack

Showing 1 to 15 of 31 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2620:18c:0:192::e0:168

🇧🇷 191.5.159.250

🇺🇸 147.185.132.93

🇮🇳 45.123.110.70

🇺🇸 44.0.149.100

🇺🇸 205.210.31.102

🇺🇸 162.243.185.1

🇩🇪 78.46.136.56

🇰🇷 58.224.62.29

🇧🇪 44.11.109.111

🇮🇷 31.170.60.178

🇺🇸 3.232.102.111

🇷🇴 2.57.121.25

🇨🇳 171.220.244.134

🇻🇳 113.177.27.200

🇹🇼 111.70.49.182

🇺🇸 98.245.24.105

🇹🇷 94.154.43.77

🇧🇬 79.124.62.230

🇺🇸 44.59.95.35