Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#



# start

NetRange:       21.0.0.0 - 21.255.255.255
CIDR:           21.0.0.0/8
NetName:        DNIC-SNET-021
NetHandle:      NET-21-0-0-0-1
Parent:          ()
NetType:        Direct Allocation
OriginAS:       
Organization:   United States Department of Defense (DoD) (USDDD)
RegDate:        1991-07-01
Updated:        2025-09-05
Ref:            https://rdap.arin.net/registry/ip/21.0.0.0



OrgName:        United States Department of Defense (DoD)
OrgId:          USDDD
Address:        3990 E. Broad Street
City:           Columbus
StateProv:      OH
PostalCode:     43218
Country:        US
RegDate:        2007-01-12
Updated:        2026-08-12
Ref:            https://rdap.arin.net/registry/entity/USDDD


OrgNOCHandle: MIL-HSTMST-ARIN
OrgNOCName:   Network DoD
OrgNOCPhone:  +1-844-347-2457 
OrgNOCEmail:  disa.columbus.ns.mbx.hostmaster-dod-nic@mail.mil
OrgNOCRef:    https://rdap.arin.net/registry/entity/MIL-HSTMST-ARIN

OrgTechHandle: MIL-HSTMST-ARIN
OrgTechName:   Network DoD
OrgTechPhone:  +1-844-347-2457 
OrgTechEmail:  disa.columbus.ns.mbx.hostmaster-dod-nic@mail.mil
OrgTechRef:    https://rdap.arin.net/registry/entity/MIL-HSTMST-ARIN

OrgTechHandle: REGIS10-ARIN
OrgTechName:   Registration
OrgTechPhone:  +1-844-347-2457 
OrgTechEmail:  disa.columbus.ns.mbx.arin-registrations@mail.mil
OrgTechRef:    https://rdap.arin.net/registry/entity/REGIS10-ARIN

OrgAbuseHandle: MIL-HSTMST-ARIN
OrgAbuseName:   Network DoD
OrgAbusePhone:  +1-844-347-2457 
OrgAbuseEmail:  disa.columbus.ns.mbx.hostmaster-dod-nic@mail.mil
OrgAbuseRef:    https://rdap.arin.net/registry/entity/MIL-HSTMST-ARIN

# end


# start

NetRange:       21.0.0.0 - 21.255.255.255
CIDR:           21.0.0.0/8
NetName:        DNIC-SNET-021
NetHandle:      NET-21-0-0-0-2
Parent:         DNIC-SNET-021 (NET-21-0-0-0-1)
NetType:        Reallocated
OriginAS:       
Organization:   DoD Network Information Center (DNIC)
RegDate:        2025-09-05
Updated:        2025-09-05
Ref:            https://rdap.arin.net/registry/ip/21.0.0.0


OrgName:        DoD Network Information Center
OrgId:          DNIC
Address:        3990 E. Broad Street
City:           Columbus
StateProv:      OH
PostalCode:     43218
Country:        US
RegDate:        
Updated:        2025-03-13
Ref:            https://rdap.arin.net/registry/entity/DNIC


OrgTechHandle: MIL-HSTMST-ARIN
OrgTechName:   Network DoD
OrgTechPhone:  +1-844-347-2457 
OrgTechEmail:  disa.columbus.ns.mbx.hostmaster-dod-nic@mail.mil
OrgTechRef:    https://rdap.arin.net/registry/entity/MIL-HSTMST-ARIN

OrgAbuseHandle: REGIS10-ARIN
OrgAbuseName:   Registration
OrgAbusePhone:  +1-844-347-2457 
OrgAbuseEmail:  disa.columbus.ns.mbx.arin-registrations@mail.mil
OrgAbuseRef:    https://rdap.arin.net/registry/entity/REGIS10-ARIN

OrgTechHandle: REGIS10-ARIN
OrgTechName:   Registration
OrgTechPhone:  +1-844-347-2457 
OrgTechEmail:  disa.columbus.ns.mbx.arin-registrations@mail.mil
OrgTechRef:    https://rdap.arin.net/registry/entity/REGIS10-ARIN

# end



#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 21.25.59.199
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 30160
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;21.25.59.199.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026090400 1800 900 604800 86400

;; Query time: 7 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Sep 04 13:54:27 CST 2026
;; MSG SIZE  rcvd: 105
Host info
Host 199.59.25.21.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 199.59.25.21.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
134.236.253.96 attackbotsspam
Unauthorized connection attempt from IP address 134.236.253.96 on Port 445(SMB)
2019-08-13 20:17:35
176.254.91.9 attack
Automatic report - Port Scan Attack
2019-08-13 20:27:37
138.59.184.241 attackbots
Automatic report - Port Scan Attack
2019-08-13 20:20:50
27.79.175.60 attack
Unauthorized connection attempt from IP address 27.79.175.60 on Port 445(SMB)
2019-08-13 20:08:13
31.14.142.109 attackbots
Splunk® : Brute-Force login attempt on SSH:
Aug 13 08:05:15 testbed sshd[14522]: Disconnected from 31.14.142.109 port 50947 [preauth]
2019-08-13 20:07:52
191.102.116.231 attack
Brute force attempt
2019-08-13 20:07:04
124.6.177.250 attackspam
Unauthorized connection attempt from IP address 124.6.177.250 on Port 445(SMB)
2019-08-13 20:27:12
49.151.171.128 attackspam
Unauthorized connection attempt from IP address 49.151.171.128 on Port 445(SMB)
2019-08-13 19:54:51
5.199.130.188 attack
v+ssh-bruteforce
2019-08-13 20:22:33
14.185.224.44 attackspambots
Unauthorized connection attempt from IP address 14.185.224.44 on Port 445(SMB)
2019-08-13 19:55:37
106.12.33.174 attackbots
Aug 13 13:43:50 bouncer sshd\[448\]: Invalid user moodle from 106.12.33.174 port 46874
Aug 13 13:43:50 bouncer sshd\[448\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.33.174 
Aug 13 13:43:52 bouncer sshd\[448\]: Failed password for invalid user moodle from 106.12.33.174 port 46874 ssh2
...
2019-08-13 20:30:57
82.238.107.124 attackbots
Automatic report - SSH Brute-Force Attack
2019-08-13 20:05:34
123.207.94.252 attackbots
Aug 13 13:36:16 bouncer sshd\[364\]: Invalid user postgres from 123.207.94.252 port 51816
Aug 13 13:36:16 bouncer sshd\[364\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.207.94.252 
Aug 13 13:36:18 bouncer sshd\[364\]: Failed password for invalid user postgres from 123.207.94.252 port 51816 ssh2
...
2019-08-13 20:21:20
130.61.72.90 attackspam
Aug 13 12:55:06 pornomens sshd\[26271\]: Invalid user aiken from 130.61.72.90 port 36460
Aug 13 12:55:06 pornomens sshd\[26271\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=130.61.72.90
Aug 13 12:55:08 pornomens sshd\[26271\]: Failed password for invalid user aiken from 130.61.72.90 port 36460 ssh2
...
2019-08-13 20:23:16
64.31.0.51 attackspam
08/13/2019-03:31:40.003032 64.31.0.51 Protocol: 6 SURICATA HTTP unable to match response to request
2019-08-13 19:48:35

Recently Reported IPs

210.110.109.176 21.254.12.66 209.98.132.251 173.255.238.109
157.230.58.254 64.227.61.33 165.227.82.20 139.177.205.71
67.205.141.30 60.5.185.141 60.18.85.162 42.86.196.237
42.49.168.231 42.236.216.210 42.228.112.71 221.1.52.22
218.59.135.230 206.189.73.114 195.96.139.20 185.3.95.42