Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Bengaluru

Region: Karnataka

Country: India

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Make a comment on this IP
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
139.59.135.84 attackbots 
Invalid user kureyon from 139.59.135.84 port 48782
 2020-10-13 22:04:05
139.59.135.84 attack 
Invalid user kureyon from 139.59.135.84 port 48782
 2020-10-13 13:30:00
139.59.135.84 attackspambots 
Oct 12 22:40:32 eventyay sshd[28379]: Failed password for root from 139.59.135.84 port 59232 ssh2
Oct 12 22:44:59 eventyay sshd[28632]: Failed password for root from 139.59.135.84 port 35022 ssh2
...
 2020-10-13 06:14:29
139.59.138.115 attackbotsspam 
(sshd) Failed SSH login from 139.59.138.115 (DE/Germany/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct 11 20:43:50 server sshd[3364]: Invalid user ssh from 139.59.138.115
Oct 11 20:43:51 server sshd[3364]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.138.115 
Oct 11 20:43:53 server sshd[3364]: Failed password for invalid user ssh from 139.59.138.115 port 58372 ssh2
Oct 11 20:48:12 server sshd[4014]: Invalid user teste from 139.59.138.115
Oct 11 20:48:12 server sshd[4014]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.138.115
 2020-10-12 05:11:22
139.59.138.115 attackspam 
Coordinated SSH brute-force attack from different IPs. pam_unix(sshd:auth):
 2020-10-11 21:16:04
139.59.138.115 attack 
fail2ban
 2020-10-11 06:37:06
139.59.138.115 attackbots 
Oct 10 17:20:21 vps-51d81928 sshd[721914]: Failed password for invalid user ftpuser from 139.59.138.115 port 54242 ssh2
Oct 10 17:24:00 vps-51d81928 sshd[721975]: Invalid user travis from 139.59.138.115 port 60512
Oct 10 17:24:00 vps-51d81928 sshd[721975]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.138.115 
Oct 10 17:24:00 vps-51d81928 sshd[721975]: Invalid user travis from 139.59.138.115 port 60512
Oct 10 17:24:02 vps-51d81928 sshd[721975]: Failed password for invalid user travis from 139.59.138.115 port 60512 ssh2
...
 2020-10-11 02:09:37
139.59.138.115 attackbots 
Oct 10 11:08:39 vserver sshd\[2687\]: Invalid user zope from 139.59.138.115Oct 10 11:08:41 vserver sshd\[2687\]: Failed password for invalid user zope from 139.59.138.115 port 35194 ssh2Oct 10 11:16:52 vserver sshd\[2784\]: Invalid user acap from 139.59.138.115Oct 10 11:16:55 vserver sshd\[2784\]: Failed password for invalid user acap from 139.59.138.115 port 49926 ssh2
...
 2020-10-10 17:54:02
139.59.135.84 attackbotsspam 
Failed password for root from 139.59.135.84 port 51112 ssh2
 2020-10-05 18:30:22
139.59.135.84 attackspam 
$f2bV_matches
 2020-10-04 04:12:07
139.59.135.84 attackspambots 
Invalid user alan from 139.59.135.84 port 57124
 2020-10-03 20:16:11
139.59.136.99 attackbotsspam 
Invalid user ubnt from 139.59.136.99 port 47440
 2020-09-23 00:42:15
139.59.136.99 attackbotsspam 
 TCP (SYN) 139.59.136.99:59205 -> port 22, len 44
 2020-09-22 16:42:32
139.59.136.99 attackspam 
leo_www
 2020-09-22 01:23:02
139.59.136.99 attackbotsspam 
 TCP (SYN) 139.59.136.99:33612 -> port 22, len 44
 2020-09-21 17:05:45
Whois info:
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#


NetRange:       139.59.0.0 - 139.59.255.255
CIDR:           139.59.0.0/16
NetName:        APNIC-ERX-139-59-0-0
NetHandle:      NET-139-59-0-0-1
Parent:         NET139 (NET-139-0-0-0-0)
NetType:        Early Registrations, Transferred to APNIC
OriginAS:       
Organization:   Asia Pacific Network Information Centre (APNIC)
RegDate:        2004-03-03
Updated:        2009-10-08
Comment:        This IP address range is not registered in the ARIN database.
Comment:        This range was transferred to the APNIC Whois Database as
Comment:        part of the ERX (Early Registration Transfer) project.
Comment:        For details, refer to the APNIC Whois Database via
Comment:        WHOIS.APNIC.NET or http://wq.apnic.net/apnic-bin/whois.pl
Comment:        
Comment:        ** IMPORTANT NOTE: APNIC is the Regional Internet Registry
Comment:        for the Asia Pacific region.  APNIC does not operate networks
Comment:        using this IP address range and is not able to investigate
Comment:        spam or abuse reports relating to these addresses.  For more
Comment:        help, refer to http://www.apnic.net/apnic-info/whois_search2/abuse-and-spamming
Ref:            https://rdap.arin.net/registry/ip/139.59.0.0

ResourceLink:  https://apps.db.ripe.net/db-web-ui/query
ResourceLink:  whois.apnic.net


OrgName:        Asia Pacific Network Information Centre
OrgId:          APNIC
Address:        PO Box 3646
City:           South Brisbane
StateProv:      QLD
PostalCode:     4101
Country:        AU
RegDate:        
Updated:        2012-01-24
Ref:            https://rdap.arin.net/registry/entity/APNIC

ReferralServer:  whois://whois.apnic.net
ResourceLink:  http://wq.apnic.net/whois-search/static/search.html

OrgTechHandle: AWC12-ARIN
OrgTechName:   APNIC Whois Contact
OrgTechPhone:  +61 7 3858 3188 
OrgTechEmail:  search-apnic-not-arin@apnic.net
OrgTechRef:    https://rdap.arin.net/registry/entity/AWC12-ARIN

OrgAbuseHandle: AWC12-ARIN
OrgAbuseName:   APNIC Whois Contact
OrgAbusePhone:  +61 7 3858 3188 
OrgAbuseEmail:  search-apnic-not-arin@apnic.net
OrgAbuseRef:    https://rdap.arin.net/registry/entity/AWC12-ARIN


#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#



Found a referral to whois.apnic.net.

% [whois.apnic.net]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

% Information related to '139.59.0.0 - 139.59.15.255'

% Abuse contact for '139.59.0.0 - 139.59.15.255' is 'abuse@digitalocean.com'

inetnum:        139.59.0.0 - 139.59.15.255
netname:        DIGITALOCEAN-AP
descr:          DigitalOcean, LLC
country:        IN
admin-c:        DOIA2-AP
tech-c:         DOIA2-AP
abuse-c:        AD699-AP
status:         ASSIGNED NON-PORTABLE
mnt-by:         MAINT-DIGITALOCEAN-AP
mnt-irt:        IRT-DIGITALOCEAN-AP
last-modified:  2020-05-31T21:32:24Z
source:         APNIC

irt:            IRT-DIGITALOCEAN-AP
address:        105 Edgeview Drive, Suite 425, Broomfield, Colorado 80021
e-mail:         noc@digitalocean.com
abuse-mailbox:  abuse@digitalocean.com
admin-c:        DOIA2-AP
tech-c:         DOIA2-AP
auth:           # Filtered
remarks:        abuse@digitalocean.com is invalid
remarks:        noc@digitalocean.com is invalid
mnt-by:         MAINT-DIGITALOCEAN-AP
last-modified:  2026-10-14T13:12:06Z
source:         APNIC

role:           ABUSE DIGITALOCEANAP
country:        ZZ
address:        105 Edgeview Drive, Suite 425, Broomfield, Colorado 80021
phone:          +000000000
e-mail:         noc@digitalocean.com
admin-c:        DOIA2-AP
tech-c:         DOIA2-AP
nic-hdl:        AD699-AP
remarks:        Generated from irt object IRT-DIGITALOCEAN-AP
remarks:        abuse@digitalocean.com is invalid
remarks:        noc@digitalocean.com is invalid
abuse-mailbox:  abuse@digitalocean.com
mnt-by:         APNIC-ABUSE
last-modified:  2026-10-14T13:14:03Z
source:         APNIC

role:           Digital Ocean Inc administrator
address:        105 Edgeview Drive, Suite 425, Broomfield, Colorado 80021
country:        US
phone:          +1 646-827-4366
fax-no:         +1 646-827-4366
e-mail:         abuse@digitalocean.com
admin-c:        DOIA2-AP
tech-c:         DOIA2-AP
nic-hdl:        DOIA2-AP
mnt-by:         MAINT-DIGITALOCEAN-AP
last-modified:  2025-04-11T18:24:27Z
source:         APNIC

% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-AU5)
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.59.13.193
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 19956
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;139.59.13.193.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026102501 1800 900 604800 86400

;; Query time: 8 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Oct 26 09:01:23 CST 2026
;; MSG SIZE  rcvd: 106
Host info
Host 193.13.59.139.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 193.13.59.139.in-addr.arpa: NXDOMAIN
Related IP info:
139.59.13.53
139.59.13.227
139.59.13.83
139.59.13.139
139.59.13.244
139.59.13.251
139.59.13.68
139.59.13.122
139.59.13.238
139.59.13.222
139.59.13.46
139.59.13.250
139.59.13.170
139.59.13.137
139.59.13.62
139.59.13.204
139.59.13.78
139.59.13.145
139.59.13.177
139.59.13.140
139.59.13.14
139.59.13.230
139.59.13.113
139.59.13.126
139.59.13.116
139.59.13.106
139.59.13.147
139.59.13.232
139.59.13.168
139.59.13.94
139.59.13.148
139.59.13.35
139.59.13.117
139.59.13.211
139.59.13.12
139.59.13.195
139.59.13.190
139.59.13.206
139.59.13.174
139.59.13.64
139.59.13.214
139.59.13.77
139.59.13.92
139.59.13.123
139.59.13.60
139.59.13.99
139.59.13.28
139.59.13.181
139.59.13.31
139.59.13.32
139.59.13.100
139.59.13.45
139.59.13.239
139.59.13.81
139.59.13.119
139.59.13.16
139.59.13.51
139.59.13.109
139.59.13.15
139.59.13.63
139.59.13.216
139.59.13.225
139.59.13.144
139.59.13.180
139.59.13.125
139.59.13.127
139.59.13.59
139.59.13.24
139.59.13.93
139.59.13.173
139.59.13.159
139.59.13.69
139.59.13.2
139.59.13.158
139.59.13.164
139.59.13.134
139.59.13.54
139.59.13.198
139.59.13.243
139.59.13.76
139.59.13.115
139.59.13.178
139.59.13.193
139.59.13.130
139.59.13.210
139.59.13.55
139.59.13.18
139.59.13.160
139.59.13.199
139.59.13.10
139.59.13.111
139.59.13.7
139.59.13.57
139.59.13.194
139.59.13.142
139.59.13.231
139.59.13.49
139.59.13.118
139.59.13.101
139.59.13.224
139.59.13.146
139.59.13.87
139.59.13.248
139.59.13.240
139.59.13.44
139.59.13.207
139.59.13.84
139.59.13.103
139.59.13.47
139.59.13.157
139.59.13.39
139.59.13.208
139.59.13.143
139.59.13.247
139.59.13.182
139.59.13.176
139.59.13.192
139.59.13.191
139.59.13.189
139.59.13.215
139.59.13.138
139.59.13.73
139.59.13.150
139.59.13.163
139.59.13.38
139.59.13.67
139.59.13.85
139.59.13.234
139.59.13.19
139.59.13.41
139.59.13.241
139.59.13.52
139.59.13.151
139.59.13.121
139.59.13.220
139.59.13.6
139.59.13.205
139.59.13.252
139.59.13.161
139.59.13.141
139.59.13.131
139.59.13.152
139.59.13.135
139.59.13.153
139.59.13.246
139.59.13.21
139.59.13.4
139.59.13.82
139.59.13.74
139.59.13.124
139.59.13.34
139.59.13.129
139.59.13.89
139.59.13.167
139.59.13.221
139.59.13.50
139.59.13.171
139.59.13.26
139.59.13.162
139.59.13.245
139.59.13.9
139.59.13.154
139.59.13.104
139.59.13.105
139.59.13.200
139.59.13.217
139.59.13.110
139.59.13.13
139.59.13.65
139.59.13.186
139.59.13.70
139.59.13.20
139.59.13.3
139.59.13.183
139.59.13.88
139.59.13.156
139.59.13.196
139.59.13.27
139.59.13.165
139.59.13.237
139.59.13.213
139.59.13.236
139.59.13.228
139.59.13.179
139.59.13.37
139.59.13.166
139.59.13.36
139.59.13.187
139.59.13.86
139.59.13.42
139.59.13.169
139.59.13.11
139.59.13.72
139.59.13.218
139.59.13.56
139.59.13.61
139.59.13.33
139.59.13.114
139.59.13.201
139.59.13.203
139.59.13.253
139.59.13.254
139.59.13.30
139.59.13.197
139.59.13.107
139.59.13.23
139.59.13.96
139.59.13.95
139.59.13.133
139.59.13.155
139.59.13.29
139.59.13.233
139.59.13.79
139.59.13.80
139.59.13.229
139.59.13.149
139.59.13.8
139.59.13.102
139.59.13.5
139.59.13.223
139.59.13.175
139.59.13.75
139.59.13.43
139.59.13.235
139.59.13.219
139.59.13.184
139.59.13.97
139.59.13.98
139.59.13.91
139.59.13.249
139.59.13.128
139.59.13.71
139.59.13.242
139.59.13.120
139.59.13.202
139.59.13.48
139.59.13.58
139.59.13.226
139.59.13.108
139.59.13.17
139.59.13.136
139.59.13.25
139.59.13.90
139.59.13.22
139.59.13.112
139.59.13.209
139.59.13.188
139.59.13.212
139.59.13.132
139.59.13.40
139.59.13.185
139.59.13.66
139.59.13.1
139.59.13.172
Related comments:
IP Type Details Datetime
198.98.50.112 attack 
2020-08-20T15:51[Censored Hostname] sshd[12783]: Failed password for root from 198.98.50.112 port 25832 ssh2
2020-08-20T15:51[Censored Hostname] sshd[12783]: Failed password for root from 198.98.50.112 port 25832 ssh2
2020-08-20T15:51[Censored Hostname] sshd[12783]: Failed password for root from 198.98.50.112 port 25832 ssh2[...]
 2020-08-21 00:32:26
106.13.210.188 attackbots 
Aug 20 16:20:57 abendstille sshd\[31094\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.210.188  user=root
Aug 20 16:20:59 abendstille sshd\[31094\]: Failed password for root from 106.13.210.188 port 45492 ssh2
Aug 20 16:26:40 abendstille sshd\[5141\]: Invalid user fluffy from 106.13.210.188
Aug 20 16:26:40 abendstille sshd\[5141\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.210.188
Aug 20 16:26:43 abendstille sshd\[5141\]: Failed password for invalid user fluffy from 106.13.210.188 port 47278 ssh2
...
 2020-08-20 23:59:04
103.131.71.158 attack 
(mod_security) mod_security (id:210730) triggered by 103.131.71.158 (VN/Vietnam/bot-103-131-71-158.coccoc.com): 5 in the last 3600 secs
 2020-08-21 00:23:21
58.171.243.146 attackspambots 
RDP Brute-Force (honeypot 7)
 2020-08-21 00:19:48
202.55.175.236 attack 
$f2bV_matches
 2020-08-21 00:16:50
113.92.35.40 attackbots 
Aug 20 12:36:52 www sshd[29677]: Invalid user www from 113.92.35.40
Aug 20 12:36:52 www sshd[29677]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.92.35.40 
Aug 20 12:36:54 www sshd[29677]: Failed password for invalid user www from 113.92.35.40 port 44658 ssh2
Aug 20 12:36:54 www sshd[29677]: Received disconnect from 113.92.35.40: 11: Bye Bye [preauth]
Aug 20 13:12:45 www sshd[31814]: Invalid user ox from 113.92.35.40
Aug 20 13:12:45 www sshd[31814]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.92.35.40 
Aug 20 13:12:47 www sshd[31814]: Failed password for invalid user ox from 113.92.35.40 port 49196 ssh2
Aug 20 13:12:47 www sshd[31814]: Received disconnect from 113.92.35.40: 11: Bye Bye [preauth]
Aug 20 13:24:10 www sshd[32595]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.92.35.40  user=r.r
Aug 20 13:24:12 www sshd[32595]: Failed ........
-------------------------------
 2020-08-20 23:49:18
120.35.26.129 attackbots 
2020-08-20T14:50:50.739788vps-d63064a2 sshd[5230]: User root from 120.35.26.129 not allowed because not listed in AllowUsers
2020-08-20T14:50:52.747897vps-d63064a2 sshd[5230]: Failed password for invalid user root from 120.35.26.129 port 17807 ssh2
2020-08-20T14:55:55.135134vps-d63064a2 sshd[5262]: Invalid user ts3bot from 120.35.26.129 port 17810
2020-08-20T14:55:55.144330vps-d63064a2 sshd[5262]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.35.26.129
2020-08-20T14:55:55.135134vps-d63064a2 sshd[5262]: Invalid user ts3bot from 120.35.26.129 port 17810
2020-08-20T14:55:57.339518vps-d63064a2 sshd[5262]: Failed password for invalid user ts3bot from 120.35.26.129 port 17810 ssh2
...
 2020-08-21 00:17:53
112.226.171.51 attackspambots 
Mail/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -
 2020-08-21 00:15:40
91.121.30.186 attackspam 
Aug 20 16:01:36 vpn01 sshd[30845]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.121.30.186
Aug 20 16:01:39 vpn01 sshd[30845]: Failed password for invalid user d from 91.121.30.186 port 58592 ssh2
...
 2020-08-21 00:09:49
68.193.32.116 attackbotsspam 
Aug 20 13:53:40 extapp sshd[21875]: Invalid user admin from 68.193.32.116
Aug 20 13:53:43 extapp sshd[21875]: Failed password for invalid user admin from 68.193.32.116 port 34818 ssh2
Aug 20 13:53:44 extapp sshd[21877]: Invalid user admin from 68.193.32.116


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=68.193.32.116
 2020-08-21 00:17:22
141.98.10.196 attackspam 
Unauthorized connection attempt detected from IP address 141.98.10.196 to port 22 [T]
 2020-08-21 00:24:36
74.82.47.33 attackspambots 
" "
 2020-08-21 00:26:18
79.121.20.136 attackbots 
Brute Force
 2020-08-21 00:10:27
157.230.2.208 attackspam 
Aug 20 14:06:01 pve1 sshd[4112]: Failed password for root from 157.230.2.208 port 41714 ssh2
...
 2020-08-21 00:33:36
27.71.87.149 attackbots 
Brute Force
 2020-08-20 23:47:48

Recently Reported IPs

115.60.94.19 110.52.175.218 110.246.18.156 101.26.28.237
101.24.181.78 162.216.150.7 34.150.128.205 199.165.159.73
80.82.65.22 20.65.202.135 199.165.159.79 199.165.159.78
118.213.34.132 34.203.242.177 18.208.214.137 102.39.205.125
5.133.192.160 146.19.248.35 185.143.14.119 134.33.66.242