Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Singapore

Internet Service Provider: Digital Ocean Inc.

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attack
Mar 18 02:24:27 163-172-32-151 sshd[17571]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.248.5  user=root
Mar 18 02:24:28 163-172-32-151 sshd[17571]: Failed password for root from 139.59.248.5 port 36078 ssh2
...
2020-03-18 09:47:08
attackbots
Port 22 Scan, PTR: None
2020-02-14 09:28:50
attack
$f2bV_matches
2020-02-02 13:36:06
attackspam
ssh failed login
2020-01-12 00:01:51
attack
Jan  7 17:49:13 SilenceServices sshd[6362]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.248.5
Jan  7 17:49:15 SilenceServices sshd[6362]: Failed password for invalid user walter from 139.59.248.5 port 47772 ssh2
Jan  7 17:51:58 SilenceServices sshd[8267]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.248.5
2020-01-08 01:53:03
attackspambots
leo_www
2020-01-04 19:08:21
attackbots
Jan  3 14:08:59 plex sshd[4748]: Invalid user 1234 from 139.59.248.5 port 58938
2020-01-03 21:10:07
attackspambots
SSH/22 MH Probe, BF, Hack -
2019-12-24 18:29:27
attackspambots
Dec 22 14:43:38 MK-Soft-Root2 sshd[19589]: Failed password for root from 139.59.248.5 port 43544 ssh2
Dec 22 14:49:39 MK-Soft-Root2 sshd[20686]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.248.5 
...
2019-12-22 22:17:45
attack
2019-12-21T17:35:30.697394centos sshd\[30834\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.248.5  user=mysql
2019-12-21T17:35:32.529253centos sshd\[30834\]: Failed password for mysql from 139.59.248.5 port 56420 ssh2
2019-12-21T17:44:22.987359centos sshd\[31287\]: Invalid user harborg from 139.59.248.5 port 60532
2019-12-21T17:44:22.993495centos sshd\[31287\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.248.5
2019-12-22 03:24:27
attackbots
Dec 16 07:59:55 eddieflores sshd\[317\]: Invalid user monssen from 139.59.248.5
Dec 16 07:59:55 eddieflores sshd\[317\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.248.5
Dec 16 07:59:57 eddieflores sshd\[317\]: Failed password for invalid user monssen from 139.59.248.5 port 51154 ssh2
Dec 16 08:06:16 eddieflores sshd\[995\]: Invalid user brorson from 139.59.248.5
Dec 16 08:06:16 eddieflores sshd\[995\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.248.5
2019-12-17 02:22:55
attackbots
Dec 15 09:41:31 php1 sshd\[15787\]: Invalid user 123 from 139.59.248.5
Dec 15 09:41:31 php1 sshd\[15787\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.248.5
Dec 15 09:41:33 php1 sshd\[15787\]: Failed password for invalid user 123 from 139.59.248.5 port 43002 ssh2
Dec 15 09:47:41 php1 sshd\[16578\]: Invalid user melon from 139.59.248.5
Dec 15 09:47:41 php1 sshd\[16578\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.248.5
2019-12-16 03:48:54
attack
Dec  9 22:39:06 webhost01 sshd[7193]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.248.5
Dec  9 22:39:07 webhost01 sshd[7193]: Failed password for invalid user Password99 from 139.59.248.5 port 44568 ssh2
...
2019-12-10 01:36:15
attackbotsspam
Dec  5 11:34:51 kapalua sshd\[18584\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.248.5  user=root
Dec  5 11:34:53 kapalua sshd\[18584\]: Failed password for root from 139.59.248.5 port 59210 ssh2
Dec  5 11:41:03 kapalua sshd\[19348\]: Invalid user victoria from 139.59.248.5
Dec  5 11:41:03 kapalua sshd\[19348\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.248.5
Dec  5 11:41:05 kapalua sshd\[19348\]: Failed password for invalid user victoria from 139.59.248.5 port 42244 ssh2
2019-12-06 05:44:40
attackbots
Dec  1 01:27:37 plusreed sshd[8672]: Invalid user olia from 139.59.248.5
...
2019-12-01 17:18:54
attack
Dec  1 00:15:30 plusreed sshd[22643]: Invalid user operator from 139.59.248.5
...
2019-12-01 13:28:48
attackbotsspam
Nov 30 23:16:03 www_kotimaassa_fi sshd[18104]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.248.5
Nov 30 23:16:05 www_kotimaassa_fi sshd[18104]: Failed password for invalid user test9999 from 139.59.248.5 port 34108 ssh2
...
2019-12-01 07:52:01
Comments on same subnet:
IP Type Details Datetime
139.59.248.89 attackspam
[munged]::443 139.59.248.89 - - [17/Oct/2019:13:40:58 +0200] "POST /[munged]: HTTP/1.1" 200 9077 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 139.59.248.89 - - [17/Oct/2019:13:41:01 +0200] "POST /[munged]: HTTP/1.1" 200 9077 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 139.59.248.89 - - [17/Oct/2019:13:41:04 +0200] "POST /[munged]: HTTP/1.1" 200 9077 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 139.59.248.89 - - [17/Oct/2019:13:41:07 +0200] "POST /[munged]: HTTP/1.1" 200 9077 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 139.59.248.89 - - [17/Oct/2019:13:41:11 +0200] "POST /[munged]: HTTP/1.1" 200 9077 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 139.59.248.89 - - [17/Oct/2019:13:41:14 +0200] "POST /[munged]: HTTP/1.1" 200 9077 "-" "Mozilla/5.0 (X11; Ubun
2019-10-17 23:24:51
139.59.248.89 attackspambots
WordPress login Brute force / Web App Attack on client site.
2019-09-05 00:12:00
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.59.248.5
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 2776
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.59.248.5.			IN	A

;; AUTHORITY SECTION:
.			517	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019113002 1800 900 604800 86400

;; Query time: 113 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Dec 01 07:51:58 CST 2019
;; MSG SIZE  rcvd: 116
Host info
Host 5.248.59.139.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 5.248.59.139.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
171.237.75.219 attackbots
Unauthorized connection attempt from IP address 171.237.75.219 on Port 445(SMB)
2020-01-11 21:01:35
206.48.140.1 attack
Unauthorized connection attempt from IP address 206.48.140.1 on Port 445(SMB)
2020-01-11 21:06:11
2.192.129.188 attack
1578718007 - 01/11/2020 05:46:47 Host: 2.192.129.188/2.192.129.188 Port: 445 TCP Blocked
2020-01-11 20:50:17
95.59.143.29 attack
port scan and connect, tcp 1433 (ms-sql-s)
2020-01-11 21:05:18
220.248.30.58 attackbotsspam
Jan 11 10:08:52 firewall sshd[24717]: Failed password for invalid user pkangara from 220.248.30.58 port 59398 ssh2
Jan 11 10:11:46 firewall sshd[24808]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.248.30.58  user=root
Jan 11 10:11:47 firewall sshd[24808]: Failed password for root from 220.248.30.58 port 15064 ssh2
...
2020-01-11 21:17:30
152.136.101.83 attackbots
$f2bV_matches
2020-01-11 21:26:31
49.147.105.3 attack
Unauthorized connection attempt from IP address 49.147.105.3 on Port 445(SMB)
2020-01-11 20:59:47
151.80.42.234 attackspam
$f2bV_matches
2020-01-11 21:30:40
152.32.185.30 attackspam
$f2bV_matches
2020-01-11 21:18:01
124.204.64.178 attackspambots
Jan 11 14:11:40 MK-Soft-Root1 sshd[23554]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.204.64.178 
Jan 11 14:11:41 MK-Soft-Root1 sshd[23554]: Failed password for invalid user gustavo from 124.204.64.178 port 23560 ssh2
...
2020-01-11 21:31:07
47.100.254.237 attackbotsspam
Bruteforce on SSH Honeypot
2020-01-11 21:21:39
222.186.15.166 attackbots
Jan 11 08:25:44 plusreed sshd[11463]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.166  user=root
Jan 11 08:25:46 plusreed sshd[11463]: Failed password for root from 222.186.15.166 port 38933 ssh2
...
2020-01-11 21:28:31
189.76.201.82 attack
Brute force attempt
2020-01-11 20:55:43
92.253.56.248 attack
Fail2Ban Ban Triggered
2020-01-11 21:00:40
153.3.232.177 attack
$f2bV_matches
2020-01-11 21:14:00

Recently Reported IPs

227.20.201.215 78.188.21.128 242.16.20.93 89.174.23.99
15.195.225.167 5.26.255.3 182.184.66.203 88.79.194.8
50.99.67.248 101.99.167.242 92.251.99.160 170.166.3.226
169.97.60.73 45.123.217.171 54.48.229.13 86.207.105.171
85.93.112.231 34.161.85.241 94.225.161.29 147.119.125.65