Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Singapore

Internet Service Provider: Digital Ocean Inc.

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackspam
fail2ban honeypot
2019-09-14 05:37:25
attack
fail2ban honeypot
2019-09-10 12:42:03
Comments on same subnet:
IP Type Details Datetime
139.59.94.200 attack
2020-10-13T17:43:54+0200 Failed SSH Authentication/Brute Force Attack. (Server 5)
2020-10-14 03:49:51
139.59.94.200 attack
$f2bV_matches
2020-10-13 19:09:32
139.59.94.105 attackspambots
2020-08-31T00:44:58.8502641495-001 sshd[49601]: Invalid user ec2-user from 139.59.94.105 port 55790
2020-08-31T00:45:00.7151181495-001 sshd[49601]: Failed password for invalid user ec2-user from 139.59.94.105 port 55790 ssh2
2020-08-31T00:48:58.6550531495-001 sshd[49784]: Invalid user ljq from 139.59.94.105 port 33908
2020-08-31T00:48:58.6582151495-001 sshd[49784]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.94.105
2020-08-31T00:48:58.6550531495-001 sshd[49784]: Invalid user ljq from 139.59.94.105 port 33908
2020-08-31T00:49:00.1334581495-001 sshd[49784]: Failed password for invalid user ljq from 139.59.94.105 port 33908 ssh2
...
2020-08-31 13:56:57
139.59.94.24 attack
May  5 11:05:32 124388 sshd[28245]: Invalid user manu from 139.59.94.24 port 54676
May  5 11:05:32 124388 sshd[28245]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.94.24
May  5 11:05:32 124388 sshd[28245]: Invalid user manu from 139.59.94.24 port 54676
May  5 11:05:33 124388 sshd[28245]: Failed password for invalid user manu from 139.59.94.24 port 54676 ssh2
May  5 11:10:12 124388 sshd[28433]: Invalid user admin from 139.59.94.24 port 35190
2020-05-05 19:53:59
139.59.94.24 attackspambots
May  3 20:17:42 ns381471 sshd[29146]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.94.24
May  3 20:17:43 ns381471 sshd[29146]: Failed password for invalid user nokia from 139.59.94.24 port 52704 ssh2
2020-05-04 02:48:54
139.59.94.24 attack
Apr 27 16:37:16 163-172-32-151 sshd[6674]: Invalid user git from 139.59.94.24 port 43330
...
2020-04-28 00:10:13
139.59.94.24 attack
Invalid user git from 139.59.94.24 port 59676
2020-04-20 15:14:49
139.59.94.24 attack
2020-04-10T03:55:28.578279abusebot-8.cloudsearch.cf sshd[2008]: Invalid user deluge from 139.59.94.24 port 53690
2020-04-10T03:55:28.585470abusebot-8.cloudsearch.cf sshd[2008]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.94.24
2020-04-10T03:55:28.578279abusebot-8.cloudsearch.cf sshd[2008]: Invalid user deluge from 139.59.94.24 port 53690
2020-04-10T03:55:30.275914abusebot-8.cloudsearch.cf sshd[2008]: Failed password for invalid user deluge from 139.59.94.24 port 53690 ssh2
2020-04-10T04:01:23.755187abusebot-8.cloudsearch.cf sshd[2370]: Invalid user deploy from 139.59.94.24 port 39768
2020-04-10T04:01:23.762752abusebot-8.cloudsearch.cf sshd[2370]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.94.24
2020-04-10T04:01:23.755187abusebot-8.cloudsearch.cf sshd[2370]: Invalid user deploy from 139.59.94.24 port 39768
2020-04-10T04:01:25.523162abusebot-8.cloudsearch.cf sshd[2370]: Failed password 
...
2020-04-10 14:22:30
139.59.94.24 attack
Apr  7 07:40:46 server1 sshd\[344\]: Failed password for invalid user user from 139.59.94.24 port 41758 ssh2
Apr  7 07:45:05 server1 sshd\[1656\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.94.24  user=ubuntu
Apr  7 07:45:07 server1 sshd\[1656\]: Failed password for ubuntu from 139.59.94.24 port 52016 ssh2
Apr  7 07:49:29 server1 sshd\[3016\]: Invalid user appuser from 139.59.94.24
Apr  7 07:49:29 server1 sshd\[3016\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.94.24 
...
2020-04-08 03:02:34
139.59.94.24 attackspam
Apr  3 10:50:26 eventyay sshd[5230]: Failed password for root from 139.59.94.24 port 36000 ssh2
Apr  3 10:54:12 eventyay sshd[5352]: Failed password for root from 139.59.94.24 port 33670 ssh2
Apr  3 10:58:01 eventyay sshd[5489]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.94.24
...
2020-04-03 19:21:03
139.59.94.24 attackbots
Fail2Ban Ban Triggered (2)
2020-03-30 02:14:09
139.59.94.24 attackspam
Mar 19 06:11:22 web8 sshd\[6389\]: Invalid user jetty from 139.59.94.24
Mar 19 06:11:22 web8 sshd\[6389\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.94.24
Mar 19 06:11:24 web8 sshd\[6389\]: Failed password for invalid user jetty from 139.59.94.24 port 44214 ssh2
Mar 19 06:16:18 web8 sshd\[9042\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.94.24  user=root
Mar 19 06:16:19 web8 sshd\[9042\]: Failed password for root from 139.59.94.24 port 60042 ssh2
2020-03-19 14:31:28
139.59.94.225 attackspambots
Invalid user angel from 139.59.94.225 port 43054
2020-03-11 16:25:07
139.59.94.24 attackbots
2020-03-10T09:17:04.818773abusebot-3.cloudsearch.cf sshd[22052]: Invalid user hct from 139.59.94.24 port 53754
2020-03-10T09:17:04.826377abusebot-3.cloudsearch.cf sshd[22052]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.94.24
2020-03-10T09:17:04.818773abusebot-3.cloudsearch.cf sshd[22052]: Invalid user hct from 139.59.94.24 port 53754
2020-03-10T09:17:06.852347abusebot-3.cloudsearch.cf sshd[22052]: Failed password for invalid user hct from 139.59.94.24 port 53754 ssh2
2020-03-10T09:26:17.707445abusebot-3.cloudsearch.cf sshd[22588]: Invalid user admin from 139.59.94.24 port 54984
2020-03-10T09:26:17.716835abusebot-3.cloudsearch.cf sshd[22588]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.94.24
2020-03-10T09:26:17.707445abusebot-3.cloudsearch.cf sshd[22588]: Invalid user admin from 139.59.94.24 port 54984
2020-03-10T09:26:19.993594abusebot-3.cloudsearch.cf sshd[22588]: Failed password for
...
2020-03-10 19:18:51
139.59.94.24 attackspam
Feb 23 15:27:34 server sshd[386910]: Failed password for invalid user 123456 from 139.59.94.24 port 38232 ssh2
Feb 23 15:30:54 server sshd[388725]: Failed password for invalid user kigwasshoi from 139.59.94.24 port 37038 ssh2
Feb 23 15:34:11 server sshd[390713]: Failed password for invalid user mikel from 139.59.94.24 port 35844 ssh2
2020-02-24 02:43:34
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.59.94.203
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 22476
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.59.94.203.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019090902 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Tue Sep 10 12:41:55 CST 2019
;; MSG SIZE  rcvd: 117
Host info
Host 203.94.59.139.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 203.94.59.139.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
218.92.0.37 attack
ssh爆破
2023-05-22 10:39:09
193.194.83.79 spambotsattackproxynormal
193.194.83.79
2023-05-19 16:33:16
185.224.128.146 attack
Scan port
2023-05-18 12:42:40
18.205.116.70 proxy
VPN fraud
2023-05-16 21:32:26
89.248.165.84 attack
Scan port
2023-05-24 21:18:55
109.207.200.45 proxy
VPN fraud
2023-05-29 13:03:41
184.105.247.200 proxy
VPN fraud
2023-05-16 12:48:27
92.63.196.94 attack
Scan port
2023-05-15 12:51:35
167.248.133.125 proxy
VPN scan
2023-05-22 13:01:52
92.63.196.69 attack
Scan port
2023-05-15 12:53:29
163.171.174.66 attack
Ping continuous
2023-05-17 21:06:29
194.195.242.36 attack
Scan port
2023-05-13 17:08:30
45.83.66.85 proxy
VPN fraud
2023-05-25 12:40:34
2001:0002:14:5:1:2:bf35:2610 attack
Hacker
2023-05-18 10:57:36
41.206.85.143 proxynormal
Ce téléphone à été volé
2023-05-20 16:16:52

Recently Reported IPs

189.250.122.127 222.253.118.64 27.227.55.49 208.209.181.126
18.246.142.226 61.83.145.199 195.158.24.178 77.247.108.211
205.209.173.7 14.36.156.188 78.190.64.254 144.239.129.88
89.253.160.81 61.153.203.152 103.254.148.224 101.99.75.212
152.78.187.95 27.77.113.81 178.128.29.94 212.24.255.4