IP address

Search at other sites:
.000139.59.125.28
Shodan(more info)
Passive DNS
Tags: Scanner
IP blacklists
AbuseIPDB
139.59.125.28 is listed on the AbuseIPDB blacklist.

Description: AbuseIPDB is a project managed by Marathon Studios Inc.<br>Lists IPs performing a malicious activity (DDoS, spam, phishing...)
Type of feed: primary (feed detail page)

Last checked at: 2025-04-13 04:00:00.656000
Was present on blacklist at: 2025-03-06 05:00, 2025-03-19 05:00, 2025-03-20 05:00, 2025-04-13 04:00
CI Army
139.59.125.28 is listed on the CI Army blacklist.

Description: Collective Intelligence Network Security is a Threat Intelligence<br>database that provides scores for IPs. Source of unspecified malicious attacks<br>most of them will be active attackers/scanners
Type of feed: primary (feed detail page)

Last checked at: 2025-03-17 03:50:00.820000
Was present on blacklist at: 2025-03-15 03:50, 2025-03-16 03:50, 2025-03-17 03:50
Warden events (933)
2025-04-14
ReconScanning (node.4dc198): 56
2025-04-13
ReconScanning (node.4dc198): 81
2025-04-12
ReconScanning (node.4dc198): 53
2025-04-11
ReconScanning (node.9c1411): 2
ReconScanning (node.4dc198): 26
2025-03-27
ReconScanning (node.4dc198): 39
ReconScanning (node.9c1411): 1
2025-03-26
ReconScanning (node.4dc198): 84
2025-03-25
ReconScanning (node.4dc198): 109
ReconScanning (node.9c1411): 7
2025-03-24
ReconScanning (node.4dc198): 80
ReconScanning (node.9c1411): 1
2025-03-16
ReconScanning (node.9c1411): 23
2025-03-15
ReconScanning (node.9c1411): 32
2025-03-13
ReconScanning (node.4dc198): 40
ReconScanning (node.9c1411): 1
2025-03-12
ReconScanning (node.4dc198): 100
2025-03-11
ReconScanning (node.4dc198): 109
2025-03-10
ReconScanning (node.4dc198): 85
ReconScanning (node.9c1411): 4
DShield reports (IP summary, reports)
2025-03-05
Number of reports: 890
Distinct targets: 73
2025-03-06
Number of reports: 1948
Distinct targets: 130
2025-03-07
Number of reports: 1400
Distinct targets: 104
2025-03-08
Number of reports: 743
Distinct targets: 44
2025-03-10
Number of reports: 225
Distinct targets: 17
2025-03-11
Number of reports: 349
Distinct targets: 23
2025-03-12
Number of reports: 331
Distinct targets: 24
2025-03-13
Number of reports: 149
Distinct targets: 10
2025-03-14
Number of reports: 39
Distinct targets: 27
2025-03-15
Number of reports: 341
Distinct targets: 305
2025-03-19
Number of reports: 1583
Distinct targets: 110
2025-03-20
Number of reports: 1212
Distinct targets: 97
2025-03-21
Number of reports: 1002
Distinct targets: 93
2025-03-22
Number of reports: 295
Distinct targets: 16
2025-03-24
Number of reports: 270
Distinct targets: 17
2025-03-25
Number of reports: 76
Distinct targets: 7
2025-03-26
Number of reports: 215
Distinct targets: 14
2025-03-27
Number of reports: 151
Distinct targets: 9
2025-04-05
Number of reports: 722
Distinct targets: 59
2025-04-06
Number of reports: 1645
Distinct targets: 116
2025-04-07
Number of reports: 1427
Distinct targets: 112
2025-04-08
Number of reports: 1017
Distinct targets: 92
2025-04-11
Number of reports: 238
Distinct targets: 16
2025-04-12
Number of reports: 329
Distinct targets: 21
2025-04-13
Number of reports: 295
Distinct targets: 18
2025-04-14
Number of reports: 153
Distinct targets: 9
Origin AS
AS14061 - DIGITALOCEAN-ASN
BGP Prefix
139.59.112.0/20
geo
Singapore, Singapore
🕑 Asia/Singapore
hostname
(null)
Address block ('inetnum' or 'NetRange' in whois database)
139.59.0.0 - 139.59.255.255
last_activity
2025-04-14 13:35:44
last_warden_event
2025-04-14 13:35:44
rep
0.0
reserved_range
0
Shodan's InternetDB
Open ports: 22
Tags: cloud
CPEs: cpe:/a:openbsd:openssh:8.2p1, cpe:/o:canonical:ubuntu_linux
ts_added
2025-03-06 05:00:20.842000
ts_last_update
2025-05-07 05:00:31.690000

Warden event timeline

DShield event timeline

Presence on blacklists