139.59.172.69

Classification: Malicious

139.59.172.69 is a malicious IP address in London, GB. 13 sightings from 4 threat sources (DDoS Attacker, HTTP Attacker), last seen 2026-10-14.

Current activity

  • Known attacker — Seen launching attacks over the Internet.

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
DDoS Attacker Blocklist.net.ua 2026-09-16 16:04:07 2026-10-14 16:14:25 attacker malicious-activity
HTTP Attacker Blocklist.de 2026-09-16 07:00:11 2026-09-16 07:00:11 attacker malicious-activity
Ransom_SAGE.KP Hybrid-Analysis 2021-11-17 09:00:39 2021-11-17 09:00:39
Gen:Variant.Ransom.Sage Hybrid-Analysis 2021-11-17 09:00:34 2021-11-17 09:00:34
Gen:Variant.Ransom.Cryptomix Hybrid-Analysis 2018-09-09 14:15:55 2018-09-09 14:30:22
Gen:Variant.Zusy Hybrid-Analysis 2018-07-04 10:45:49 2018-07-04 10:45:49
locky,ransomware Maltiverse 2017-10-18 02:15:25 2017-10-18 02:15:25
ransomware Maltiverse 2017-10-15 08:50:53 2017-10-15 08:50:53

Tags

ransomware apache ddos rfi attacker abuse

Whois information

AS name
AS14061 Digitalocean, LLC
AS registry
apnic
AS date
1990-06-27 00:00:00
AS CIDR
139.59.160.0/20
CIDR
139.59.0.0/17, 139.59.128.0/18, 139.59.192.0/19, 139.59.224.0/20, 139.59.240.0/21, 139.59.248.0/22, 139.59.252.0/23, 139.59.254.0/24, 139.59.255.0/25, 139.59.255.128/26, 139.59.255.192/27, 139.59.255.224/28, 139.59.255.240/29, 139.59.255.248/30, 139.59.255.252/31, 139.59.255.254/32
Registrant
Digitalocean, LLC
Address
101 Avenue of the Americas, 10th Floor, New York NY 10013
City
London
Postal code
SW1
Country
GB — United Kingdom 🇬🇧
Contact email
[email protected], [email protected], [email protected]
First indexed
2017-10-15 08:50:53
Last updated
2026-10-14 16:14:25

Malicious IPs in the same CIDR

139.59.166.49 139.59.168.149 139.59.174.210 139.59.170.85 139.59.165.88 139.59.161.182 139.59.167.79 139.59.162.164 139.59.172.69 139.59.171.237 139.59.171.235 139.59.166.193 139.59.175.245 139.59.175.247 139.59.173.98 139.59.174.130