Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Singapore

Internet Service Provider: Digital Ocean Inc.

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackspam
2020-07-23T18:09:35.869779sd-86998 sshd[24209]: Invalid user admin from 139.59.254.93 port 44669
2020-07-23T18:09:35.872143sd-86998 sshd[24209]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.254.93
2020-07-23T18:09:35.869779sd-86998 sshd[24209]: Invalid user admin from 139.59.254.93 port 44669
2020-07-23T18:09:37.829171sd-86998 sshd[24209]: Failed password for invalid user admin from 139.59.254.93 port 44669 ssh2
2020-07-23T18:14:05.587757sd-86998 sshd[24805]: Invalid user frontdesk from 139.59.254.93 port 55963
...
2020-07-24 01:00:25
attackbots
Auto Fail2Ban report, multiple SSH login attempts.
2020-07-18 23:52:57
attack
Invalid user uftp from 139.59.254.93 port 46139
2020-07-18 16:47:29
attackbots
Jul 15 07:13:19 firewall sshd[29092]: Invalid user ldm from 139.59.254.93
Jul 15 07:13:21 firewall sshd[29092]: Failed password for invalid user ldm from 139.59.254.93 port 46584 ssh2
Jul 15 07:16:50 firewall sshd[29180]: Invalid user git from 139.59.254.93
...
2020-07-15 18:17:57
attackbots
2020-07-14T02:26:05.419125server.mjenks.net sshd[1687138]: Invalid user arjun from 139.59.254.93 port 39917
2020-07-14T02:26:05.426453server.mjenks.net sshd[1687138]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.254.93
2020-07-14T02:26:05.419125server.mjenks.net sshd[1687138]: Invalid user arjun from 139.59.254.93 port 39917
2020-07-14T02:26:07.067755server.mjenks.net sshd[1687138]: Failed password for invalid user arjun from 139.59.254.93 port 39917 ssh2
2020-07-14T02:29:32.057302server.mjenks.net sshd[1687531]: Invalid user mother from 139.59.254.93 port 41650
...
2020-07-14 17:11:29
attack
Jul  9 12:13:47 rotator sshd\[5668\]: Invalid user tujikai from 139.59.254.93Jul  9 12:13:49 rotator sshd\[5668\]: Failed password for invalid user tujikai from 139.59.254.93 port 42755 ssh2Jul  9 12:16:57 rotator sshd\[6474\]: Invalid user liviu from 139.59.254.93Jul  9 12:16:59 rotator sshd\[6474\]: Failed password for invalid user liviu from 139.59.254.93 port 40490 ssh2Jul  9 12:19:58 rotator sshd\[6543\]: Failed password for mail from 139.59.254.93 port 38045 ssh2Jul  9 12:22:48 rotator sshd\[7349\]: Invalid user tweety from 139.59.254.93
...
2020-07-09 18:38:20
attackbotsspam
Jul  7 20:13:19 mout sshd[11165]: Invalid user amie from 139.59.254.93 port 60657
2020-07-08 02:31:53
attackspam
Jul  4 17:28:27 firewall sshd[14512]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.254.93
Jul  4 17:28:27 firewall sshd[14512]: Invalid user mina from 139.59.254.93
Jul  4 17:28:29 firewall sshd[14512]: Failed password for invalid user mina from 139.59.254.93 port 44369 ssh2
...
2020-07-05 05:03:40
attackspam
Jun 25 14:24:42 eventyay sshd[2732]: Failed password for root from 139.59.254.93 port 43810 ssh2
Jun 25 14:26:08 eventyay sshd[2785]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.254.93
Jun 25 14:26:10 eventyay sshd[2785]: Failed password for invalid user willy from 139.59.254.93 port 55344 ssh2
...
2020-06-25 23:13:06
attack
Jun 25 11:51:19 eventyay sshd[28828]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.254.93
Jun 25 11:51:22 eventyay sshd[28828]: Failed password for invalid user shreya1 from 139.59.254.93 port 35411 ssh2
Jun 25 11:54:39 eventyay sshd[28915]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.254.93
...
2020-06-25 18:15:16
attackspambots
2020-06-15T23:57:56.942534lavrinenko.info sshd[19342]: Invalid user test1 from 139.59.254.93 port 40978
2020-06-15T23:57:56.952248lavrinenko.info sshd[19342]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.254.93
2020-06-15T23:57:56.942534lavrinenko.info sshd[19342]: Invalid user test1 from 139.59.254.93 port 40978
2020-06-15T23:57:59.526681lavrinenko.info sshd[19342]: Failed password for invalid user test1 from 139.59.254.93 port 40978 ssh2
2020-06-16T00:01:39.181004lavrinenko.info sshd[19554]: Invalid user rd from 139.59.254.93 port 44816
...
2020-06-16 06:06:37
attackbots
2020-06-15T09:14:38.821118n23.at sshd[27310]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.254.93
2020-06-15T09:14:38.812822n23.at sshd[27310]: Invalid user abc from 139.59.254.93 port 37210
2020-06-15T09:14:40.575066n23.at sshd[27310]: Failed password for invalid user abc from 139.59.254.93 port 37210 ssh2
...
2020-06-15 17:53:47
attackspambots
May 22 08:18:28 OPSO sshd\[18452\]: Invalid user wp-admin from 139.59.254.93 port 51568
May 22 08:18:28 OPSO sshd\[18452\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.254.93
May 22 08:18:30 OPSO sshd\[18452\]: Failed password for invalid user wp-admin from 139.59.254.93 port 51568 ssh2
May 22 08:22:53 OPSO sshd\[19289\]: Invalid user kbt from 139.59.254.93 port 59399
May 22 08:22:53 OPSO sshd\[19289\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.254.93
2020-05-22 15:25:52
attack
SSH authentication failure x 6 reported by Fail2Ban
...
2020-05-20 00:27:27
attackspam
SSH Invalid Login
2020-05-12 05:57:02
attackspam
SSH Invalid Login
2020-05-06 06:39:42
attack
Apr 29 22:01:28 mockhub sshd[21834]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.254.93
Apr 29 22:01:30 mockhub sshd[21834]: Failed password for invalid user lingna from 139.59.254.93 port 57727 ssh2
...
2020-04-30 18:46:17
attack
Apr 18 13:51:56 ns382633 sshd\[2439\]: Invalid user admin1 from 139.59.254.93 port 37310
Apr 18 13:51:56 ns382633 sshd\[2439\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.254.93
Apr 18 13:51:58 ns382633 sshd\[2439\]: Failed password for invalid user admin1 from 139.59.254.93 port 37310 ssh2
Apr 18 14:01:11 ns382633 sshd\[4323\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.254.93  user=root
Apr 18 14:01:14 ns382633 sshd\[4323\]: Failed password for root from 139.59.254.93 port 57856 ssh2
2020-04-18 22:28:11
attackbots
Apr 14 04:46:48 vps58358 sshd\[21234\]: Invalid user nfs from 139.59.254.93Apr 14 04:46:50 vps58358 sshd\[21234\]: Failed password for invalid user nfs from 139.59.254.93 port 39094 ssh2Apr 14 04:49:11 vps58358 sshd\[21282\]: Invalid user zini from 139.59.254.93Apr 14 04:49:13 vps58358 sshd\[21282\]: Failed password for invalid user zini from 139.59.254.93 port 58097 ssh2Apr 14 04:51:25 vps58358 sshd\[21309\]: Failed password for root from 139.59.254.93 port 48675 ssh2Apr 14 04:53:35 vps58358 sshd\[21343\]: Failed password for root from 139.59.254.93 port 39238 ssh2
...
2020-04-14 13:36:49
attackspambots
Apr 10 20:41:30 host sshd[21765]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.254.93  user=root
Apr 10 20:41:32 host sshd[21765]: Failed password for root from 139.59.254.93 port 40839 ssh2
...
2020-04-11 03:14:14
attackspam
detected by Fail2Ban
2020-04-04 03:42:18
attackbotsspam
Mar 31 15:00:34 ewelt sshd[5861]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.254.93  user=root
Mar 31 15:00:36 ewelt sshd[5861]: Failed password for root from 139.59.254.93 port 44839 ssh2
Mar 31 15:05:04 ewelt sshd[6158]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.254.93  user=root
Mar 31 15:05:06 ewelt sshd[6158]: Failed password for root from 139.59.254.93 port 55261 ssh2
...
2020-03-31 21:19:26
Comments on same subnet:
IP Type Details Datetime
139.59.254.74 attackbotsspam
POST /xmlrpc.php.  Part of botnet attack -- 34 POST requests from 19 different IP addresses.
2019-12-27 00:20:59
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.59.254.93
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 5065
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.59.254.93.			IN	A

;; AUTHORITY SECTION:
.			514	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020033100 1800 900 604800 86400

;; Query time: 176 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Mar 31 21:19:16 CST 2020
;; MSG SIZE  rcvd: 117
Host info
Host 93.254.59.139.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 93.254.59.139.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
150.109.108.25 attackbots
Invalid user test from 150.109.108.25 port 42086
2020-05-16 03:34:32
188.64.166.109 attack
1589545185 - 05/15/2020 14:19:45 Host: 188.64.166.109/188.64.166.109 Port: 445 TCP Blocked
2020-05-16 03:55:07
183.89.215.200 attack
"Account brute force using dictionary attack against Exchange Online"
2020-05-16 03:24:11
123.145.238.147 attack
Email rejected due to spam filtering
2020-05-16 03:27:46
111.229.118.227 attackspam
web-1 [ssh] SSH Attack
2020-05-16 03:38:12
203.177.71.253 attackbotsspam
May 15 18:31:39 MainVPS sshd[17837]: Invalid user hr from 203.177.71.253 port 43318
May 15 18:31:39 MainVPS sshd[17837]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.177.71.253
May 15 18:31:39 MainVPS sshd[17837]: Invalid user hr from 203.177.71.253 port 43318
May 15 18:31:41 MainVPS sshd[17837]: Failed password for invalid user hr from 203.177.71.253 port 43318 ssh2
May 15 18:34:11 MainVPS sshd[19966]: Invalid user webadmin from 203.177.71.253 port 33525
...
2020-05-16 03:46:20
45.157.149.2 attackbots
Email rejected due to spam filtering
2020-05-16 03:28:50
138.197.5.191 attackbotsspam
May 15 21:23:27 * sshd[30851]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.5.191
May 15 21:23:29 * sshd[30851]: Failed password for invalid user bill from 138.197.5.191 port 34568 ssh2
2020-05-16 03:30:30
103.251.27.215 attackbots
"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:
2020-05-16 03:55:50
46.105.28.141 attackbots
May 15 12:00:14 vps46666688 sshd[24809]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.105.28.141
May 15 12:00:16 vps46666688 sshd[24809]: Failed password for invalid user ubuntu from 46.105.28.141 port 40600 ssh2
...
2020-05-16 03:38:34
13.71.21.123 attack
May 15 21:30:27 * sshd[31903]: Failed password for root from 13.71.21.123 port 1024 ssh2
2020-05-16 03:54:37
144.91.92.187 attack
2020-05-15 12:40:12.780128-0500  localhost sshd[92135]: Failed password for invalid user teampspeak from 144.91.92.187 port 41772 ssh2
2020-05-16 03:30:13
87.251.74.197 attackbotsspam
May 15 21:30:43 debian-2gb-nbg1-2 kernel: \[11829891.567645\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=87.251.74.197 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=846 PROTO=TCP SPT=41268 DPT=11524 WINDOW=1024 RES=0x00 SYN URGP=0
2020-05-16 03:30:47
36.84.129.215 attackbotsspam
Automatic report - Port Scan Attack
2020-05-16 03:35:11
14.18.62.124 attackspam
May 15 13:23:12 scw-6657dc sshd[28306]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.18.62.124
May 15 13:23:12 scw-6657dc sshd[28306]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.18.62.124
May 15 13:23:14 scw-6657dc sshd[28306]: Failed password for invalid user user from 14.18.62.124 port 39572 ssh2
...
2020-05-16 03:52:48

Recently Reported IPs

140.143.250.121 123.181.58.198 212.16.70.48 178.176.167.169
208.141.229.169 155.4.121.208 103.39.50.147 31.46.136.236
190.104.39.51 148.153.12.213 67.247.6.115 178.212.176.67
113.242.230.37 42.51.223.71 176.53.12.3 121.236.95.118
58.186.126.121 62.210.219.71 197.61.14.17 187.202.128.110