Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Korea, Republic of

Internet Service Provider: KT Corporation

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Type Details Datetime
attackspambots
Nov 29 14:31:37 sip sshd[28730]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.13.139.42
Nov 29 14:31:39 sip sshd[28730]: Failed password for invalid user incoming from 59.13.139.42 port 49644 ssh2
Nov 29 15:40:54 sip sshd[8927]: Failed password for ubuntu from 59.13.139.42 port 38418 ssh2
2019-12-01 08:32:42
attackbots
2019-11-30T11:55:30.927513abusebot-7.cloudsearch.cf sshd\[10430\]: Invalid user aris from 59.13.139.42 port 48590
2019-11-30 19:56:27
attackspam
vps1:pam-generic
2019-10-16 10:26:40
attack
Oct 13 22:15:59 host sshd\[36263\]: Invalid user stacee from 59.13.139.42 port 40966
Oct 13 22:15:59 host sshd\[36263\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.13.139.42
...
2019-10-14 05:06:38
attackspam
SSH bruteforce (Triggered fail2ban)
2019-10-12 10:21:05
attack
Invalid user carlos2 from 59.13.139.42 port 54484
2019-10-11 21:23:33
attackspambots
Aug 18 07:23:37 XXX sshd[5093]: Invalid user ofsaa from 59.13.139.42 port 60800
2019-08-18 20:02:33
attackspambots
Aug 14 14:49:09 XXX sshd[6596]: Invalid user devann from 59.13.139.42 port 36532
2019-08-15 00:25:41
attack
Automatic report - Banned IP Access
2019-08-10 11:14:05
attackbotsspam
$f2bV_matches
2019-07-23 02:45:16
attackspam
detected by Fail2Ban
2019-07-17 03:58:57
Comments on same subnet:
IP Type Details Datetime
59.13.139.46 attackspambots
2019-12-04T20:33:03.360942abusebot-5.cloudsearch.cf sshd\[32260\]: Invalid user robert from 59.13.139.46 port 57190
2019-12-05 06:49:19
59.13.139.54 attackbotsspam
2019-12-04T11:20:42.500746abusebot-5.cloudsearch.cf sshd\[26182\]: Invalid user bjorn from 59.13.139.54 port 36786
2019-12-04 19:47:27
59.13.139.50 attack
Nov 30 18:22:01 host sshd[20584]: Invalid user cinema from 59.13.139.50 port 49914
...
2019-12-01 04:00:27
59.13.139.54 attackbots
2019-11-28T18:40:12.612212abusebot-5.cloudsearch.cf sshd\[26103\]: Invalid user hp from 59.13.139.54 port 42872
2019-11-29 06:24:26
59.13.139.46 attackspambots
Nov 27 09:29:43 [host] sshd[29546]: Invalid user yar from 59.13.139.46
Nov 27 09:29:43 [host] sshd[29546]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.13.139.46
Nov 27 09:29:44 [host] sshd[29546]: Failed password for invalid user yar from 59.13.139.46 port 54712 ssh2
2019-11-27 18:09:25
59.13.139.50 attack
Invalid user plaza from 59.13.139.50 port 37880
2019-11-23 17:10:31
59.13.139.50 attack
Invalid user plaza from 59.13.139.50 port 37880
2019-11-21 16:52:29
59.13.139.54 attackbotsspam
Nov 19 14:15:58 nextcloud sshd\[5287\]: Invalid user tracyf from 59.13.139.54
Nov 19 14:15:58 nextcloud sshd\[5287\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.13.139.54
Nov 19 14:16:00 nextcloud sshd\[5287\]: Failed password for invalid user tracyf from 59.13.139.54 port 54408 ssh2
...
2019-11-20 02:10:33
59.13.139.54 attackspambots
Nov 18 05:09:04 icinga sshd[1924]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.13.139.54 
Nov 18 05:09:06 icinga sshd[1924]: Failed password for invalid user robert from 59.13.139.54 port 39278 ssh2
Nov 18 05:52:21 icinga sshd[41992]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.13.139.54 
...
2019-11-18 14:09:52
59.13.139.54 attackspam
Automatic report - Banned IP Access
2019-11-17 00:50:49
59.13.139.46 attackbotsspam
Nov 12 06:53:03 icinga sshd[57150]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.13.139.46 
Nov 12 06:53:05 icinga sshd[57150]: Failed password for invalid user hp from 59.13.139.46 port 36106 ssh2
Nov 12 07:27:34 icinga sshd[24487]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.13.139.46 
...
2019-11-12 18:04:55
59.13.139.46 attack
Nov  7 17:05:25 XXX sshd[3218]: Invalid user ofsaa from 59.13.139.46 port 58350
2019-11-08 01:05:24
59.13.139.54 attack
2019-11-04T06:40:09.803586abusebot-5.cloudsearch.cf sshd\[12371\]: Invalid user bjorn from 59.13.139.54 port 53410
2019-11-04 14:45:28
59.13.139.46 attackbotsspam
Nov  2 12:04:04 XXX sshd[40006]: Invalid user ofsaa from 59.13.139.46 port 40272
2019-11-02 20:15:00
59.13.139.50 attack
2019-10-31T04:17:29.828694abusebot-5.cloudsearch.cf sshd\[27207\]: Invalid user hp from 59.13.139.50 port 49660
2019-10-31 16:36:55
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 59.13.139.42
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 55448
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;59.13.139.42.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019071601 1800 900 604800 86400

;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Wed Jul 17 03:58:52 CST 2019
;; MSG SIZE  rcvd: 116
Host info
Host 42.139.13.59.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 42.139.13.59.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
125.227.24.33 attackspam
1577686812 - 12/30/2019 07:20:12 Host: 125.227.24.33/125.227.24.33 Port: 445 TCP Blocked
2019-12-30 22:05:33
45.77.212.41 attackspam
Looking for resource vulnerabilities
2019-12-30 22:31:55
51.254.131.67 attackspambots
(sshd) Failed SSH login from 51.254.131.67 (67.ip-51-254-131.eu): 5 in the last 3600 secs
2019-12-30 22:36:05
14.186.232.121 attackspam
Honeypot attack, port: 445, PTR: static.vnpt.vn.
2019-12-30 22:09:49
71.142.127.108 attackspam
Dec 30 11:44:32 lively sshd[31298]: Invalid user pi from 71.142.127.108 port 50844
Dec 30 11:44:32 lively sshd[31300]: Invalid user pi from 71.142.127.108 port 50846


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=71.142.127.108
2019-12-30 22:33:37
114.226.117.167 attackbots
Port 1433 Scan
2019-12-30 22:10:28
2.180.81.22 attack
Honeypot attack, port: 445, PTR: PTR record not found
2019-12-30 22:29:56
178.33.216.187 attack
Dec 30 07:19:23 tuxlinux sshd[18245]: Invalid user navi from 178.33.216.187 port 58703
Dec 30 07:19:23 tuxlinux sshd[18245]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.33.216.187 
Dec 30 07:19:23 tuxlinux sshd[18245]: Invalid user navi from 178.33.216.187 port 58703
Dec 30 07:19:23 tuxlinux sshd[18245]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.33.216.187 
Dec 30 07:19:23 tuxlinux sshd[18245]: Invalid user navi from 178.33.216.187 port 58703
Dec 30 07:19:23 tuxlinux sshd[18245]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.33.216.187 
Dec 30 07:19:26 tuxlinux sshd[18245]: Failed password for invalid user navi from 178.33.216.187 port 58703 ssh2
...
2019-12-30 22:41:46
218.92.0.172 attackspam
Dec 30 15:10:50 herz-der-gamer sshd[16382]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.172  user=root
Dec 30 15:10:53 herz-der-gamer sshd[16382]: Failed password for root from 218.92.0.172 port 34490 ssh2
...
2019-12-30 22:27:08
213.7.222.164 attackspam
Honeypot attack, port: 23, PTR: 213-222-164.netrun.cytanet.com.cy.
2019-12-30 22:43:43
118.27.9.229 attack
Automatic report - SSH Brute-Force Attack
2019-12-30 22:47:07
45.160.131.132 attackspambots
Automatic report - Port Scan Attack
2019-12-30 22:29:12
59.188.1.145 attackbotsspam
Portscan or hack attempt detected by psad/fwsnort
2019-12-30 22:28:39
182.61.19.79 attackbotsspam
ssh brute force
2019-12-30 22:40:59
138.0.60.5 attack
2019-12-30T12:47:17.698228abusebot-3.cloudsearch.cf sshd[13437]: Invalid user mirko from 138.0.60.5 port 39626
2019-12-30T12:47:17.709656abusebot-3.cloudsearch.cf sshd[13437]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.0.60.5.wellnet.com.br
2019-12-30T12:47:17.698228abusebot-3.cloudsearch.cf sshd[13437]: Invalid user mirko from 138.0.60.5 port 39626
2019-12-30T12:47:20.002484abusebot-3.cloudsearch.cf sshd[13437]: Failed password for invalid user mirko from 138.0.60.5 port 39626 ssh2
2019-12-30T12:49:55.339998abusebot-3.cloudsearch.cf sshd[13566]: Invalid user teste from 138.0.60.5 port 34890
2019-12-30T12:49:55.349706abusebot-3.cloudsearch.cf sshd[13566]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.0.60.5.wellnet.com.br
2019-12-30T12:49:55.339998abusebot-3.cloudsearch.cf sshd[13566]: Invalid user teste from 138.0.60.5 port 34890
2019-12-30T12:49:57.667681abusebot-3.cloudsearch.cf sshd[13566
...
2019-12-30 22:36:44

Recently Reported IPs

220.81.7.211 49.176.215.29 79.239.196.215 89.46.105.236
64.71.32.85 193.189.75.166 185.38.44.226 175.162.250.110
150.95.104.221 119.132.75.106 178.219.163.186 165.227.72.89
223.31.107.214 116.104.179.145 180.102.104.173 49.89.187.30
195.211.213.101 176.252.239.20 61.143.39.69 5.141.186.78