Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Singapore

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
139.59.5.179 attack
139.59.5.179 - - [06/Oct/2020:19:11:30 +0100] "POST /wp-login.php HTTP/1.1" 200 2426 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.59.5.179 - - [06/Oct/2020:19:11:31 +0100] "POST /wp-login.php HTTP/1.1" 200 2407 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.59.5.179 - - [06/Oct/2020:19:11:33 +0100] "POST /wp-login.php HTTP/1.1" 200 2441 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-10-07 04:09:06
139.59.59.75 attackbots
139.59.59.75 - - [06/Oct/2020:20:12:56 +0100] "POST /wp-login.php HTTP/1.1" 200 2141 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.59.59.75 - - [06/Oct/2020:20:12:58 +0100] "POST /wp-login.php HTTP/1.1" 200 2173 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.59.59.75 - - [06/Oct/2020:20:12:58 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-10-07 03:56:44
139.59.5.179 attack
CMS (WordPress or Joomla) login attempt.
2020-10-06 20:11:48
139.59.59.75 attackbots
139.59.59.75 is unauthorized and has been banned by fail2ban
2020-10-06 19:57:50
139.59.58.115 attackspam
 TCP (SYN) 139.59.58.115:41161 -> port 16666, len 44
2020-10-04 05:48:16
139.59.58.115 attackspam
Port Scan
...
2020-10-03 13:31:50
139.59.59.102 attackspam
Port scan: Attack repeated for 24 hours
2020-10-02 06:56:36
139.59.59.102 attackspambots
Oct  1 17:23:04 localhost sshd\[6134\]: Invalid user mailer from 139.59.59.102
Oct  1 17:23:04 localhost sshd\[6134\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.59.102
Oct  1 17:23:06 localhost sshd\[6134\]: Failed password for invalid user mailer from 139.59.59.102 port 58682 ssh2
Oct  1 17:26:56 localhost sshd\[6532\]: Invalid user Qwer123456 from 139.59.59.102
Oct  1 17:26:56 localhost sshd\[6532\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.59.102
...
2020-10-01 23:28:05
139.59.57.2 attack
2020-09-30T18:58:27.0319611495-001 sshd[24174]: Invalid user postgres from 139.59.57.2 port 38182
2020-09-30T18:58:28.9923601495-001 sshd[24174]: Failed password for invalid user postgres from 139.59.57.2 port 38182 ssh2
2020-09-30T19:01:48.3197441495-001 sshd[24371]: Invalid user jerry from 139.59.57.2 port 33216
2020-09-30T19:01:48.3238011495-001 sshd[24371]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.57.2
2020-09-30T19:01:48.3197441495-001 sshd[24371]: Invalid user jerry from 139.59.57.2 port 33216
2020-09-30T19:01:50.2062181495-001 sshd[24371]: Failed password for invalid user jerry from 139.59.57.2 port 33216 ssh2
...
2020-10-01 07:35:24
139.59.59.102 attackspambots
[N3.H3.VM3] Port Scanner Detected Blocked by UFW
2020-09-29 03:29:55
139.59.57.64 attackspambots
139.59.57.64 - - [16/Sep/2020:04:48:19 +0100] "POST /wp-login.php HTTP/1.1" 200 1967 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.59.57.64 - - [16/Sep/2020:04:48:21 +0100] "POST /wp-login.php HTTP/1.1" 200 1948 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.59.57.64 - - [16/Sep/2020:04:48:21 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-09-16 20:27:08
139.59.57.64 attackspam
139.59.57.64 - - [16/Sep/2020:04:48:19 +0100] "POST /wp-login.php HTTP/1.1" 200 1967 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.59.57.64 - - [16/Sep/2020:04:48:21 +0100] "POST /wp-login.php HTTP/1.1" 200 1948 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.59.57.64 - - [16/Sep/2020:04:48:21 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-09-16 12:59:04
139.59.59.102 attack
$f2bV_matches
2020-09-16 12:38:29
139.59.57.64 attackspambots
139.59.57.64 - - [15/Sep/2020:18:01:15 +0100] "POST /wp-login.php HTTP/1.1" 200 1996 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.59.57.64 - - [15/Sep/2020:18:01:21 +0100] "POST /wp-login.php HTTP/1.1" 200 1929 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.59.57.64 - - [15/Sep/2020:18:01:22 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-09-16 04:44:36
139.59.59.102 attackbotsspam
Brute-force attempt banned
2020-09-16 04:25:14
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.59.5.157
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 33035
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;139.59.5.157.			IN	A

;; AUTHORITY SECTION:
.			377	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022601 1800 900 604800 86400

;; Query time: 68 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 27 12:41:06 CST 2022
;; MSG SIZE  rcvd: 105
Host info
Host 157.5.59.139.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 157.5.59.139.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
179.13.166.216 attackspambots
Automatic report - Banned IP Access
2020-02-19 07:39:50
178.128.34.73 attackspam
Feb 18 22:03:09 : SSH login attempts with invalid user
2020-02-19 08:01:21
122.3.49.253 attackbots
Unauthorized connection attempt from IP address 122.3.49.253 on Port 445(SMB)
2020-02-19 08:06:44
121.229.6.166 attack
Feb 19 00:25:07 plex sshd[29715]: Invalid user pengcan from 121.229.6.166 port 54514
2020-02-19 07:44:01
74.62.86.10 attackbots
Repeated RDP login failures. Last user: Administrator
2020-02-19 07:52:29
84.119.173.125 attackbotsspam
detected by Fail2Ban
2020-02-19 07:52:07
66.249.76.121 attackbotsspam
MYH,DEF GET /adminer-4.6.2.php
2020-02-19 08:18:32
91.121.45.5 attackbots
$f2bV_matches
2020-02-19 08:10:12
89.132.120.93 attackspambots
DATE:2020-02-18 22:58:47, IP:89.132.120.93, PORT:telnet Telnet brute force auth on honeypot server (epe-honey1-hq)
2020-02-19 08:07:15
1.170.152.77 attackspam
TCP Port Scanning
2020-02-19 07:54:46
119.28.158.60 attackbots
Invalid user guinevre from 119.28.158.60 port 54924
2020-02-19 08:03:43
83.174.197.243 attack
Unauthorized connection attempt from IP address 83.174.197.243 on Port 445(SMB)
2020-02-19 08:02:10
118.99.103.64 attackspambots
Unauthorized connection attempt from IP address 118.99.103.64 on Port 445(SMB)
2020-02-19 08:09:09
180.76.246.38 attack
Feb 18 23:00:53 cp sshd[21211]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.246.38
2020-02-19 07:51:41
143.0.64.166 attack
Feb 18 23:00:27 grey postfix/smtpd\[25074\]: NOQUEUE: reject: RCPT from unknown\[143.0.64.166\]: 554 5.7.1 Service unavailable\; Client host \[143.0.64.166\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[143.0.64.166\]\; from=\ to=\ proto=SMTP helo=\
...
2020-02-19 08:17:21

Recently Reported IPs

139.59.46.233 139.59.53.123 139.59.56.177 139.59.50.239
139.59.58.204 139.59.56.84 139.59.58.252 139.59.59.170
139.59.59.50 139.59.6.114 139.59.6.178 139.59.59.51
139.59.6.154 139.59.60.165 139.59.63.182 139.59.65.141
139.59.64.151 139.59.65.239 139.59.56.7 139.59.64.47