139.59.161.182

Classification: Malicious

139.59.161.182 is a malicious IP address in London, GB. 76 sightings from 8 threat sources (Proxy, Malicious Host), last seen 2026-10-16.

Current activity

  • Known scanner — Seen scanning hosts over the Internet.
  • Open proxy — Provides anonymization that can hide an attacker.
  • VPN node — Provides anonymization that can hide an attacker.

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Unauthorized scanning of hosts Blocklist.net.ua 2026-10-16 16:28:41 2026-10-16 16:28:41 malicious-activity reconnaissance
VPN IPWhois.io 2026-09-09 23:08:40 2026-09-09 23:08:40 anonymization vpn
Proxy IPWhois.io 2026-07-13 22:44:24 2026-07-13 22:44:24 anonymization proxy
Proxy FireHOL 2023-01-02 02:12:13 2025-10-07 08:36:04 anonymization
SSH Attacker Blocklist.de 2023-02-23 02:32:03 2023-06-24 04:34:32 malicious-activity
Malicious Host HoneyDB 2023-02-25 00:00:00 2023-02-25 00:00:00 malicious-activity
Malicious Host CIArmy 2022-12-28 06:47:24 2022-12-29 06:29:04 malicious-activity
Anonymizer Maltiverse Research Team 2020-11-22 00:08:44 2021-05-23 13:11:06 anonymizer
Anonymizer Maltiverse 2017-12-09 20:19:36 2017-12-09 20:19:36

Tags

anonymization ssh bruteforce bot anonymizer abuse

Whois information

AS name
AS14061 DigitalOcean, LLC
AS registry
apnic
AS date
1990-06-27 00:00:00
AS CIDR
139.59.160.0/20
CIDR
139.59.160.0/20
Registrant
DigitalOcean, LLC
Address
101 Avenue of the Americas, 10th Floor, New York NY 10013
City
London
Postal code
EC4R
Country
GB — United Kingdom 🇬🇧
Contact email
[email protected]
First indexed
2017-12-09 20:19:36
Last updated
2026-10-16 16:28:41

Malicious IPs in the same CIDR

139.59.172.69 139.59.166.49 139.59.168.149 139.59.174.210 139.59.170.85 139.59.165.88 139.59.161.182 139.59.167.79 139.59.162.164 139.59.171.237 139.59.171.235 139.59.166.193 139.59.175.245 139.59.175.247 139.59.173.98 139.59.174.130