139.59.136.29 - IPInfo

Basic Info

City: Frankfurt am Main

Region: Hessen

Country: Germany

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
139.59.136.99	attackbotsspam	Invalid user ubnt from 139.59.136.99 port 47440	2020-09-23 00:42:15
139.59.136.99	attackbotsspam	TCP (SYN) 139.59.136.99:59205 -> port 22, len 44	2020-09-22 16:42:32
139.59.136.99	attackspam	leo_www	2020-09-22 01:23:02
139.59.136.99	attackbotsspam	TCP (SYN) 139.59.136.99:33612 -> port 22, len 44	2020-09-21 17:05:45
139.59.136.64	attackspambots	Wordpress attack	2020-06-29 04:59:57
139.59.136.64	attack	CMS (WordPress or Joomla) login attempt.	2020-06-15 09:22:45
139.59.136.91	attackbots	Jun 3 17:24:41 foo sshd[11779]: Did not receive identification string from 139.59.136.91 Jun 3 17:27:16 foo sshd[11800]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.136.91 user=r.r Jun 3 17:27:19 foo sshd[11800]: Failed password for r.r from 139.59.136.91 port 57652 ssh2 Jun 3 17:27:19 foo sshd[11800]: Received disconnect from 139.59.136.91: 11: Normal Shutdown, Thank you for playing [preauth] Jun 3 17:27:45 foo sshd[11802]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.136.91 user=r.r Jun 3 17:27:47 foo sshd[11802]: Failed password for r.r from 139.59.136.91 port 52336 ssh2 Jun 3 17:27:47 foo sshd[11802]: Received disconnect from 139.59.136.91: 11: Normal Shutdown, Thank you for playing [preauth] Jun 3 17:28:13 foo sshd[11810]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.136.91 user=r.r Jun 3 17:28:15 foo ssh........ -------------------------------	2020-06-04 07:51:43
139.59.136.254	attack	Invalid user lox from 139.59.136.254 port 41076	2020-05-23 17:45:58
139.59.136.254	attackbots	Triggered by Fail2Ban at Ares web server	2020-05-12 07:37:17
139.59.136.254	attackbotsspam	IP blocked	2020-05-09 20:56:12
139.59.136.254	attackbotsspam	May 2 21:48:02 php1 sshd\[28626\]: Invalid user user from 139.59.136.254 May 2 21:48:02 php1 sshd\[28626\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.136.254 May 2 21:48:04 php1 sshd\[28626\]: Failed password for invalid user user from 139.59.136.254 port 59262 ssh2 May 2 21:51:43 php1 sshd\[28950\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.136.254 user=root May 2 21:51:45 php1 sshd\[28950\]: Failed password for root from 139.59.136.254 port 49002 ssh2	2020-05-03 19:17:38
139.59.136.254	attackbots	Apr 29 05:00:21 game-panel sshd[19596]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.136.254 Apr 29 05:00:24 game-panel sshd[19596]: Failed password for invalid user testbed from 139.59.136.254 port 38752 ssh2 Apr 29 05:05:26 game-panel sshd[19828]: Failed password for proxy from 139.59.136.254 port 50368 ssh2	2020-04-29 13:08:12
139.59.136.254	attack	Invalid user server from 139.59.136.254 port 43142	2020-04-25 03:37:37
139.59.136.254	attack	Invalid user server from 139.59.136.254 port 43142	2020-04-24 04:29:25
139.59.136.254	attackbotsspam	Apr 21 21:24:37 DAAP sshd[16147]: Invalid user sn from 139.59.136.254 port 52618 Apr 21 21:24:37 DAAP sshd[16147]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.136.254 Apr 21 21:24:37 DAAP sshd[16147]: Invalid user sn from 139.59.136.254 port 52618 Apr 21 21:24:39 DAAP sshd[16147]: Failed password for invalid user sn from 139.59.136.254 port 52618 ssh2 Apr 21 21:32:51 DAAP sshd[16346]: Invalid user admin from 139.59.136.254 port 52006 ...	2020-04-22 03:37:46

Whois info:

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2025, American Registry for Internet Numbers, Ltd.
#


NetRange:       139.59.0.0 - 139.59.255.255
CIDR:           139.59.0.0/16
NetName:        APNIC-ERX-139-59-0-0
NetHandle:      NET-139-59-0-0-1
Parent:         NET139 (NET-139-0-0-0-0)
NetType:        Early Registrations, Transferred to APNIC
OriginAS:       
Organization:   Asia Pacific Network Information Centre (APNIC)
RegDate:        2004-03-03
Updated:        2009-10-08
Comment:        This IP address range is not registered in the ARIN database.
Comment:        This range was transferred to the APNIC Whois Database as
Comment:        part of the ERX (Early Registration Transfer) project.
Comment:        For details, refer to the APNIC Whois Database via
Comment:        WHOIS.APNIC.NET or http://wq.apnic.net/apnic-bin/whois.pl
Comment:        
Comment:        ** IMPORTANT NOTE: APNIC is the Regional Internet Registry
Comment:        for the Asia Pacific region.  APNIC does not operate networks
Comment:        using this IP address range and is not able to investigate
Comment:        spam or abuse reports relating to these addresses.  For more
Comment:        help, refer to http://www.apnic.net/apnic-info/whois_search2/abuse-and-spamming
Ref:            https://rdap.arin.net/registry/ip/139.59.0.0

ResourceLink:  https://apps.db.ripe.net/db-web-ui/query
ResourceLink:  whois.apnic.net


OrgName:        Asia Pacific Network Information Centre
OrgId:          APNIC
Address:        PO Box 3646
City:           South Brisbane
StateProv:      QLD
PostalCode:     4101
Country:        AU
RegDate:        
Updated:        2012-01-24
Ref:            https://rdap.arin.net/registry/entity/APNIC

ReferralServer:  whois://whois.apnic.net
ResourceLink:  https://apps.db.ripe.net/db-web-ui/query

OrgTechHandle: AWC12-ARIN
OrgTechName:   APNIC Whois Contact
OrgTechPhone:  +61 7 3858 3188 
OrgTechEmail:  search-apnic-not-arin@apnic.net
OrgTechRef:    https://rdap.arin.net/registry/entity/AWC12-ARIN

OrgAbuseHandle: AWC12-ARIN
OrgAbuseName:   APNIC Whois Contact
OrgAbusePhone:  +61 7 3858 3188 
OrgAbuseEmail:  search-apnic-not-arin@apnic.net
OrgAbuseRef:    https://rdap.arin.net/registry/entity/AWC12-ARIN


#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2025, American Registry for Internet Numbers, Ltd.
#



Found a referral to whois.apnic.net.

% [whois.apnic.net]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

% Information related to '139.59.128.0 - 139.59.159.255'

% Abuse contact for '139.59.128.0 - 139.59.159.255' is 'abuse@digitalocean.com'

inetnum:        139.59.128.0 - 139.59.159.255
netname:        DIGITALOCEAN-AP
descr:          DigitalOcean, LLC
country:        DE
admin-c:        DOIA2-AP
tech-c:         DOIA2-AP
abuse-c:        AD699-AP
status:         ASSIGNED NON-PORTABLE
mnt-by:         MAINT-DIGITALOCEAN-AP
mnt-irt:        IRT-DIGITALOCEAN-AP
last-modified:  2020-05-31T21:37:28Z
source:         APNIC

irt:            IRT-DIGITALOCEAN-AP
address:        105 Edgeview Drive, Suite 425, Broomfield, Colorado 80021
e-mail:         noc@digitalocean.com
abuse-mailbox:  abuse@digitalocean.com
admin-c:        DOIA2-AP
tech-c:         DOIA2-AP
auth:           # Filtered
remarks:        noc@digitalocean.com was validated on 2025-05-20
remarks:        abuse@digitalocean.com was validated on 2025-08-14
mnt-by:         MAINT-DIGITALOCEAN-AP
last-modified:  2025-09-04T07:01:35Z
source:         APNIC

role:           ABUSE DIGITALOCEANAP
country:        ZZ
address:        105 Edgeview Drive, Suite 425, Broomfield, Colorado 80021
phone:          +000000000
e-mail:         noc@digitalocean.com
admin-c:        DOIA2-AP
tech-c:         DOIA2-AP
nic-hdl:        AD699-AP
remarks:        Generated from irt object IRT-DIGITALOCEAN-AP
remarks:        noc@digitalocean.com was validated on 2025-05-20
remarks:        abuse@digitalocean.com was validated on 2025-08-14
abuse-mailbox:  abuse@digitalocean.com
mnt-by:         APNIC-ABUSE
last-modified:  2025-08-14T13:27:09Z
source:         APNIC

role:           Digital Ocean Inc administrator
address:        105 Edgeview Drive, Suite 425, Broomfield, Colorado 80021
country:        US
phone:          +1 646-827-4366
fax-no:         +1 646-827-4366
e-mail:         abuse@digitalocean.com
admin-c:        DOIA2-AP
tech-c:         DOIA2-AP
nic-hdl:        DOIA2-AP
mnt-by:         MAINT-DIGITALOCEAN-AP
last-modified:  2025-04-11T18:24:27Z
source:         APNIC

% This query was served by the APNIC Whois Service version 1.88.34 (WHOIS-AU4)

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.59.136.29
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 65358
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;139.59.136.29.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025110601 1800 900 604800 86400

;; Query time: 15 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Nov 07 05:30:25 CST 2025
;; MSG SIZE  rcvd: 106

Host info

Host 29.136.59.139.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 29.136.59.139.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
218.98.40.132	attackspam	SSH Brute Force, server-1 sshd[14430]: Failed password for root from 218.98.40.132 port 59986 ssh2	2019-09-08 05:43:11
193.32.160.136	attackbots	SPAM Delivery Attempt	2019-09-08 06:00:55
139.199.100.51	attackbotsspam	Apr 14 19:00:01 vtv3 sshd\[8159\]: Invalid user vrouwerff from 139.199.100.51 port 53063 Apr 14 19:00:01 vtv3 sshd\[8159\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.100.51 Apr 14 19:00:03 vtv3 sshd\[8159\]: Failed password for invalid user vrouwerff from 139.199.100.51 port 53063 ssh2 Apr 14 19:07:21 vtv3 sshd\[12162\]: Invalid user csserver from 139.199.100.51 port 39798 Apr 14 19:07:21 vtv3 sshd\[12162\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.100.51 Apr 16 06:40:21 vtv3 sshd\[10489\]: Invalid user Access from 139.199.100.51 port 18148 Apr 16 06:40:21 vtv3 sshd\[10489\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.100.51 Apr 16 06:40:24 vtv3 sshd\[10489\]: Failed password for invalid user Access from 139.199.100.51 port 18148 ssh2 Apr 16 06:49:45 vtv3 sshd\[14565\]: Invalid user tac1 from 139.199.100.51 port 4829 Apr 16 06:49:45 vtv3 ssh	2019-09-08 05:21:41
78.161.238.19	attack	Automatic report - Port Scan Attack	2019-09-08 05:50:27
103.140.194.77	attackspam	@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-09-07 21:27:45,953 INFO [amun_request_handler] PortScan Detected on Port: 445 (103.140.194.77)	2019-09-08 06:03:24
2.144.242.5	attackspambots	Sep 7 11:42:42 MK-Soft-VM7 sshd\[3933\]: Invalid user deployer from 2.144.242.5 port 33838 Sep 7 11:42:42 MK-Soft-VM7 sshd\[3933\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.144.242.5 Sep 7 11:42:45 MK-Soft-VM7 sshd\[3933\]: Failed password for invalid user deployer from 2.144.242.5 port 33838 ssh2 ...	2019-09-08 05:52:03
69.171.206.254	attackspam	Sep 7 17:14:15 tux-35-217 sshd\[16919\]: Invalid user systest from 69.171.206.254 port 28653 Sep 7 17:14:15 tux-35-217 sshd\[16919\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.171.206.254 Sep 7 17:14:17 tux-35-217 sshd\[16919\]: Failed password for invalid user systest from 69.171.206.254 port 28653 ssh2 Sep 7 17:21:56 tux-35-217 sshd\[16960\]: Invalid user servermc from 69.171.206.254 port 55701 Sep 7 17:21:56 tux-35-217 sshd\[16960\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.171.206.254 ...	2019-09-08 05:38:19
49.88.112.60	attackspam	2019-09-07T10:38:25.922390abusebot-6.cloudsearch.cf sshd\[27879\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.60 user=root	2019-09-08 05:25:33
89.35.57.214	attack	Sep 7 21:18:53 MK-Soft-VM4 sshd\[7669\]: Invalid user admin from 89.35.57.214 port 45552 Sep 7 21:18:53 MK-Soft-VM4 sshd\[7669\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.35.57.214 Sep 7 21:18:54 MK-Soft-VM4 sshd\[7669\]: Failed password for invalid user admin from 89.35.57.214 port 45552 ssh2 ...	2019-09-08 05:35:50
86.228.224.149	attack	Automatic report - Port Scan Attack	2019-09-08 05:59:33
106.225.211.193	attackbotsspam	Sep 7 22:44:49 mail sshd\[27152\]: Invalid user insserver from 106.225.211.193 Sep 7 22:44:49 mail sshd\[27152\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.225.211.193 Sep 7 22:44:52 mail sshd\[27152\]: Failed password for invalid user insserver from 106.225.211.193 port 45075 ssh2 ...	2019-09-08 05:48:32
46.218.7.227	attackbotsspam	Automated report - ssh fail2ban: Sep 7 22:46:51 authentication failure Sep 7 22:46:52 wrong password, user=amsftp, port=35222, ssh2 Sep 7 22:51:05 authentication failure	2019-09-08 05:39:20
180.253.147.56	attackbotsspam	Automatic report - Port Scan Attack	2019-09-08 05:32:31
106.12.42.110	attackbotsspam	[ssh] SSH attack	2019-09-08 05:23:37
192.160.102.169	attackbots	langenachtfulda.de:80 192.160.102.169 - - \[07/Sep/2019:12:39:07 +0200\] "POST /xmlrpc.php HTTP/1.0" 301 503 "-" "Mozilla/5.0 \(X11\; Linux x86_64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/67.0.3396.99 Safari/537.36" langenachtfulda.de 192.160.102.169 \[07/Sep/2019:12:39:09 +0200\] "POST /xmlrpc.php HTTP/1.0" 200 3777 "-" "Mozilla/5.0 \(X11\; Linux x86_64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/67.0.3396.99 Safari/537.36"	2019-09-08 05:31:07

Recently Reported IPs

164.90.173.214	8.217.205.52	139.59.134.212	103.207.99.1
147.33.60.219	143.110.255.1	135.119.89.68	182.109.53.18
182.109.53.214	154.12.95.211	166.0.199.103	185.32.4.9
180.153.236.81	180.153.236.228	172.95.16.103	204.117.214.10
45.128.199.173	45.128.199.163	38.55.205.96	124.29.214.132