139.59.136.64 - IPInfo

Basic Info

City: Frankfurt am Main

Region: Hesse

Country: Germany

Internet Service Provider: Digital Ocean Inc.

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspambots	Wordpress attack	2020-06-29 04:59:57
attack	CMS (WordPress or Joomla) login attempt.	2020-06-15 09:22:45
attackspam	Automatic report - Banned IP Access	2020-02-10 02:11:31
attackspambots	php WP PHPmyadamin ABUSE blocked for 12h	2020-01-15 13:00:15
attackspambots	139.59.136.64 - - \[27/Dec/2019:23:54:58 +0100\] "POST /wp-login.php HTTP/1.0" 200 3080 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 139.59.136.64 - - \[27/Dec/2019:23:55:00 +0100\] "POST /wp-login.php HTTP/1.0" 200 3039 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 139.59.136.64 - - \[27/Dec/2019:23:55:02 +0100\] "POST /wp-login.php HTTP/1.0" 200 3048 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"	2019-12-28 08:18:50
attackspam	Automatic report - Banned IP Access	2019-11-20 05:29:42
attack	139.59.136.64 - - \[18/Nov/2019:05:54:24 +0100\] "POST /wp-login.php HTTP/1.0" 200 4532 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 139.59.136.64 - - \[18/Nov/2019:05:54:32 +0100\] "POST /wp-login.php HTTP/1.0" 200 5222 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 139.59.136.64 - - \[18/Nov/2019:05:54:40 +0100\] "POST /wp-login.php HTTP/1.0" 200 5148 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"	2019-11-18 13:15:40
attackspambots	Automatic report - Banned IP Access	2019-11-11 04:56:58

Comments on same subnet:

IP	Type	Details	Datetime
139.59.136.99	attackbotsspam	Invalid user ubnt from 139.59.136.99 port 47440	2020-09-23 00:42:15
139.59.136.99	attackbotsspam	TCP (SYN) 139.59.136.99:59205 -> port 22, len 44	2020-09-22 16:42:32
139.59.136.99	attackspam	leo_www	2020-09-22 01:23:02
139.59.136.99	attackbotsspam	TCP (SYN) 139.59.136.99:33612 -> port 22, len 44	2020-09-21 17:05:45
139.59.136.91	attackbots	Jun 3 17:24:41 foo sshd[11779]: Did not receive identification string from 139.59.136.91 Jun 3 17:27:16 foo sshd[11800]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.136.91 user=r.r Jun 3 17:27:19 foo sshd[11800]: Failed password for r.r from 139.59.136.91 port 57652 ssh2 Jun 3 17:27:19 foo sshd[11800]: Received disconnect from 139.59.136.91: 11: Normal Shutdown, Thank you for playing [preauth] Jun 3 17:27:45 foo sshd[11802]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.136.91 user=r.r Jun 3 17:27:47 foo sshd[11802]: Failed password for r.r from 139.59.136.91 port 52336 ssh2 Jun 3 17:27:47 foo sshd[11802]: Received disconnect from 139.59.136.91: 11: Normal Shutdown, Thank you for playing [preauth] Jun 3 17:28:13 foo sshd[11810]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.136.91 user=r.r Jun 3 17:28:15 foo ssh........ -------------------------------	2020-06-04 07:51:43
139.59.136.254	attack	Invalid user lox from 139.59.136.254 port 41076	2020-05-23 17:45:58
139.59.136.254	attackbots	Triggered by Fail2Ban at Ares web server	2020-05-12 07:37:17
139.59.136.254	attackbotsspam	IP blocked	2020-05-09 20:56:12
139.59.136.254	attackbotsspam	May 2 21:48:02 php1 sshd\[28626\]: Invalid user user from 139.59.136.254 May 2 21:48:02 php1 sshd\[28626\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.136.254 May 2 21:48:04 php1 sshd\[28626\]: Failed password for invalid user user from 139.59.136.254 port 59262 ssh2 May 2 21:51:43 php1 sshd\[28950\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.136.254 user=root May 2 21:51:45 php1 sshd\[28950\]: Failed password for root from 139.59.136.254 port 49002 ssh2	2020-05-03 19:17:38
139.59.136.254	attackbots	Apr 29 05:00:21 game-panel sshd[19596]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.136.254 Apr 29 05:00:24 game-panel sshd[19596]: Failed password for invalid user testbed from 139.59.136.254 port 38752 ssh2 Apr 29 05:05:26 game-panel sshd[19828]: Failed password for proxy from 139.59.136.254 port 50368 ssh2	2020-04-29 13:08:12
139.59.136.254	attack	Invalid user server from 139.59.136.254 port 43142	2020-04-25 03:37:37
139.59.136.254	attack	Invalid user server from 139.59.136.254 port 43142	2020-04-24 04:29:25
139.59.136.254	attackbotsspam	Apr 21 21:24:37 DAAP sshd[16147]: Invalid user sn from 139.59.136.254 port 52618 Apr 21 21:24:37 DAAP sshd[16147]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.136.254 Apr 21 21:24:37 DAAP sshd[16147]: Invalid user sn from 139.59.136.254 port 52618 Apr 21 21:24:39 DAAP sshd[16147]: Failed password for invalid user sn from 139.59.136.254 port 52618 ssh2 Apr 21 21:32:51 DAAP sshd[16346]: Invalid user admin from 139.59.136.254 port 52006 ...	2020-04-22 03:37:46
139.59.136.254	attackbotsspam	Apr 20 19:51:57 localhost sshd[77106]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.136.254 user=root Apr 20 19:51:59 localhost sshd[77106]: Failed password for root from 139.59.136.254 port 54038 ssh2 Apr 20 19:57:40 localhost sshd[77615]: Invalid user ftpuser from 139.59.136.254 port 44516 Apr 20 19:57:40 localhost sshd[77615]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.136.254 Apr 20 19:57:40 localhost sshd[77615]: Invalid user ftpuser from 139.59.136.254 port 44516 Apr 20 19:57:42 localhost sshd[77615]: Failed password for invalid user ftpuser from 139.59.136.254 port 44516 ssh2 ...	2020-04-21 04:20:28
139.59.136.254	attackspambots	Apr 20 14:52:38 ncomp sshd[18559]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.136.254 user=root Apr 20 14:52:40 ncomp sshd[18559]: Failed password for root from 139.59.136.254 port 52980 ssh2 Apr 20 14:58:39 ncomp sshd[18778]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.136.254 user=root Apr 20 14:58:41 ncomp sshd[18778]: Failed password for root from 139.59.136.254 port 41516 ssh2	2020-04-20 22:46:46

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.59.136.64
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 17952
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.59.136.64.			IN	A

;; AUTHORITY SECTION:
.			186	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019111001 1800 900 604800 86400

;; Query time: 105 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Nov 11 04:56:55 CST 2019
;; MSG SIZE  rcvd: 117

Host info

Host 64.136.59.139.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 64.136.59.139.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
191.98.161.236	attack	ssh brute force	2020-10-03 01:48:59
68.183.83.38	attack	2020-10-02T17:09:42.712396vps1033 sshd[1960]: Invalid user user from 68.183.83.38 port 38908 2020-10-02T17:09:42.717847vps1033 sshd[1960]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.83.38 2020-10-02T17:09:42.712396vps1033 sshd[1960]: Invalid user user from 68.183.83.38 port 38908 2020-10-02T17:09:45.132986vps1033 sshd[1960]: Failed password for invalid user user from 68.183.83.38 port 38908 ssh2 2020-10-02T17:13:54.644151vps1033 sshd[10709]: Invalid user oracle from 68.183.83.38 port 46762 ...	2020-10-03 02:10:29
1.172.0.131	attackspambots	1601584762 - 10/01/2020 22:39:22 Host: 1.172.0.131/1.172.0.131 Port: 445 TCP Blocked	2020-10-03 02:00:01
37.49.230.126	attackspam	\[2020-10-02 15:01:13\] SECURITY\[6939\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-02T15:01:13.624+0200",Severity="Error",Service="SIP",EventVersion="2",AccountID="100",SessionID="0x7f0ffea08d88",LocalAddress="IPV4/UDP/204.8.216.89/5060",RemoteAddress="IPV4/UDP/37.49.230.126/5862",Challenge="096f171f",ReceivedChallenge="096f171f",ReceivedHash="b099bdfad5869da4ae2114a56a2b4299" \[2020-10-02 15:01:13\] SECURITY\[6939\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-02T15:01:13.759+0200",Severity="Error",Service="SIP",EventVersion="2",AccountID="100",SessionID="0x7f0ffeab8148",LocalAddress="IPV4/UDP/204.8.216.89/5060",RemoteAddress="IPV4/UDP/37.49.230.126/5862",Challenge="233a417c",ReceivedChallenge="233a417c",ReceivedHash="0017581d14759d4b5ad3a404ed924131" \[2020-10-02 15:01:13\] SECURITY\[6939\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-02T15:01:13.783+0200",Severity="Error",Service="SIP",EventVersion="2",Accoun ...	2020-10-03 02:07:47
106.37.108.162	attack	1433/tcp 1433/tcp 1433/tcp... [2020-09-17/10-01]4pkt,1pt.(tcp)	2020-10-03 01:48:13
192.241.239.15	attack	27017/tcp 161/udp 512/tcp... [2020-08-21/10-01]14pkt,13pt.(tcp),1pt.(udp)	2020-10-03 01:37:06
118.70.67.72	attackbots	Cluster member 67.227.229.95 (US/United States/host.cjthedj97.me) said, DENY 118.70.67.72, Reason:[(sshd) Failed SSH login from 118.70.67.72 (VN/Vietnam/-): 1 in the last 3600 secs]; Ports: *; Direction: inout; Trigger: LF_CLUSTER	2020-10-03 02:14:14
210.4.106.130	attackspambots	445/tcp 445/tcp 445/tcp... [2020-08-07/10-01]9pkt,1pt.(tcp)	2020-10-03 01:56:18
157.230.220.179	attackspambots	Oct 2 19:33:49 host2 sshd[675913]: Invalid user live from 157.230.220.179 port 49558 Oct 2 19:33:49 host2 sshd[675913]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.220.179 Oct 2 19:33:49 host2 sshd[675913]: Invalid user live from 157.230.220.179 port 49558 Oct 2 19:33:51 host2 sshd[675913]: Failed password for invalid user live from 157.230.220.179 port 49558 ssh2 Oct 2 19:35:09 host2 sshd[675950]: Invalid user billy from 157.230.220.179 port 43254 ...	2020-10-03 01:49:46
41.38.50.50	attack	Found on CINS badguys / proto=6 . srcport=54914 . dstport=1433 . (4293)	2020-10-03 02:09:13
89.248.171.97	attack	Port scanning [2 denied]	2020-10-03 01:46:59
160.153.147.18	attack	"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:	2020-10-03 01:41:00
59.127.107.1	attackbots	TCP (SYN) 59.127.107.1:5292 -> port 23, len 40	2020-10-03 01:57:09
185.142.236.35	attackbotsspam	[N3.H3.VM3] Port Scanner Detected Blocked by UFW	2020-10-03 01:49:25
81.18.134.18	attackspambots	Unauthorised access (Oct 2) SRC=81.18.134.18 LEN=52 TTL=118 ID=15089 DF TCP DPT=445 WINDOW=8192 SYN	2020-10-03 02:04:47

Recently Reported IPs

111.161.74.100	45.118.145.167	5.236.129.72	36.99.141.210
162.241.192.138	46.56.73.43	114.40.77.56	89.187.173.241
14.139.171.173	96.44.133.106	167.71.211.142	115.79.212.106
81.88.49.32	46.39.53.45	47.74.129.4	108.30.75.26
142.169.78.200	125.105.83.104	182.20.53.118	146.196.33.99