Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Germany

Internet Service Provider: Digital Ocean Inc.

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Make a comment on this IP
Type Details Datetime
attack 
Jun 26 13:33:24 server sshd\[27476\]: Invalid user ftpadmin from 139.59.213.237
Jun 26 13:33:24 server sshd\[27476\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.213.237
Jun 26 13:33:26 server sshd\[27476\]: Failed password for invalid user ftpadmin from 139.59.213.237 port 43338 ssh2
...
 2019-07-12 07:18:38
Comments on same subnet:
IP Type Details Datetime
139.59.213.125 attackspambots 
Dec 18 18:25:44 reporting6 sshd[23557]: Did not receive identification string from 139.59.213.125
Dec 18 18:28:04 reporting6 sshd[24755]: reveeclipse mapping checking getaddrinfo for 353897.cloudwaysapps.com [139.59.213.125] failed - POSSIBLE BREAK-IN ATTEMPT!
Dec 18 18:28:04 reporting6 sshd[24755]: User r.r from 139.59.213.125 not allowed because not listed in AllowUsers
Dec 18 18:28:04 reporting6 sshd[24755]: Failed password for invalid user r.r from 139.59.213.125 port 37836 ssh2
Dec 18 18:28:10 reporting6 sshd[24814]: reveeclipse mapping checking getaddrinfo for 353897.cloudwaysapps.com [139.59.213.125] failed - POSSIBLE BREAK-IN ATTEMPT!
Dec 18 18:28:10 reporting6 sshd[24814]: User r.r from 139.59.213.125 not allowed because not listed in AllowUsers
Dec 18 18:28:10 reporting6 sshd[24814]: Failed password for invalid user r.r from 139.59.213.125 port 42598 ssh2


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=139.59.213.125
 2019-12-19 05:36:47
139.59.213.137 attackbots 
139.59.213.137 - - [13/Oct/2019:13:52:54 +0200] "GET /wp-login.php HTTP/1.1" 200 1129 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.59.213.137 - - [13/Oct/2019:13:52:55 +0200] "POST /wp-login.php HTTP/1.1" 200 1524 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.59.213.137 - - [13/Oct/2019:13:52:55 +0200] "GET /wp-login.php HTTP/1.1" 200 1129 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.59.213.137 - - [13/Oct/2019:13:52:56 +0200] "POST /wp-login.php HTTP/1.1" 200 1507 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.59.213.137 - - [13/Oct/2019:13:52:56 +0200] "GET /wp-login.php HTTP/1.1" 200 1129 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.59.213.137 - - [13/Oct/2019:13:52:56 +0200] "POST /wp-login.php HTTP/1.1" 200 1501 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
 2019-10-13 23:00:16
139.59.213.27 attackspam 
Aug 19 02:08:58 vpn01 sshd\[13555\]: Invalid user gregory from 139.59.213.27
Aug 19 02:08:58 vpn01 sshd\[13555\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.213.27
Aug 19 02:09:00 vpn01 sshd\[13555\]: Failed password for invalid user gregory from 139.59.213.27 port 45156 ssh2
 2019-08-19 10:55:46
139.59.213.27 attack 
Aug 11 21:32:34 ns37 sshd[14472]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.213.27
 2019-08-12 04:42:26
139.59.213.27 attack 
Aug  6 10:45:22 hosting sshd[25951]: Invalid user anuchaw from 139.59.213.27 port 40276
...
 2019-08-06 17:20:34
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.59.213.237
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 38324
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.59.213.237.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019071101 1800 900 604800 86400

;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Fri Jul 12 07:18:24 CST 2019
;; MSG SIZE  rcvd: 118
Host info
Host 237.213.59.139.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 237.213.59.139.in-addr.arpa: NXDOMAIN
Related IP info:
139.59.213.48
139.59.213.15
139.59.213.205
139.59.213.228
139.59.213.102
139.59.213.34
139.59.213.137
139.59.213.224
139.59.213.63
139.59.213.120
139.59.213.51
139.59.213.150
139.59.213.242
139.59.213.175
139.59.213.142
139.59.213.118
139.59.213.192
139.59.213.24
139.59.213.161
139.59.213.163
139.59.213.130
139.59.213.232
139.59.213.59
139.59.213.28
139.59.213.212
139.59.213.38
139.59.213.178
139.59.213.165
139.59.213.245
139.59.213.237
139.59.213.179
139.59.213.194
139.59.213.68
139.59.213.169
139.59.213.95
139.59.213.37
139.59.213.131
139.59.213.147
139.59.213.246
139.59.213.31
139.59.213.129
139.59.213.223
139.59.213.36
139.59.213.11
139.59.213.119
139.59.213.93
139.59.213.155
139.59.213.219
139.59.213.84
139.59.213.81
139.59.213.218
139.59.213.8
139.59.213.186
139.59.213.106
139.59.213.139
139.59.213.96
139.59.213.124
139.59.213.5
139.59.213.215
139.59.213.103
139.59.213.164
139.59.213.127
139.59.213.22
139.59.213.114
139.59.213.62
139.59.213.249
139.59.213.89
139.59.213.20
139.59.213.193
139.59.213.145
139.59.213.140
139.59.213.99
139.59.213.101
139.59.213.52
139.59.213.6
139.59.213.180
139.59.213.229
139.59.213.154
139.59.213.173
139.59.213.18
139.59.213.94
139.59.213.69
139.59.213.133
139.59.213.98
139.59.213.191
139.59.213.39
139.59.213.203
139.59.213.23
139.59.213.207
139.59.213.243
139.59.213.121
139.59.213.183
139.59.213.110
139.59.213.66
139.59.213.1
139.59.213.10
139.59.213.138
139.59.213.4
139.59.213.226
139.59.213.195
139.59.213.196
139.59.213.239
139.59.213.97
139.59.213.45
139.59.213.233
139.59.213.231
139.59.213.188
139.59.213.241
139.59.213.174
139.59.213.235
139.59.213.135
139.59.213.216
139.59.213.35
139.59.213.250
139.59.213.112
139.59.213.108
139.59.213.7
139.59.213.50
139.59.213.132
139.59.213.159
139.59.213.253
139.59.213.254
139.59.213.149
139.59.213.162
139.59.213.227
139.59.213.30
139.59.213.115
139.59.213.197
139.59.213.204
139.59.213.221
139.59.213.151
139.59.213.107
139.59.213.12
139.59.213.79
139.59.213.172
139.59.213.144
139.59.213.47
139.59.213.14
139.59.213.44
139.59.213.46
139.59.213.105
139.59.213.171
139.59.213.248
139.59.213.111
139.59.213.251
139.59.213.55
139.59.213.76
139.59.213.27
139.59.213.61
139.59.213.153
139.59.213.73
139.59.213.122
139.59.213.234
139.59.213.190
139.59.213.88
139.59.213.244
139.59.213.60
139.59.213.42
139.59.213.160
139.59.213.116
139.59.213.40
139.59.213.128
139.59.213.146
139.59.213.82
139.59.213.16
139.59.213.158
139.59.213.71
139.59.213.104
139.59.213.41
139.59.213.3
139.59.213.208
139.59.213.87
139.59.213.198
139.59.213.252
139.59.213.86
139.59.213.75
139.59.213.9
139.59.213.43
139.59.213.240
139.59.213.185
139.59.213.236
139.59.213.92
139.59.213.201
139.59.213.143
139.59.213.222
139.59.213.67
139.59.213.117
139.59.213.225
139.59.213.113
139.59.213.54
139.59.213.177
139.59.213.220
139.59.213.134
139.59.213.2
139.59.213.230
139.59.213.64
139.59.213.85
139.59.213.53
139.59.213.72
139.59.213.210
139.59.213.238
139.59.213.152
139.59.213.217
139.59.213.202
139.59.213.211
139.59.213.170
139.59.213.123
139.59.213.29
139.59.213.167
139.59.213.181
139.59.213.166
139.59.213.32
139.59.213.148
139.59.213.90
139.59.213.13
139.59.213.187
139.59.213.199
139.59.213.74
139.59.213.26
139.59.213.65
139.59.213.182
139.59.213.57
139.59.213.77
139.59.213.125
139.59.213.21
139.59.213.213
139.59.213.209
139.59.213.214
139.59.213.70
139.59.213.109
139.59.213.33
139.59.213.91
139.59.213.19
139.59.213.141
139.59.213.206
139.59.213.136
139.59.213.168
139.59.213.200
139.59.213.80
139.59.213.17
139.59.213.176
139.59.213.157
139.59.213.126
139.59.213.49
139.59.213.100
139.59.213.247
139.59.213.156
139.59.213.58
139.59.213.25
139.59.213.56
139.59.213.184
139.59.213.78
139.59.213.83
139.59.213.189
Related comments:
IP Type Details Datetime
78.108.245.211 attack 
proto=tcp  .  spt=36590  .  dpt=25  .     (Found on   Dark List de Oct 19)     (2354)
 2019-10-20 05:14:44
72.249.234.35 attack 
proto=tcp  .  spt=60355  .  dpt=25  .     (Found on   Dark List de Oct 19)     (2353)
 2019-10-20 05:17:49
69.171.74.150 attack 
Oct 19 17:03:39 server sshd\[31190\]: Failed password for root from 69.171.74.150 port 37096 ssh2
Oct 19 23:05:59 server sshd\[17790\]: Invalid user miner from 69.171.74.150
Oct 19 23:05:59 server sshd\[17790\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.171.74.150.16clouds.com 
Oct 19 23:06:01 server sshd\[17790\]: Failed password for invalid user miner from 69.171.74.150 port 60388 ssh2
Oct 19 23:16:09 server sshd\[21201\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.171.74.150.16clouds.com  user=root
...
 2019-10-20 05:35:30
104.37.216.98 attack 
port scan and connect, tcp 22 (ssh)
 2019-10-20 05:14:24
122.228.89.67 attackbotsspam 
Oct 19 22:12:31 vmanager6029 sshd\[2121\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.228.89.67  user=root
Oct 19 22:12:34 vmanager6029 sshd\[2121\]: Failed password for root from 122.228.89.67 port 19108 ssh2
Oct 19 22:16:46 vmanager6029 sshd\[2171\]: Invalid user 123 from 122.228.89.67 port 39076
 2019-10-20 05:16:57
51.254.204.190 attack 
Oct 19 10:12:58 php1 sshd\[2406\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.ip-51-254-204.eu  user=root
Oct 19 10:12:59 php1 sshd\[2406\]: Failed password for root from 51.254.204.190 port 56446 ssh2
Oct 19 10:16:46 php1 sshd\[2867\]: Invalid user das from 51.254.204.190
Oct 19 10:16:46 php1 sshd\[2867\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.ip-51-254-204.eu
Oct 19 10:16:49 php1 sshd\[2867\]: Failed password for invalid user das from 51.254.204.190 port 39590 ssh2
 2019-10-20 05:15:56
109.202.17.4 attackbots 
postfix (unknown user, SPF fail or relay access denied)
 2019-10-20 05:17:35
179.107.67.80 attack 
proto=tcp  .  spt=53083  .  dpt=25  .     (Found on   Dark List de Oct 19)     (2350)
 2019-10-20 05:20:58
173.249.16.4 attackspam 
MultiHost/MultiPort Probe, Scan, Hack -
 2019-10-20 05:32:51
51.38.237.214 attackspam 
2019-10-19T20:45:58.806553abusebot-2.cloudsearch.cf sshd\[26685\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=214.ip-51-38-237.eu  user=root
 2019-10-20 05:21:43
69.94.157.113 attack 
Oct 19 22:16:56 smtp postfix/smtpd[37474]: NOQUEUE: reject: RCPT from acidic.culturemaroc.com[69.94.157.113]: 554 5.7.1 Service unavailable; Client host [69.94.157.113] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBL461383 / https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo=
...
 2019-10-20 05:09:50
222.186.175.150 attackbots 
2019-10-19T21:20:25.216565abusebot-8.cloudsearch.cf sshd\[10901\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.150  user=root
 2019-10-20 05:22:07
91.204.188.50 attack 
Oct 19 23:17:13 ArkNodeAT sshd\[15596\]: Invalid user assassin from 91.204.188.50
Oct 19 23:17:13 ArkNodeAT sshd\[15596\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.204.188.50
Oct 19 23:17:15 ArkNodeAT sshd\[15596\]: Failed password for invalid user assassin from 91.204.188.50 port 53018 ssh2
 2019-10-20 05:20:07
188.213.49.121 attack 
Invalid user scp from 188.213.49.121 port 39808
 2019-10-20 05:28:26
158.174.122.199 attackspam 
10/19/2019-22:16:56.243674 158.174.122.199 Protocol: 6 ET TOR Known Tor Exit Node Traffic group 12
 2019-10-20 05:10:43

Recently Reported IPs

129.22.59.161 191.240.70.79 243.91.198.6 101.79.0.58
85.14.245.156 14.207.197.107 121.51.205.210 200.140.250.150
88.247.2.132 212.14.22.107 139.204.71.218 7.119.31.101
182.75.246.242 200.24.16.149 49.144.10.219 176.126.162.236
82.207.125.22 156.203.182.232 186.20.213.205 151.252.108.128