139.59.154.204

Basic Info

City: unknown

Region: unknown

Country: unknown

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
139.59.154.31	attackspambots	Attempted connection to port 80.	2020-08-24 21:21:34
139.59.154.219	attack	Apr 10 10:44:34 motanud sshd\[22429\]: Invalid user ubuntu from 139.59.154.219 port 49712 Apr 10 10:44:34 motanud sshd\[22429\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.154.219 Apr 10 10:44:36 motanud sshd\[22429\]: Failed password for invalid user ubuntu from 139.59.154.219 port 49712 ssh2	2019-08-11 05:23:17
139.59.154.219	attack	fire	2019-08-09 13:44:44
139.59.154.219	attackspambots	Apr 10 09:45:41 server sshd\[65960\]: Invalid user ubuntu from 139.59.154.219 Apr 10 09:45:41 server sshd\[65960\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.154.219 Apr 10 09:45:44 server sshd\[65960\]: Failed password for invalid user ubuntu from 139.59.154.219 port 51480 ssh2 ...	2019-07-12 07:28:47

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.59.154.204
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 12422
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;139.59.154.204.			IN	A

;; AUTHORITY SECTION:
.			589	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030803 1800 900 604800 86400

;; Query time: 16 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 09 08:35:18 CST 2022
;; MSG SIZE  rcvd: 107

Host info

Host 204.154.59.139.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 204.154.59.139.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
162.243.128.49	attackspambots	TCP (SYN) 162.243.128.49:48047 -> port 1433, len 44	2020-10-04 13:29:45
82.177.52.48	attackspam	Oct 3 22:20:25 mail.srvfarm.net postfix/smtps/smtpd[661644]: warning: unknown[82.177.52.48]: SASL PLAIN authentication failed: Oct 3 22:20:25 mail.srvfarm.net postfix/smtps/smtpd[661644]: lost connection after AUTH from unknown[82.177.52.48] Oct 3 22:22:36 mail.srvfarm.net postfix/smtps/smtpd[659335]: warning: unknown[82.177.52.48]: SASL PLAIN authentication failed: Oct 3 22:22:36 mail.srvfarm.net postfix/smtps/smtpd[659335]: lost connection after AUTH from unknown[82.177.52.48] Oct 3 22:26:19 mail.srvfarm.net postfix/smtpd[660372]: warning: unknown[82.177.52.48]: SASL PLAIN authentication failed:	2020-10-04 13:18:09
45.142.120.53	attack	Oct 4 06:18:48 nlmail01.srvfarm.net postfix/smtpd[130194]: warning: unknown[45.142.120.53]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 4 06:18:58 nlmail01.srvfarm.net postfix/smtpd[130200]: warning: unknown[45.142.120.53]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 4 06:18:59 nlmail01.srvfarm.net postfix/smtpd[130198]: warning: unknown[45.142.120.53]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 4 06:19:00 nlmail01.srvfarm.net postfix/smtpd[130194]: warning: unknown[45.142.120.53]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 4 06:19:02 nlmail01.srvfarm.net postfix/smtpd[130201]: warning: unknown[45.142.120.53]: SASL LOGIN authentication failed: UGFzc3dvcmQ6	2020-10-04 13:22:36
45.142.120.38	attackspam	Oct 4 07:03:47 srv01 postfix/smtpd\[15128\]: warning: unknown\[45.142.120.38\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 4 07:03:53 srv01 postfix/smtpd\[13835\]: warning: unknown\[45.142.120.38\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 4 07:03:55 srv01 postfix/smtpd\[15792\]: warning: unknown\[45.142.120.38\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 4 07:03:57 srv01 postfix/smtpd\[14434\]: warning: unknown\[45.142.120.38\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 4 07:04:04 srv01 postfix/smtpd\[15128\]: warning: unknown\[45.142.120.38\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2020-10-04 13:22:53
140.143.22.116	attack	Connection to SSH Honeypot - Detected by HoneypotDB	2020-10-04 13:51:48
95.9.227.216	attack	Automatic report - Port Scan Attack	2020-10-04 13:44:57
222.186.15.62	attackspam	Oct 4 05:42:47 localhost sshd[6205]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.62 user=root Oct 4 05:42:50 localhost sshd[6205]: Failed password for root from 222.186.15.62 port 17617 ssh2 Oct 4 05:42:51 localhost sshd[6205]: Failed password for root from 222.186.15.62 port 17617 ssh2 Oct 4 05:42:47 localhost sshd[6205]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.62 user=root Oct 4 05:42:50 localhost sshd[6205]: Failed password for root from 222.186.15.62 port 17617 ssh2 Oct 4 05:42:51 localhost sshd[6205]: Failed password for root from 222.186.15.62 port 17617 ssh2 Oct 4 05:42:47 localhost sshd[6205]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.62 user=root Oct 4 05:42:50 localhost sshd[6205]: Failed password for root from 222.186.15.62 port 17617 ssh2 Oct 4 05:42:51 localhost sshd[6205]: Failed password for ...	2020-10-04 13:43:32
198.199.95.17	attackbotsspam	Malicious brute force vulnerability hacking attacks	2020-10-04 13:26:29
115.97.230.150	attack	Oct 3 20:39:55 netserv300 sshd[9382]: Connection from 115.97.230.150 port 57119 on 178.63.236.17 port 22 Oct 3 20:39:55 netserv300 sshd[9383]: Connection from 115.97.230.150 port 57134 on 178.63.236.21 port 22 Oct 3 20:39:55 netserv300 sshd[9384]: Connection from 115.97.230.150 port 57153 on 178.63.236.22 port 22 Oct 3 20:39:55 netserv300 sshd[9385]: Connection from 115.97.230.150 port 57152 on 178.63.236.18 port 22 Oct 3 20:39:55 netserv300 sshd[9386]: Connection from 115.97.230.150 port 57168 on 178.63.236.20 port 22 Oct 3 20:39:55 netserv300 sshd[9387]: Connection from 115.97.230.150 port 57175 on 178.63.236.16 port 22 Oct 3 20:39:55 netserv300 sshd[9388]: Connection from 115.97.230.150 port 57189 on 178.63.236.19 port 22 Oct 3 20:39:57 netserv300 sshd[9390]: Connection from 115.97.230.150 port 57233 on 178.63.236.21 port 22 Oct 3 20:39:57 netserv300 sshd[9392]: Connection from 115.97.230.150 port 57239 on 178.63.236.17 port 22 Oct 3 20:39:57 netserv300 sshd........ ------------------------------	2020-10-04 13:33:55
94.57.252.147	attackspambots	Oct 4 04:57:30 vps-51d81928 sshd[549609]: Invalid user bot from 94.57.252.147 port 53360 Oct 4 04:57:30 vps-51d81928 sshd[549609]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.57.252.147 Oct 4 04:57:30 vps-51d81928 sshd[549609]: Invalid user bot from 94.57.252.147 port 53360 Oct 4 04:57:32 vps-51d81928 sshd[549609]: Failed password for invalid user bot from 94.57.252.147 port 53360 ssh2 Oct 4 05:01:32 vps-51d81928 sshd[549660]: Invalid user secretaria from 94.57.252.147 port 50602 ...	2020-10-04 13:49:15
123.149.215.93	attackbotsspam	[SID2] Fail2ban detected 5 failed SSH login attempts within 30 minutes. This report was submitted automatically.	2020-10-04 13:37:16
85.209.0.103	attack	TCP (SYN) 85.209.0.103:32954 -> port 22, len 60	2020-10-04 13:17:22
139.180.175.134	attackspambots	139.180.175.134 - - [04/Oct/2020:05:11:04 +0200] "GET /wp-login.php HTTP/1.1" 200 9061 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 139.180.175.134 - - [04/Oct/2020:05:11:07 +0200] "POST /wp-login.php HTTP/1.1" 200 9312 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 139.180.175.134 - - [04/Oct/2020:05:11:09 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-10-04 13:47:13
134.175.129.204	attack	Oct 4 01:27:05 ajax sshd[17932]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.175.129.204 Oct 4 01:27:07 ajax sshd[17932]: Failed password for invalid user admin from 134.175.129.204 port 56718 ssh2	2020-10-04 13:39:22
138.121.95.197	attack	Oct 3 22:03:58 mail.srvfarm.net postfix/smtpd[656172]: warning: 197-95-121-138.ebertinformatica.com.br[138.121.95.197]: SASL PLAIN authentication failed: Oct 3 22:03:59 mail.srvfarm.net postfix/smtpd[656172]: lost connection after AUTH from 197-95-121-138.ebertinformatica.com.br[138.121.95.197] Oct 3 22:06:14 mail.srvfarm.net postfix/smtps/smtpd[658135]: warning: 197-95-121-138.ebertinformatica.com.br[138.121.95.197]: SASL PLAIN authentication failed: Oct 3 22:06:14 mail.srvfarm.net postfix/smtps/smtpd[658135]: lost connection after AUTH from 197-95-121-138.ebertinformatica.com.br[138.121.95.197] Oct 3 22:13:43 mail.srvfarm.net postfix/smtpd[656144]: warning: 197-95-121-138.ebertinformatica.com.br[138.121.95.197]: SASL PLAIN authentication failed:	2020-10-04 13:14:07

Recently Reported IPs

139.59.154.133	118.254.157.36	139.59.154.229	139.59.154.85
118.254.157.38	118.254.157.42	118.254.157.44	118.254.157.51
118.254.157.52	118.254.157.56	139.59.169.38	139.59.17.37
139.59.17.27	139.59.170.200	139.59.17.131	139.59.17.160
139.59.170.130	139.59.17.51	139.59.17.10	136.191.212.147