139.59.20.171 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: India

Internet Service Provider: Digital Ocean Inc.

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbotsspam	RDP Bruteforce	2019-10-27 15:20:18

Comments on same subnet:

IP	Type	Details	Datetime
139.59.20.176	attackbotsspam	Automatic report - Banned IP Access	2020-10-06 05:49:46
139.59.20.176	attackspam	Automatic report - Banned IP Access	2020-10-05 21:54:43
139.59.20.176	attackbots	Automatic report - Banned IP Access	2020-10-05 13:48:31
139.59.208.39	attackbotsspam	Port scan denied	2020-09-13 20:07:50
139.59.208.39	attack	TCP (SYN) 139.59.208.39:49233 -> port 80, len 40	2020-09-13 12:00:38
139.59.208.39	attackbotsspam	TCP (SYN) 139.59.208.39:49233 -> port 80, len 40	2020-09-13 03:49:55
139.59.20.249	attackbots	Jun 8 12:14:21 scivo sshd[10972]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.20.249 user=r.r Jun 8 12:14:23 scivo sshd[10972]: Failed password for r.r from 139.59.20.249 port 36510 ssh2 Jun 8 12:14:23 scivo sshd[10972]: Connection closed by 139.59.20.249 [preauth] Jun 8 12:17:11 scivo sshd[11153]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.20.249 user=r.r Jun 8 12:17:13 scivo sshd[11153]: Failed password for r.r from 139.59.20.249 port 47062 ssh2 Jun 8 12:17:13 scivo sshd[11153]: Connection closed by 139.59.20.249 [preauth] Jun 8 12:19:57 scivo sshd[11265]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.20.249 user=r.r Jun 8 12:19:59 scivo sshd[11265]: Failed password for r.r from 139.59.20.249 port 57210 ssh2 Jun 8 12:19:59 scivo sshd[11265]: Connection closed by 139.59.20.249 [preauth] Jun 8 12:22:38 scivo........ -------------------------------	2020-06-08 17:23:26
139.59.20.197	attackbotsspam	Jun 3 15:02:21 journals sshd\[63600\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.20.197 user=root Jun 3 15:02:23 journals sshd\[63600\]: Failed password for root from 139.59.20.197 port 58006 ssh2 Jun 3 15:05:01 journals sshd\[63951\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.20.197 user=root Jun 3 15:05:04 journals sshd\[63951\]: Failed password for root from 139.59.20.197 port 40132 ssh2 Jun 3 15:10:22 journals sshd\[2215\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.20.197 user=root ...	2020-06-04 00:41:16
139.59.20.246	attackspambots	Automatic report - Banned IP Access	2020-05-23 03:49:26
139.59.20.246	attackbotsspam	AbusiveCrawling	2020-05-20 04:13:29
139.59.209.97	attack	Attempt to hack Wordpress Login, XMLRPC or other login	2020-04-05 07:19:09
139.59.20.94	attackspambots	Jan 27 03:53:49 eddieflores sshd\[18195\]: Invalid user 6 from 139.59.20.94 Jan 27 03:53:49 eddieflores sshd\[18195\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.20.94 Jan 27 03:53:51 eddieflores sshd\[18195\]: Failed password for invalid user 6 from 139.59.20.94 port 34026 ssh2 Jan 27 03:57:34 eddieflores sshd\[18653\]: Invalid user afe from 139.59.20.94 Jan 27 03:57:34 eddieflores sshd\[18653\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.20.94	2020-01-27 22:06:15
139.59.20.248	attackspam	Dec 29 13:12:44 MK-Soft-Root1 sshd[27214]: Failed password for root from 139.59.20.248 port 46414 ssh2 ...	2019-12-29 21:56:08
139.59.20.248	attackspam	Dec 28 08:50:00 minden010 sshd[20500]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.20.248 Dec 28 08:50:02 minden010 sshd[20500]: Failed password for invalid user Milja from 139.59.20.248 port 60054 ssh2 Dec 28 08:53:34 minden010 sshd[21702]: Failed password for root from 139.59.20.248 port 34900 ssh2 ...	2019-12-28 21:30:49
139.59.20.248	attack	Dec 13 05:49:47 icinga sshd[26818]: Failed password for mysql from 139.59.20.248 port 50904 ssh2 Dec 13 05:56:09 icinga sshd[27470]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.20.248 ...	2019-12-13 13:14:31

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.59.20.171
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 50591
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.59.20.171.			IN	A

;; AUTHORITY SECTION:
.			573	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019102700 1800 900 604800 86400

;; Query time: 45 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Oct 27 15:19:59 CST 2019
;; MSG SIZE  rcvd: 117

Host info

Host 171.20.59.139.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 171.20.59.139.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
209.97.179.52	attackspam	WordPress login Brute force / Web App Attack on client site.	2020-09-09 01:29:38
167.99.10.162	attackspam	"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:	2020-09-09 01:24:01
183.92.214.38	attack	183.92.214.38 (CN/China/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Sep 8 02:59:29 server2 sshd[23806]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.222.178.22 user=root Sep 8 02:59:31 server2 sshd[23806]: Failed password for root from 222.222.178.22 port 37444 ssh2 Sep 8 02:59:33 server2 sshd[23814]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.92.214.38 user=root Sep 8 03:01:46 server2 sshd[25379]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.165.40.168 user=root Sep 8 02:59:34 server2 sshd[23814]: Failed password for root from 183.92.214.38 port 50624 ssh2 Sep 8 03:00:31 server2 sshd[24791]: Failed password for root from 170.80.68.242 port 42996 ssh2 IP Addresses Blocked: 222.222.178.22 (CN/China/-)	2020-09-09 01:36:25
59.126.224.103	attack	Honeypot attack, port: 81, PTR: 59-126-224-103.HINET-IP.hinet.net.	2020-09-09 01:14:52
162.142.125.25	attackbots	TCP (SYN) 162.142.125.25:22945 -> port 23, len 44	2020-09-09 01:02:20
106.12.86.205	attackspambots	fail2ban -- 106.12.86.205 ...	2020-09-09 01:26:05
120.131.3.91	attack	" "	2020-09-09 01:07:01
185.220.102.248	attack	Sep 8 19:14:12 melroy-server sshd[29757]: Failed password for root from 185.220.102.248 port 32868 ssh2 Sep 8 19:14:15 melroy-server sshd[29757]: Failed password for root from 185.220.102.248 port 32868 ssh2 ...	2020-09-09 01:18:11
177.159.116.210	attackspambots	Sep 8 08:55:25 mail sshd\[1433\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.159.116.210 user=root ...	2020-09-09 01:35:36
189.190.69.37	attack	1599497387 - 09/07/2020 18:49:47 Host: 189.190.69.37/189.190.69.37 Port: 445 TCP Blocked	2020-09-09 01:31:40
80.4.110.71	attackspambots	Sep 7 18:19:15 mx sshd[11941]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.4.110.71 Sep 7 18:19:17 mx sshd[11941]: Failed password for invalid user pi from 80.4.110.71 port 52002 ssh2	2020-09-09 01:05:09
167.172.57.1	attackbots	167.172.57.1 - - \[08/Sep/2020:11:00:52 +0200\] "POST /wp-login.php HTTP/1.0" 200 8308 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 167.172.57.1 - - \[08/Sep/2020:11:01:00 +0200\] "POST /wp-login.php HTTP/1.0" 200 8300 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 167.172.57.1 - - \[08/Sep/2020:11:01:04 +0200\] "POST /wp-login.php HTTP/1.0" 200 8286 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"	2020-09-09 01:12:07
79.124.62.55	attackspambots	TCP (SYN) 79.124.62.55:55339 -> port 3389, len 44	2020-09-09 01:16:33
45.125.65.44	attackspam	35 VoIP Fraud Attacks in last 24 hours	2020-09-09 01:43:10
45.154.35.251	attack	Sep 8 17:43:16 ns308116 sshd[21463]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.154.35.251 user=root Sep 8 17:43:17 ns308116 sshd[21463]: Failed password for root from 45.154.35.251 port 55332 ssh2 Sep 8 17:43:20 ns308116 sshd[21463]: Failed password for root from 45.154.35.251 port 55332 ssh2 Sep 8 17:43:23 ns308116 sshd[21463]: Failed password for root from 45.154.35.251 port 55332 ssh2 Sep 8 17:43:25 ns308116 sshd[21463]: Failed password for root from 45.154.35.251 port 55332 ssh2 ...	2020-09-09 01:20:47

Recently Reported IPs

191.35.44.81	45.146.231.240	83.171.254.147	222.223.51.148
113.22.244.115	213.147.98.196	110.81.203.18	91.167.56.51
103.138.238.22	31.81.6.92	189.84.183.64	13.250.108.247
2002:b654:42a5::b654:42a5	210.74.11.97	77.49.206.180	36.155.114.198
83.20.113.252	134.236.161.243	77.40.62.238	176.239.252.190