Report for IP: 139.59.184.205

Threat LevelCRITICAL80/1004 rule types
4 incidents on record · 4 rule types · last seen 14d ago
PTR N/A
Org / ASN DigitalOcean, LLC
Country 🇬🇧 United Kingdom
City Slough, England
Timezone Europe/London

Attack Analysis

Automated Path-Probing Flood
This IP requested many different non-existent pages within a short window — the signature of an automated sweep working through a wordlist of guessed paths, regardless of which specific filenames it tried. A real visitor following broken links, or a search-engine crawler, never generates this volume of distinct 404s from one IP in under a minute.
local blocklist
Project & Infrastructure Config File Probe
This IP requested a root-level project or infrastructure file — docker-compose.yml, a Terraform state file, package.json, or a generic config/secrets.json — hunting for source code, deployment secrets, or infrastructure details accidentally left reachable over HTTP. No legitimate web visitor needs these.
Bad Bot Flood
This IP generated over 20 HTTP 4xx errors in 60 seconds using a User-Agent identified as a bad bot (scraper, headless browser, or attack proxy). The high error rate indicates automated probing for vulnerabilities while trying to appear as generic traffic. Legitimate services respect robots.txt and do not flood servers with errors.

Reports (4)

Date Severity Description
22 Oct 2026 - 20:45 high Web: Bad bot 4xx flood — 20+ errors in 60s
22 Oct 2026 - 20:45 medium Query Guard — Path Project File Probe
22 Oct 2026 - 20:45 low local blocklist
22 Oct 2026 - 20:45 medium Rate Limiter — Probe Flood