Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Singapore

Internet Service Provider: Digital Ocean Inc.

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Make a comment on this IP
Type Details Datetime
attackspam 
160/tcp 159/tcp 158/tcp...
[2019-06-15/08-12]243pkt,65pt.(tcp)
 2019-08-13 00:55:59
attack 
31.07.2019 22:39:18 Connection to port 146 blocked by firewall
 2019-08-01 09:17:33
attack 
Unauthorized connection attempt from IP address 139.59.42.211 on Port 143(IMAP)
 2019-07-30 01:45:22
attackbotsspam 
MultiHost/MultiPort Probe, Scan, Hack -
 2019-07-29 07:36:50
attack 
Scanning random ports - tries to find possible vulnerable services
 2019-07-12 07:05:22
attackspam 
[portscan] tcp/107 [rtelnet]
[portscan] tcp/108 [snagas]
[portscan] tcp/109 [pop2]
[scan/connect: 5 time(s)]
*(RWIN=1024)(06271037)
 2019-06-27 15:39:39
Comments on same subnet:
IP Type Details Datetime
139.59.42.174 attackbotsspam 
non-SMTP command used
...
 2020-10-09 02:13:07
139.59.42.174 attackspambots 
non-SMTP command used
...
 2020-10-08 18:11:01
139.59.42.69 attackspambots 
Jan  1 02:49:15 ws12vmsma01 sshd[34437]: Invalid user elake from 139.59.42.69
Jan  1 02:49:17 ws12vmsma01 sshd[34437]: Failed password for invalid user elake from 139.59.42.69 port 47266 ssh2
Jan  1 02:56:10 ws12vmsma01 sshd[35398]: Invalid user guest from 139.59.42.69
...
 2020-01-01 14:13:46
139.59.42.69 attack 
Unauthorized connection attempt detected from IP address 139.59.42.69 to port 22
 2020-01-01 05:54:49
139.59.42.69 attackspambots 
Dec 28 11:29:15 dev0-dcde-rnet sshd[13126]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.42.69
Dec 28 11:29:17 dev0-dcde-rnet sshd[13126]: Failed password for invalid user trenduser from 139.59.42.69 port 51024 ssh2
Dec 28 11:32:39 dev0-dcde-rnet sshd[13191]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.42.69
 2019-12-28 19:44:53
139.59.42.250 attack 
Automatic report - XMLRPC Attack
 2019-11-19 05:19:06
139.59.42.114 attackbots 
[munged]::443 139.59.42.114 - - [30/Oct/2019:21:28:45 +0100] "POST /[munged]: HTTP/1.1" 200 9081 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 139.59.42.114 - - [30/Oct/2019:21:28:52 +0100] "POST /[munged]: HTTP/1.1" 200 9081 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 139.59.42.114 - - [30/Oct/2019:21:28:54 +0100] "POST /[munged]: HTTP/1.1" 200 9081 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 139.59.42.114 - - [30/Oct/2019:21:28:59 +0100] "POST /[munged]: HTTP/1.1" 200 6872 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 139.59.42.114 - - [30/Oct/2019:21:29:06 +0100] "POST /[munged]: HTTP/1.1" 200 9081 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 139.59.42.114 - - [30/Oct/2019:21:29:13 +0100] "POST /[munged]: HTTP/1.1" 200 9081 "-" "Mozilla/5.0 (X11; Ubun
 2019-10-31 04:52:00
139.59.42.114 attack 
Automatic report - XMLRPC Attack
 2019-10-29 13:29:17
139.59.42.250 attackspambots 
Automatic report - Banned IP Access
 2019-10-28 16:58:08
139.59.42.250 attackbotsspam 
Automatic report - XMLRPC Attack
 2019-10-07 15:33:05
139.59.42.250 attackspambots 
fail2ban honeypot
 2019-09-26 16:35:12
139.59.42.255 attackspam 
xmlrpc attack
 2019-07-23 23:40:19
Whois info:
b
Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.59.42.211
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 43459
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.59.42.211.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019052902 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Thu May 30 03:34:01 CST 2019
;; MSG SIZE  rcvd: 117
Host info
Host 211.42.59.139.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 211.42.59.139.in-addr.arpa: NXDOMAIN
Related IP info:
139.59.42.88
139.59.42.203
139.59.42.14
139.59.42.51
139.59.42.32
139.59.42.211
139.59.42.117
139.59.42.247
139.59.42.196
139.59.42.191
139.59.42.180
139.59.42.209
139.59.42.200
139.59.42.190
139.59.42.127
139.59.42.30
139.59.42.133
139.59.42.80
139.59.42.237
139.59.42.238
139.59.42.144
139.59.42.250
139.59.42.74
139.59.42.162
139.59.42.135
139.59.42.9
139.59.42.31
139.59.42.55
139.59.42.201
139.59.42.192
139.59.42.50
139.59.42.20
139.59.42.145
139.59.42.249
139.59.42.170
139.59.42.13
139.59.42.115
139.59.42.64
139.59.42.86
139.59.42.233
139.59.42.208
139.59.42.160
139.59.42.92
139.59.42.159
139.59.42.130
139.59.42.62
139.59.42.84
139.59.42.213
139.59.42.110
139.59.42.16
139.59.42.128
139.59.42.146
139.59.42.216
139.59.42.72
139.59.42.227
139.59.42.166
139.59.42.71
139.59.42.83
139.59.42.108
139.59.42.43
139.59.42.7
139.59.42.218
139.59.42.181
139.59.42.42
139.59.42.176
139.59.42.29
139.59.42.58
139.59.42.155
139.59.42.78
139.59.42.182
139.59.42.48
139.59.42.221
139.59.42.187
139.59.42.156
139.59.42.232
139.59.42.185
139.59.42.52
139.59.42.40
139.59.42.199
139.59.42.174
139.59.42.5
139.59.42.23
139.59.42.152
139.59.42.119
139.59.42.95
139.59.42.195
139.59.42.47
139.59.42.122
139.59.42.245
139.59.42.97
139.59.42.8
139.59.42.18
139.59.42.100
139.59.42.157
139.59.42.1
139.59.42.15
139.59.42.139
139.59.42.230
139.59.42.73
139.59.42.91
139.59.42.138
139.59.42.198
139.59.42.253
139.59.42.3
139.59.42.204
139.59.42.143
139.59.42.24
139.59.42.12
139.59.42.28
139.59.42.226
139.59.42.124
139.59.42.102
139.59.42.193
139.59.42.69
139.59.42.205
139.59.42.179
139.59.42.235
139.59.42.244
139.59.42.113
139.59.42.153
139.59.42.26
139.59.42.27
139.59.42.154
139.59.42.63
139.59.42.77
139.59.42.39
139.59.42.94
139.59.42.82
139.59.42.223
139.59.42.21
139.59.42.126
139.59.42.75
139.59.42.132
139.59.42.107
139.59.42.121
139.59.42.44
139.59.42.35
139.59.42.194
139.59.42.236
139.59.42.231
139.59.42.17
139.59.42.167
139.59.42.234
139.59.42.150
139.59.42.57
139.59.42.149
139.59.42.172
139.59.42.46
139.59.42.105
139.59.42.178
139.59.42.10
139.59.42.125
139.59.42.243
139.59.42.225
139.59.42.148
139.59.42.104
139.59.42.242
139.59.42.137
139.59.42.251
139.59.42.134
139.59.42.171
139.59.42.61
139.59.42.252
139.59.42.25
139.59.42.53
139.59.42.229
139.59.42.87
139.59.42.33
139.59.42.215
139.59.42.217
139.59.42.89
139.59.42.248
139.59.42.22
139.59.42.222
139.59.42.67
139.59.42.186
139.59.42.189
139.59.42.197
139.59.42.164
139.59.42.101
139.59.42.131
139.59.42.184
139.59.42.59
139.59.42.175
139.59.42.65
139.59.42.112
139.59.42.136
139.59.42.34
139.59.42.147
139.59.42.81
139.59.42.183
139.59.42.240
139.59.42.206
139.59.42.85
139.59.42.11
139.59.42.45
139.59.42.4
139.59.42.37
139.59.42.41
139.59.42.151
139.59.42.140
139.59.42.219
139.59.42.173
139.59.42.79
139.59.42.93
139.59.42.96
139.59.42.165
139.59.42.38
139.59.42.228
139.59.42.142
139.59.42.60
139.59.42.168
139.59.42.118
139.59.42.49
139.59.42.210
139.59.42.161
139.59.42.54
139.59.42.220
139.59.42.123
139.59.42.70
139.59.42.212
139.59.42.56
139.59.42.188
139.59.42.163
139.59.42.99
139.59.42.109
139.59.42.6
139.59.42.19
139.59.42.98
139.59.42.246
139.59.42.239
139.59.42.111
139.59.42.36
139.59.42.66
139.59.42.106
139.59.42.202
139.59.42.129
139.59.42.76
139.59.42.207
139.59.42.120
139.59.42.141
139.59.42.254
139.59.42.2
139.59.42.103
139.59.42.169
139.59.42.114
139.59.42.68
139.59.42.224
139.59.42.177
139.59.42.90
139.59.42.158
139.59.42.116
139.59.42.214
139.59.42.241
Related comments:
IP Type Details Datetime
106.75.222.121 attack 
(sshd) Failed SSH login from 106.75.222.121 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep  5 03:23:30 server5 sshd[19873]: Invalid user admin from 106.75.222.121
Sep  5 03:23:30 server5 sshd[19873]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.222.121 
Sep  5 03:23:31 server5 sshd[19873]: Failed password for invalid user admin from 106.75.222.121 port 59512 ssh2
Sep  5 03:48:33 server5 sshd[4383]: Invalid user hydra from 106.75.222.121
Sep  5 03:48:33 server5 sshd[4383]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.222.121
 2020-09-05 15:52:43
200.117.185.116 attack 
Honeypot attack, port: 445, PTR: host116.200-117-185.telecom.net.ar.
 2020-09-05 16:03:29
190.104.61.251 attackbotsspam 
Sep  4 18:49:14 mellenthin postfix/smtpd[32575]: NOQUEUE: reject: RCPT from 251-red61.s10.coopenet.com.ar[190.104.61.251]: 554 5.7.1 Service unavailable; Client host [190.104.61.251] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/190.104.61.251; from= to= proto=ESMTP helo=<251-red61.s10.coopenet.com.ar>
 2020-09-05 15:49:19
45.82.136.246 attackbots 
Sep  1 15:53:57 uapps sshd[14104]: Connection closed by 45.82.136.246 port 40382
Sep  1 15:54:05 uapps sshd[14105]: Invalid user ansible from 45.82.136.246 port 57724
Sep  1 15:54:07 uapps sshd[14105]: Failed password for invalid user ansible from 45.82.136.246 port 57724 ssh2
Sep  1 15:54:08 uapps sshd[14105]: Received disconnect from 45.82.136.246 port 57724:11: Normal Shutdown, Thank you for playing [preauth]
Sep  1 15:54:08 uapps sshd[14105]: Disconnected from invalid user ansible 45.82.136.246 port 57724 [preauth]
Sep  1 15:54:19 uapps sshd[14109]: User r.r from 45.82.136.246 not allowed because not listed in AllowUsers
Sep  1 15:54:19 uapps sshd[14109]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.82.136.246  user=r.r
Sep  1 15:54:21 uapps sshd[14109]: Failed password for invalid user r.r from 45.82.136.246 port 39156 ssh2
Sep  1 15:54:22 uapps sshd[14109]: Received disconnect from 45.82.136.246 port 39156:11: Normal S........
-------------------------------
 2020-09-05 15:53:49
159.89.236.71 attack 
Invalid user svn from 159.89.236.71 port 38330
 2020-09-05 15:57:26
218.155.81.199 attackbotsspam 
Sep  4 19:00:49 mxgate1 postfix/postscreen[26039]: CONNECT from [218.155.81.199]:39775 to [176.31.12.44]:25
Sep  4 19:00:49 mxgate1 postfix/dnsblog[26044]: addr 218.155.81.199 listed by domain zen.spamhaus.org as 127.0.0.4
Sep  4 19:00:49 mxgate1 postfix/dnsblog[26044]: addr 218.155.81.199 listed by domain zen.spamhaus.org as 127.0.0.3
Sep  4 19:00:49 mxgate1 postfix/dnsblog[26040]: addr 218.155.81.199 listed by domain cbl.abuseat.org as 127.0.0.2
Sep  4 19:00:49 mxgate1 postfix/dnsblog[26042]: addr 218.155.81.199 listed by domain b.barracudacentral.org as 127.0.0.2
Sep  4 19:00:49 mxgate1 postfix/dnsblog[26043]: addr 218.155.81.199 listed by domain ix.dnsbl.xxxxxx.net as 127.0.0.2
Sep  4 19:00:55 mxgate1 postfix/postscreen[26039]: DNSBL rank 5 for [218.155.81.199]:39775
Sep x@x
Sep  4 19:00:56 mxgate1 postfix/postscreen[26039]: HANGUP after 1.2 from [218.155.81.199]:39775 in tests after SMTP handshake
Sep  4 19:00:56 mxgate1 postfix/postscreen[26039]: DISCONNECT [218.1........
-------------------------------
 2020-09-05 16:03:08
211.225.158.43 attackbots 
Honeypot attack, port: 81, PTR: PTR record not found
 2020-09-05 16:17:03
89.179.72.201 attackspam 
20/9/4@13:27:15: FAIL: Alarm-Network address from=89.179.72.201
20/9/4@13:27:15: FAIL: Alarm-Network address from=89.179.72.201
...
 2020-09-05 15:36:47
179.125.179.197 attack 
Automatic report - Port Scan Attack
 2020-09-05 15:39:23
133.130.109.118 attack 
Sep  4 17:48:34 gospond sshd[30125]: Invalid user test from 133.130.109.118 port 50632
Sep  4 17:48:36 gospond sshd[30125]: Failed password for invalid user test from 133.130.109.118 port 50632 ssh2
Sep  4 17:48:54 gospond sshd[30133]: Invalid user system1 from 133.130.109.118 port 54064
...
 2020-09-05 16:09:17
51.79.53.139 attack 
Sep  4 20:17:27 auw2 sshd\[4435\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.79.53.139  user=root
Sep  4 20:17:29 auw2 sshd\[4435\]: Failed password for root from 51.79.53.139 port 52158 ssh2
Sep  4 20:17:32 auw2 sshd\[4435\]: Failed password for root from 51.79.53.139 port 52158 ssh2
Sep  4 20:17:34 auw2 sshd\[4435\]: Failed password for root from 51.79.53.139 port 52158 ssh2
Sep  4 20:17:36 auw2 sshd\[4435\]: Failed password for root from 51.79.53.139 port 52158 ssh2
 2020-09-05 15:42:41
89.248.171.89 attackbots 
SMTP invalid logins 11 and blocked 2 Dates: 5-9-2020 till 5-9-2020
 2020-09-05 16:11:05
220.86.227.220 attack 
Sep  5 00:35:53 ws12vmsma01 sshd[50773]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.86.227.220 
Sep  5 00:35:53 ws12vmsma01 sshd[50773]: Invalid user alin from 220.86.227.220
Sep  5 00:35:54 ws12vmsma01 sshd[50773]: Failed password for invalid user alin from 220.86.227.220 port 57468 ssh2
...
 2020-09-05 16:18:20
110.25.93.43 attackspam 
Honeypot attack, port: 5555, PTR: 110-25-93-43.adsl.fetnet.net.
 2020-09-05 16:10:22
60.223.235.71 attack 
Fail2Ban Ban Triggered
 2020-09-05 15:51:43

Recently Reported IPs

214.91.17.154 217.31.177.144 160.32.125.132 143.20.37.255
103.84.57.62 173.112.166.244 14.186.166.33 142.103.221.12
63.90.173.142 94.73.144.45 37.127.102.184 129.131.119.194
168.43.79.215 61.133.121.62 220.107.44.72 177.67.38.131
132.113.22.178 215.156.172.171 194.7.145.245 208.242.224.10