IP address

Shodan(more info)

Passive DNS

Tags:

IP blacklists: Blocklist.net.ua
139.59.152.161 is listed on the Blocklist.net.ua blacklist.

Description: BlockList contains IP addresses that perform attacks, send spam or brute force passwords to the blocking list.
Type of feed: primary (feed detail page)

Last checked at: 2025-12-17 23:15:01.194000
Was present on blacklist at: 2025-12-08 07:15, 2025-12-08 11:15, 2025-12-08 15:15, 2025-12-08 19:15, 2025-12-08 23:15, 2025-12-09 03:15, 2025-12-10 03:15, 2025-12-10 07:15, 2025-12-10 11:15, 2025-12-10 15:15, 2025-12-10 19:15, 2025-12-10 23:15, 2025-12-13 07:15, 2025-12-13 11:15, 2025-12-13 15:15, 2025-12-13 19:15, 2025-12-13 23:15, 2025-12-14 03:15, 2025-12-14 07:15, 2025-12-14 11:15, 2025-12-14 15:15, 2025-12-14 19:15, 2025-12-14 23:15, 2025-12-15 03:15, 2025-12-15 07:15, 2025-12-15 11:15, 2025-12-15 15:15, 2025-12-15 19:15, 2025-12-15 23:15, 2025-12-16 03:15, 2025-12-16 07:15, 2025-12-16 11:15, 2025-12-16 15:15, 2025-12-16 19:15, 2025-12-16 23:15, 2025-12-17 03:15, 2025-12-17 07:15, 2025-12-17 11:15, 2025-12-17 15:15, 2025-12-17 19:15, 2025-12-17 23:15
blocklist.de web-login
139.59.152.161 is listed on the blocklist.de web-login blacklist.

Description: Blocklist.de feed is a free and voluntary service provided by a Fraud/Abuse-specialist. IPs that attacks Joomla, Wordpress and other Web-Logins with Brute-Force Logins.
Type of feed: primary (feed detail page)

Last checked at: 2025-12-16 23:05:00.283000
Was present on blacklist at: 2025-12-15 05:05, 2025-12-15 11:05, 2025-12-15 17:05, 2025-12-15 23:05, 2025-12-16 05:05, 2025-12-16 11:05, 2025-12-16 17:05, 2025-12-16 23:05
blocklist.de Apache
139.59.152.161 is listed on the blocklist.de Apache blacklist.

Description: Blocklist.de feed is a free and voluntary service provided by a Fraud/Abuse-specialist. IPs performing attacks on the service Apache, Apache-DDOS, RFI-Attacks.
Type of feed: primary (feed detail page)

Last checked at: 2025-12-16 23:05:05.363000
Was present on blacklist at: 2025-12-15 05:05, 2025-12-15 11:05, 2025-12-15 17:05, 2025-12-15 23:05, 2025-12-16 05:05, 2025-12-16 11:05, 2025-12-16 17:05, 2025-12-16 23:05

Origin AS: AS14061 - DIGITALOCEAN-ASN
BGP Prefix: 139.59.128.0/19
geo: Germany, Frankfurt am Main; 🕑 Europe/Berlin
hostname: (null)
Address block ('inetnum' or 'NetRange' in whois database): 139.59.0.0 - 139.59.255.255
reserved_range: 0
Shodan's InternetDB: Open ports: 22, 79, 80, 88, 100, 102, 110, 119, 442, 443, 800, 888, 1022, 1028, 1443, 2000, 2001, 2030, 2101, 2111, 3500, 4000, 4433, 4530, 4840, 5010, 5229, 5242, 6633, 8008, 8039, 8080, 8142, 8441, 8800, 8908, 9017, 9242, 9300, 9999, 12306, 20107; Tags: cloud; CPEs: cpe:/a:openbsd:openssh:8.2p1, cpe:/a:python:python:3.9.19, cpe:/a:palletsprojects:flask:2.0.1, cpe:/o:canonical:ubuntu_linux, cpe:/a:cloudflare:cloudflare
ts_added: 2025-12-08 07:44:09.961000
ts_last_update: 2025-12-17 23:41:26.109000

Warden event timeline

DShield event timeline

Presence on blacklists