JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 139.59.173.166

139.59.173.166 was found in our database!

This IP was reported 49 times. Confidence of Abuse is 0%: ?

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇬🇧 United Kingdom of Great Britain and Northern Ireland
City	London, England

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 139.59.173.166

Whois 139.59.173.166

IP Abuse Reports for 139.59.173.166:

This IP address has been reported a total of 49 times from 37 distinct sources. 139.59.173.166 was first reported on March 28th 2021, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇹 urnilxfgbez	2026-04-12 22:45:00 (2 months ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
Anonymous	2026-04-12 22:03:44 (2 months ago)	Try to connect to Port_Scan_8080_stealth	Port Scan
🇺🇸 Hobby Bob	2026-04-12 22:00:46 (2 months ago)	Apr 12 22:00:46 server dovecot: imap-login: Disconnected: Too many invalid commands (no auth attempt ... show more Apr 12 22:00:46 server dovecot: imap-login: Disconnected: Too many invalid commands (no auth attempts in 0 secs): user=, rip=139.59.173.166, lip=X.X.X.X session= show less	Port Scan Hacking
🇺🇸 MPL	2026-04-12 14:05:27 (2 months ago)	tcp/8443 (2 or more attempts)	Port Scan
🇮🇳 Mr.Singh	2026-04-12 12:30:08 (2 months ago)	NFT blocked 139.59.173.166 on 12-Apr-2026..	Port Scan Brute-Force
🇨🇭 pingusurmars	2026-03-26 15:56:32 (2 months ago)	Blocked by UFW on amperetwo [10000/tcp] Source port: 61003 TTL: 243 Packet length: 44 TOS: 0x00 Thi ... show more Blocked by UFW on amperetwo [10000/tcp] Source port: 61003 TTL: 243 Packet length: 44 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 Richie	2026-03-01 13:08:39 (3 months ago)	Mar 1 14:07:35 host2 sshd[1220616]: Failed password for root from 139.59.173.166 port 32962 ssh2 Ma ... show more Mar 1 14:07:35 host2 sshd[1220616]: Failed password for root from 139.59.173.166 port 32962 ssh2 Mar 1 14:08:04 host2 sshd[1220626]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.173.166 user=root Mar 1 14:08:07 host2 sshd[1220626]: Failed password for root from 139.59.173.166 port 33456 ssh2 Mar 1 14:08:35 host2 sshd[1220630]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.173.166 user=root Mar 1 14:08:38 host2 sshd[1220630]: Failed password for root from 139.59.173.166 port 33974 ssh2 ... show less	Brute-Force SSH
🇿🇦 LosMyGoedUit!	2026-03-01 13:08:28 (3 months ago)	2026-03-01T15:08:27+0200 Failed SSH Authentication/Brute Force Attack. (Server 9)	Brute-Force SSH
🇺🇸 mijavapolicy.com	2026-03-01 13:07:36 (3 months ago)	Mar 1 13:06:34 v3 sshd[2650300]: Failed password for invalid user root from 139.59.173.166 port 519 ... show more Mar 1 13:06:34 v3 sshd[2650300]: Failed password for invalid user root from 139.59.173.166 port 51960 ssh2 Mar 1 13:07:03 v3 sshd[2650332]: User root from 139.59.173.166 not allowed because not listed in AllowUsers Mar 1 13:07:04 v3 sshd[2650332]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.173.166 user=root Mar 1 13:07:05 v3 sshd[2650332]: Failed password for invalid user root from 139.59.173.166 port 38146 ssh2 Mar 1 13:07:35 v3 sshd[2650363]: User root from 139.59.173.166 not allowed because not listed in AllowUsers ... show less	Brute-Force SSH
🇫🇷 sasbau	2026-03-01 13:07:35 (3 months ago)	Mar 1 14:07:03 * sshd[335030]: Failed password for root from 139.59.173.166 port 43850 ssh2 Mar 1 ... show more Mar 1 14:07:03 * sshd[335030]: Failed password for root from 139.59.173.166 port 43850 ssh2 Mar 1 14:07:32 * sshd[335101]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.173.166 user=root Mar 1 14:07:35 * sshd[335101]: Failed password for root from 139.59.173.166 port 55452 ssh2 show less	Brute-Force SSH
🇰🇪 aorth	2026-03-01 13:06:21 (3 months ago)	Mar 01 16:06:21 Failed password for invalid user root from 139.59.173.166 port 43090	Brute-Force SSH
🇺🇸 xmission.com	2026-03-01 13:04:17 (3 months ago)	Blocked by UFW (TCP on 22) Source port: 50244 TTL: 239 Packet length: 40 TOS: 0x08 This report (for ... show more Blocked by UFW (TCP on 22) Source port: 50244 TTL: 239 Packet length: 40 TOS: 0x08 This report (for 139.59.173.166) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan SSH Brute-Force
🇺🇸 RAP	2026-03-01 13:04:09 (3 months ago)	2026-03-01 13:04:09 UTC Unauthorized activity to TCP port 22. SSH	SSH
🇺🇸 Axel	2025-11-20 01:44:02 (7 months ago)	[2025-11-20 01:44:02 UTC] Honeypot Flask connection attempt \| AXFRA HONEYPOT \| ID: BUF-DU3J	Web App Attack
🇺🇸 MPL	2025-11-15 01:11:34 (7 months ago)	tcp/8088 (2 or more attempts)	Port Scan

Showing 1 to 15 of 49 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇩 203.83.45.36

🇷🇴 193.32.162.84

🇳🇱 178.16.55.50

🇫🇷 149.202.61.117

🇫🇮 147.185.133.252

🇷🇴 141.98.83.240

🇳🇱 81.19.216.85

🇧🇬 79.124.56.250

🇩🇪 69.5.169.115

🇳🇱 195.178.110.162

🇮🇳 167.71.239.213

🇧🇷 164.163.24.11

🇺🇸 141.11.88.101

🇮🇳 106.51.92.114

🇵🇰 103.141.5.137

🇹🇷 78.190.164.86

🇲🇾 47.250.40.181

🇩🇪 43.228.157.8

🇷🇴 193.46.255.86

🇻🇳 171.231.180.133