JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

37.59.75.139

Neutral Activity

Abuse confidence score ?

0% Low Risk

34 reports

17 reporters · latest 5 years ago

ISP	OVH SAS
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16276
Hostname(s)	ip139.ip-37-59-75.eu
Domain Name	ovh.net
Country	🇫🇷 France
City	Roubaix, Hauts-de-France

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

37.59.75.139 has been reported 34 times. The most recent report is from 5 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 37.59.75.139

Export CSV

This IP address has been reported a total of 34 times from 17 distinct sources. 37.59.75.139 was first reported on January 24th 2021, and the most recent report was 5 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 CryptoYakari	2021-02-21 16:26:56 (5 years ago)	37.59.75.139 - - [22/Feb/2021:00:24:47 +0300] "GET /wp-admin/install.php?step=1 HTTP/1.0" 404 3589 " ... show more 37.59.75.139 - - [22/Feb/2021:00:24:47 +0300] "GET /wp-admin/install.php?step=1 HTTP/1.0" 404 3589 "-" "python-requests/2.23.0" 37.59.75.139 - - [22/Feb/2021:00:25:30 +0300] "GET /wordpress/wp-admin/install.php?step=1 HTTP/1.0" 404 3589 "-" "python-requests/2.23.0" 37.59.75.139 - - [22/Feb/2021:00:25:35 +0300] "GET /blog/wp-admin/install.php?step=1 HTTP/1.0" 404 3589 "-" "python-requests/2.23.0" 37.59.75.139 - - [22/Feb/2021:00:26:48 +0300] "GET /old/wp-admin/install.php?step=1 HTTP/1.0" 404 3589 "-" "python-requests/2.23.0" 37.59.75.139 - - [22/Feb/2021:00:26:52 +0300] "GET /new/wp-admin/install.php?step=1 HTTP/1.0" 404 3589 "-" "python-requests/2.23.0" ... show less	Web Spam Blog Spam Bad Web Bot Web App Attack
🇳🇱 CryptoYakari	2021-02-21 14:33:10 (5 years ago)	37.59.75.139 - - [21/Feb/2021:22:31:41 +0300] "GET /wp-admin/install.php?step=1 HTTP/1.0" 404 4830 " ... show more 37.59.75.139 - - [21/Feb/2021:22:31:41 +0300] "GET /wp-admin/install.php?step=1 HTTP/1.0" 404 4830 "-" "python-requests/2.23.0" 37.59.75.139 - - [21/Feb/2021:22:31:44 +0300] "GET /wordpress/wp-admin/install.php?step=1 HTTP/1.0" 404 2567 "-" "python-requests/2.23.0" 37.59.75.139 - - [21/Feb/2021:22:32:52 +0300] "GET /blog/wp-admin/install.php?step=1 HTTP/1.0" 404 4826 "-" "python-requests/2.23.0" 37.59.75.139 - - [21/Feb/2021:22:33:03 +0300] "GET /old/wp-admin/install.php?step=1 HTTP/1.0" 404 2579 "-" "python-requests/2.23.0" 37.59.75.139 - - [21/Feb/2021:22:33:05 +0300] "GET /new/wp-admin/install.php?step=1 HTTP/1.0" 404 2573 "-" "python-requests/2.23.0" ... show less	Web Spam Blog Spam Bad Web Bot Web App Attack
🇩🇪 ManagedStack	2021-02-18 14:27:57 (5 years ago)	Unauthorized path/IP Access (full log not revealed as it contains sensitive data)	Hacking Web App Attack
🇻🇳 thachpham	2021-02-14 00:05:56 (5 years ago)	(mod_security) mod_security (id:77142160) triggered by 37.59.75.139 (FR/France/ip139.ip-37-59-75.eu) ... show more (mod_security) mod_security (id:77142160) triggered by 37.59.75.139 (FR/France/ip139.ip-37-59-75.eu): 5 in the last 3600 secs show less	Brute-Force
🇻🇳 thachpham	2021-02-12 17:24:25 (5 years ago)	(mod_security) mod_security (id:77142160) triggered by 37.59.75.139 (FR/France/ip139.ip-37-59-75.eu) ... show more (mod_security) mod_security (id:77142160) triggered by 37.59.75.139 (FR/France/ip139.ip-37-59-75.eu): 5 in the last 3600 secs show less	Brute-Force
Anonymous	2021-02-10 19:06:38 (5 years ago)	Attacks websites by trying to access known vulnerables of plugins, brute-force of backends or probin ... show more Attacks websites by trying to access known vulnerables of plugins, brute-force of backends or probing of administrative tools show less	Brute-Force Web App Attack
🇮🇩 hermawan	2021-02-10 17:39:02 (5 years ago)	[Thu Feb 11 05:39:01.938332 2021] [:error] [pid 13345:tid 140472165050112] [client 37.59.75.139:5654 ... show more [Thu Feb 11 05:39:01.938332 2021] [:error] [pid 13345:tid 140472165050112] [client 37.59.75.139:56545] [client 37.59.75.139] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Python-urllib" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-3.3.1-rc1/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "146"] [id "913101"] [msg "Found User-Agent associated with scripting/generic HTTP client"] [data "Matched Data: Python-urllib found within REQUEST_HEADERS:User-Agent: python-urllib/2.7"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.1"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scripting"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [tag "paranoia-level/2"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/language/en-GB/3x22upx.php"] [unique_id "YCRghWsSF8UFln14VT99dAAAAiE"] ... show less	Hacking Web App Attack
🇻🇳 thachpham	2021-02-09 03:00:49 (5 years ago)	(mod_security) mod_security (id:210730) triggered by 37.59.75.139 (FR/France/ip139.ip-37-59-75.eu): ... show more (mod_security) mod_security (id:210730) triggered by 37.59.75.139 (FR/France/ip139.ip-37-59-75.eu): 5 in the last 3600 secs show less	Brute-Force
🇧🇪 illuminated technologies	2021-02-08 11:29:13 (5 years ago)	GET /wp-admin/admin-ajax.php	Brute-Force Web App Attack
🇺🇸 physke	2021-02-06 18:06:16 (5 years ago)	REQUESTED PAGE: /wp-content/plugins/pack/pack1.php	Web App Attack
🇺🇸 physke	2021-02-04 13:55:51 (5 years ago)	REQUESTED PAGE: /wp-admin/profile-info.php	Web App Attack
🇮🇩 hermawan	2021-02-04 06:34:42 (5 years ago)	[Thu Feb 04 18:34:41.678741 2021] [:error] [pid 10106:tid 139807334319872] [client 37.59.75.139:5474 ... show more [Thu Feb 04 18:34:41.678741 2021] [:error] [pid 10106:tid 139807334319872] [client 37.59.75.139:54742] [client 37.59.75.139] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Python-urllib" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-3.3.1-rc1/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "146"] [id "913101"] [msg "Found User-Agent associated with scripting/generic HTTP client"] [data "Matched Data: Python-urllib found within REQUEST_HEADERS:User-Agent: python-urllib/2.7"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.1"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scripting"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [tag "paranoia-level/2"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/images/ganteng.gif"] [unique_id "YBvb0ddv2m0sfWQhdM7T9QAAAao"] ... show less	Hacking Web App Attack
🇮🇩 hermawan	2021-02-03 11:31:16 (5 years ago)	[Wed Feb 03 23:31:15.474014 2021] [:error] [pid 14928:tid 139976508294912] [client 37.59.75.139:4968 ... show more [Wed Feb 03 23:31:15.474014 2021] [:error] [pid 14928:tid 139976508294912] [client 37.59.75.139:49684] [client 37.59.75.139] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Python-urllib" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-3.3.1-rc1/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "146"] [id "913101"] [msg "Found User-Agent associated with scripting/generic HTTP client"] [data "Matched Data: Python-urllib found within REQUEST_HEADERS:User-Agent: python-urllib/2.7"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.1"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scripting"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [tag "paranoia-level/2"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/images/secure.gif"] [unique_id "YBrP0zWwJQgq3om49peVSgAAAhw"] ... show less	Hacking Web App Attack
🇪🇪 Unwasted	2021-02-02 09:15:27 (5 years ago)	Blocked IP still knocking	Hacking
🇮🇩 hermawan	2021-02-01 13:10:18 (5 years ago)	[Tue Feb 02 01:10:19.758214 2021] [:error] [pid 30404:tid 140007444559616] [client 37.59.75.139:6311 ... show more [Tue Feb 02 01:10:19.758214 2021] [:error] [pid 30404:tid 140007444559616] [client 37.59.75.139:63112] [client 37.59.75.139] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Python-urllib" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-3.3.1-rc1/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "146"] [id "913101"] [msg "Found User-Agent associated with scripting/generic HTTP client"] [data "Matched Data: Python-urllib found within REQUEST_HEADERS:User-Agent: python-urllib/2.7"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.1"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scripting"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [tag "paranoia-level/2"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/images/yo.txt"] [unique_id "YBhECy2DggSV0aO4LIogogAAAEI"] ... show less	Hacking Web App Attack

Showing 1 to 15 of 34 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 198.235.24.115

🇮🇩 139.255.254.163

🇯🇵 124.45.31.57

🇷🇴 80.94.92.234

🇺🇸 66.132.186.172

🇩🇪 45.149.207.27

🇿🇦 41.181.156.205

🇩🇴 38.246.145.85

🇸🇬 34.143.212.113

🇬🇧 2a06:4880::c

🇺🇸 204.197.161.106

🇳🇱 193.25.217.68

🇷🇺 188.168.86.6

🇲🇽 187.190.11.251

🇳🇱 176.65.149.236

🇺🇸 135.148.29.54

🇺🇸 108.28.86.172

🇧🇪 104.155.80.126

🇳🇱 81.19.216.124

🇳🇱 81.19.216.122