Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Singapore

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
139.59.157.225 attackproxy
Brute-force attacker IP
2024-06-13 12:39:38
139.59.173.205 attack
Fraud connect
2024-05-12 23:34:25
139.59.11.31 attackproxy
, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
2023-01-16 21:48:53
139.59.108.225 attackspam
Oct 13 23:27:26 vps647732 sshd[5538]: Failed password for root from 139.59.108.225 port 45492 ssh2
...
2020-10-14 08:41:11
139.59.18.215 attackbots
SSH_scan
2020-10-14 08:03:41
139.59.148.56 attack
Oct 13 14:30:51 staging sshd[30119]: Invalid user adm from 139.59.148.56 port 59726
Oct 13 14:30:51 staging sshd[30119]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.148.56 
Oct 13 14:30:51 staging sshd[30119]: Invalid user adm from 139.59.148.56 port 59726
Oct 13 14:30:53 staging sshd[30119]: Failed password for invalid user adm from 139.59.148.56 port 59726 ssh2
...
2020-10-14 04:31:27
139.59.135.84 attackbots
Invalid user kureyon from 139.59.135.84 port 48782
2020-10-13 22:04:05
139.59.135.84 attack
Invalid user kureyon from 139.59.135.84 port 48782
2020-10-13 13:30:00
139.59.135.84 attackspambots
Oct 12 22:40:32 eventyay sshd[28379]: Failed password for root from 139.59.135.84 port 59232 ssh2
Oct 12 22:44:59 eventyay sshd[28632]: Failed password for root from 139.59.135.84 port 35022 ssh2
...
2020-10-13 06:14:29
139.59.104.134 attackbots
(sshd) Failed SSH login from 139.59.104.134 (SG/Singapore/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct 12 18:45:52 server2 sshd[16898]: Invalid user ed from 139.59.104.134 port 19534
Oct 12 18:45:55 server2 sshd[16898]: Failed password for invalid user ed from 139.59.104.134 port 19534 ssh2
Oct 12 18:47:43 server2 sshd[17237]: Invalid user neeraj from 139.59.104.134 port 36290
Oct 12 18:47:45 server2 sshd[17237]: Failed password for invalid user neeraj from 139.59.104.134 port 36290 ssh2
Oct 12 18:49:00 server2 sshd[17586]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.104.134  user=root
2020-10-13 04:34:53
139.59.151.124 attackspam
Invalid user wille from 139.59.151.124 port 45162
2020-10-13 00:43:35
139.59.104.134 attack
SSH/22 MH Probe, BF, Hack -
2020-10-12 20:14:50
139.59.151.124 attackspambots
Oct  6 17:55:26 myhostname sshd[20688]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.151.124  user=r.r
Oct  6 17:55:28 myhostname sshd[20688]: Failed password for r.r from 139.59.151.124 port 55302 ssh2
Oct  6 17:55:28 myhostname sshd[20688]: Received disconnect from 139.59.151.124 port 55302:11: Bye Bye [preauth]
Oct  6 17:55:28 myhostname sshd[20688]: Disconnected from 139.59.151.124 port 55302 [preauth]
Oct  6 18:17:38 myhostname sshd[13694]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.151.124  user=r.r
Oct  6 18:17:40 myhostname sshd[13694]: Failed password for r.r from 139.59.151.124 port 35740 ssh2
Oct  6 18:17:40 myhostname sshd[13694]: Received disconnect from 139.59.151.124 port 35740:11: Bye Bye [preauth]
Oct  6 18:17:40 myhostname sshd[13694]: Disconnected from 139.59.151.124 port 35740 [preauth]
Oct  6 18:21:58 myhostname sshd[18541]: pam_unix(sshd:auth): aut........
-------------------------------
2020-10-12 16:08:26
139.59.138.115 attackbotsspam
(sshd) Failed SSH login from 139.59.138.115 (DE/Germany/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct 11 20:43:50 server sshd[3364]: Invalid user ssh from 139.59.138.115
Oct 11 20:43:51 server sshd[3364]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.138.115 
Oct 11 20:43:53 server sshd[3364]: Failed password for invalid user ssh from 139.59.138.115 port 58372 ssh2
Oct 11 20:48:12 server sshd[4014]: Invalid user teste from 139.59.138.115
Oct 11 20:48:12 server sshd[4014]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.138.115
2020-10-12 05:11:22
139.59.102.170 attack
2020-10-11T22:29:07+0200 Failed SSH Authentication/Brute Force Attack. (Server 4)
2020-10-12 04:32:28
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.59.1.14
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 50940
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;139.59.1.14.			IN	A

;; AUTHORITY SECTION:
.			600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022020702 1800 900 604800 86400

;; Query time: 20 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 08 07:46:45 CST 2022
;; MSG SIZE  rcvd: 104
Host info
Host 14.1.59.139.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 14.1.59.139.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
60.30.92.74 attackspambots
Dec 15 11:29:36 pkdns2 sshd\[19203\]: Invalid user orders from 60.30.92.74Dec 15 11:29:38 pkdns2 sshd\[19203\]: Failed password for invalid user orders from 60.30.92.74 port 30400 ssh2Dec 15 11:32:27 pkdns2 sshd\[19400\]: Invalid user ericka from 60.30.92.74Dec 15 11:32:29 pkdns2 sshd\[19400\]: Failed password for invalid user ericka from 60.30.92.74 port 54982 ssh2Dec 15 11:35:20 pkdns2 sshd\[19598\]: Invalid user melissa from 60.30.92.74Dec 15 11:35:23 pkdns2 sshd\[19598\]: Failed password for invalid user melissa from 60.30.92.74 port 39542 ssh2
...
2019-12-15 17:54:48
95.110.154.101 attack
Dec 15 10:26:54 legacy sshd[22197]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.110.154.101
Dec 15 10:26:56 legacy sshd[22197]: Failed password for invalid user alex from 95.110.154.101 port 52192 ssh2
Dec 15 10:32:34 legacy sshd[22394]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.110.154.101
...
2019-12-15 17:39:32
69.64.46.198 attackbotsspam
Scanning
2019-12-15 18:05:55
45.55.128.109 attack
Dec 15 10:30:57 DAAP sshd[13060]: Invalid user server from 45.55.128.109 port 59020
Dec 15 10:30:57 DAAP sshd[13060]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.128.109
Dec 15 10:30:57 DAAP sshd[13060]: Invalid user server from 45.55.128.109 port 59020
Dec 15 10:30:58 DAAP sshd[13060]: Failed password for invalid user server from 45.55.128.109 port 59020 ssh2
Dec 15 10:36:03 DAAP sshd[13116]: Invalid user aemb from 45.55.128.109 port 41290
...
2019-12-15 17:40:41
186.31.37.203 attackbotsspam
--- report ---
Dec 15 04:23:55 sshd: Connection from 186.31.37.203 port 59048
Dec 15 04:23:56 sshd: Address 186.31.37.203 maps to ingettel.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
Dec 15 04:23:56 sshd: Invalid user 12345 from 186.31.37.203
Dec 15 04:23:56 sshd: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.31.37.203
Dec 15 04:23:58 sshd: Failed password for invalid user 12345 from 186.31.37.203 port 59048 ssh2
Dec 15 04:23:58 sshd: Received disconnect from 186.31.37.203: 11: Bye Bye [preauth]
2019-12-15 17:42:18
43.255.71.195 attackbotsspam
Dec 14 23:22:36 auw2 sshd\[22305\]: Invalid user empty from 43.255.71.195
Dec 14 23:22:36 auw2 sshd\[22305\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.255.71.195
Dec 14 23:22:38 auw2 sshd\[22305\]: Failed password for invalid user empty from 43.255.71.195 port 50527 ssh2
Dec 14 23:28:32 auw2 sshd\[22807\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.255.71.195  user=root
Dec 14 23:28:35 auw2 sshd\[22807\]: Failed password for root from 43.255.71.195 port 43436 ssh2
2019-12-15 17:32:20
111.231.132.94 attack
Dec 14 12:45:56 Tower sshd[18954]: refused connect from 129.211.99.69 (129.211.99.69)
Dec 15 01:26:51 Tower sshd[18954]: Connection from 111.231.132.94 port 48420 on 192.168.10.220 port 22
Dec 15 01:26:54 Tower sshd[18954]: Invalid user armida from 111.231.132.94 port 48420
Dec 15 01:26:54 Tower sshd[18954]: error: Could not get shadow information for NOUSER
Dec 15 01:26:54 Tower sshd[18954]: Failed password for invalid user armida from 111.231.132.94 port 48420 ssh2
Dec 15 01:26:54 Tower sshd[18954]: Received disconnect from 111.231.132.94 port 48420:11: Bye Bye [preauth]
Dec 15 01:26:54 Tower sshd[18954]: Disconnected from invalid user armida 111.231.132.94 port 48420 [preauth]
2019-12-15 18:01:27
167.86.103.240 attack
Unauthorized connection attempt detected from IP address 167.86.103.240 to port 993
2019-12-15 17:34:27
183.88.177.252 attackspam
Dec 15 09:52:13 * sshd[23840]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.88.177.252
Dec 15 09:52:16 * sshd[23840]: Failed password for invalid user marl from 183.88.177.252 port 43458 ssh2
2019-12-15 17:44:08
103.82.209.155 attack
1576391239 - 12/15/2019 07:27:19 Host: 103.82.209.155/103.82.209.155 Port: 445 TCP Blocked
2019-12-15 18:00:09
148.72.65.10 attackspambots
Dec 15 09:09:48 server sshd\[25310\]: Invalid user news from 148.72.65.10
Dec 15 09:09:48 server sshd\[25310\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip-148-72-65-10.ip.secureserver.net 
Dec 15 09:09:49 server sshd\[25310\]: Failed password for invalid user news from 148.72.65.10 port 48642 ssh2
Dec 15 09:27:46 server sshd\[30965\]: Invalid user brychcy from 148.72.65.10
Dec 15 09:27:46 server sshd\[30965\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip-148-72-65-10.ip.secureserver.net 
...
2019-12-15 17:34:56
114.67.70.94 attack
Dec 15 10:28:42 sd-53420 sshd\[9443\]: Invalid user 123 from 114.67.70.94
Dec 15 10:28:42 sd-53420 sshd\[9443\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.67.70.94
Dec 15 10:28:44 sd-53420 sshd\[9443\]: Failed password for invalid user 123 from 114.67.70.94 port 56100 ssh2
Dec 15 10:34:25 sd-53420 sshd\[11020\]: Invalid user root123467 from 114.67.70.94
Dec 15 10:34:25 sd-53420 sshd\[11020\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.67.70.94
...
2019-12-15 17:35:23
178.46.210.44 attack
Unauthorised access (Dec 15) SRC=178.46.210.44 LEN=40 PREC=0x20 TTL=51 ID=42472 TCP DPT=23 WINDOW=33604 SYN 
Unauthorised access (Dec 15) SRC=178.46.210.44 LEN=40 PREC=0x20 TTL=51 ID=42472 TCP DPT=23 WINDOW=33604 SYN
2019-12-15 17:32:50
51.77.212.124 attackbotsspam
Dec 15 08:07:57 icinga sshd[44333]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.212.124 
Dec 15 08:07:59 icinga sshd[44333]: Failed password for invalid user burts from 51.77.212.124 port 38866 ssh2
Dec 15 08:18:07 icinga sshd[53856]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.212.124 
...
2019-12-15 17:35:52
137.74.199.180 attack
SSH Brute-Force reported by Fail2Ban
2019-12-15 18:08:53

Recently Reported IPs

221.158.79.103 112.46.68.147 82.156.7.135 118.172.138.15
103.153.140.113 65.48.93.103 177.91.194.25 175.100.85.160
125.99.76.78 3.234.177.75 115.127.127.154 54.177.112.215
219.152.143.201 110.243.10.56 138.128.114.236 95.158.139.61
201.206.176.216 103.47.64.85 115.61.113.140 204.157.104.134