139.59.21.159 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Singapore

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
139.59.215.171	attack	2020-10-13T02:06:50.771160vps-web1.h3z.jp sshd[15016]: Invalid user ftpuser from 139.59.215.171 port 51442 2020-10-13T02:08:04.431562vps-web1.h3z.jp sshd[15026]: Invalid user ftpuser from 139.59.215.171 port 35640 2020-10-13T02:08:41.876310vps-web1.h3z.jp sshd[15032]: Invalid user postgres from 139.59.215.171 port 55970 ...	2020-10-13 01:11:47
139.59.215.171	attack	2020-10-12T11:11:07.239948mail.standpoint.com.ua sshd[32054]: Invalid user steam from 139.59.215.171 port 60818 2020-10-12T11:11:07.242903mail.standpoint.com.ua sshd[32054]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.215.171 2020-10-12T11:11:07.239948mail.standpoint.com.ua sshd[32054]: Invalid user steam from 139.59.215.171 port 60818 2020-10-12T11:11:08.523134mail.standpoint.com.ua sshd[32054]: Failed password for invalid user steam from 139.59.215.171 port 60818 ssh2 2020-10-12T11:11:48.644489mail.standpoint.com.ua sshd[32129]: Invalid user centos from 139.59.215.171 port 56396 ...	2020-10-12 16:34:23
139.59.215.241	attackbots	139.59.215.241 - - [10/Oct/2020:22:22:10 +0200] "GET /wp-login.php HTTP/1.1" 200 9061 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 139.59.215.241 - - [10/Oct/2020:22:22:11 +0200] "POST /wp-login.php HTTP/1.1" 200 9312 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 139.59.215.241 - - [10/Oct/2020:22:22:13 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-10-11 04:38:14
139.59.212.248	attackbotsspam	Oct 3 09:02:34 hidden postfix/postscreen[61878]: DNSBL rank 3 for [139.59.212.248]:33318	2020-10-11 01:24:45
139.59.215.241	attackbotsspam	139.59.215.241 - - [10/Oct/2020:11:36:45 +0100] "POST /wp-login.php HTTP/1.1" 200 2556 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 139.59.215.241 - - [10/Oct/2020:11:36:47 +0100] "POST /wp-login.php HTTP/1.1" 200 2539 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 139.59.215.241 - - [10/Oct/2020:11:36:47 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-10-10 20:37:04
139.59.212.248	attackbotsspam	Oct 3 09:02:34 hidden postfix/postscreen[61878]: DNSBL rank 3 for [139.59.212.248]:33318	2020-10-10 17:17:27
139.59.212.248	attack	Oct 4 22:32:46 web01.agentur-b-2.de postfix/smtpd[1795543]: warning: unknown[139.59.212.248]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 4 22:32:46 web01.agentur-b-2.de postfix/smtpd[1795543]: lost connection after AUTH from unknown[139.59.212.248] Oct 4 22:36:31 web01.agentur-b-2.de postfix/smtpd[1795503]: warning: unknown[139.59.212.248]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 4 22:36:31 web01.agentur-b-2.de postfix/smtpd[1795503]: lost connection after AUTH from unknown[139.59.212.248] Oct 4 22:37:20 web01.agentur-b-2.de postfix/smtpd[1795498]: warning: unknown[139.59.212.248]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 4 22:37:20 web01.agentur-b-2.de postfix/smtpd[1795498]: lost connection after AUTH from unknown[139.59.212.248]	2020-10-05 05:31:26
139.59.211.245	attackspam	SSH brutforce	2020-10-05 04:59:23
139.59.212.248	attackspambots	Oct 4 06:04:42 web01.agentur-b-2.de postfix/smtpd[1400041]: warning: unknown[139.59.212.248]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 4 06:04:42 web01.agentur-b-2.de postfix/smtpd[1400041]: lost connection after AUTH from unknown[139.59.212.248] Oct 4 06:08:26 web01.agentur-b-2.de postfix/smtpd[1400041]: warning: unknown[139.59.212.248]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 4 06:08:26 web01.agentur-b-2.de postfix/smtpd[1400041]: lost connection after AUTH from unknown[139.59.212.248] Oct 4 06:09:15 web01.agentur-b-2.de postfix/smtpd[1400041]: warning: unknown[139.59.212.248]: SASL LOGIN authentication failed: UGFzc3dvcmQ6	2020-10-04 21:26:15
139.59.211.245	attackbots	Oct 4 14:52:35 host sshd[18768]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.211.245 user=root Oct 4 14:52:37 host sshd[18768]: Failed password for root from 139.59.211.245 port 38516 ssh2 ...	2020-10-04 20:53:33
139.59.211.245	attackspambots	detected by Fail2Ban	2020-10-04 12:36:51
139.59.211.245	attackbots	Sep 30 20:24:04 buvik sshd[11406]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.211.245 Sep 30 20:24:06 buvik sshd[11406]: Failed password for invalid user allan from 139.59.211.245 port 44884 ssh2 Sep 30 20:30:58 buvik sshd[12480]: Invalid user ftpuser from 139.59.211.245 ...	2020-10-01 03:01:08
139.59.211.245	attack	Invalid user administrador from 139.59.211.245 port 40100	2020-09-30 19:13:32
139.59.215.241	attackbotsspam	139.59.215.241 - - [19/Sep/2020:16:13:02 +0100] "POST /wp-login.php HTTP/1.1" 200 2371 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 139.59.215.241 - - [19/Sep/2020:16:13:03 +0100] "POST /wp-login.php HTTP/1.1" 200 2342 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 139.59.215.241 - - [19/Sep/2020:16:13:03 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-09-20 01:56:43
139.59.215.241	attackbotsspam	139.59.215.241 - - [19/Sep/2020:06:55:27 +0200] "GET /wp-login.php HTTP/1.1" 200 2566 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 139.59.215.241 - - [19/Sep/2020:06:55:27 +0200] "POST /wp-login.php HTTP/1.1" 200 2698 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 139.59.215.241 - - [19/Sep/2020:06:55:28 +0200] "GET /wp-login.php HTTP/1.1" 200 2566 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 139.59.215.241 - - [19/Sep/2020:06:55:28 +0200] "POST /wp-login.php HTTP/1.1" 200 2697 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 139.59.215.241 - - [19/Sep/2020:06:55:28 +0200] "GET /wp-login.php HTTP/1.1" 200 2566 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 139.59.215.241 - - [19/Sep/2020:06:55:28 +0200] "POST /wp-login.php HTTP/1.1" 200 2696 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/201001 ...	2020-09-19 17:48:19

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.59.21.159
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 59888
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;139.59.21.159.			IN	A

;; AUTHORITY SECTION:
.			545	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021702 1800 900 604800 86400

;; Query time: 18 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 12:05:10 CST 2022
;; MSG SIZE  rcvd: 106

Host info

159.21.59.139.in-addr.arpa domain name pointer 698774.cloudwaysapps.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
159.21.59.139.in-addr.arpa	name = 698774.cloudwaysapps.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
42.200.206.225	attackbots	"Unauthorized connection attempt on SSHD detected"	2020-10-08 13:58:02
74.207.253.197	attack	Port Scan: TCP/7657	2020-10-08 14:13:48
49.232.114.29	attackbotsspam	SSH login attempts.	2020-10-08 13:38:52
162.243.128.176	attackspam	[N3.H3.VM3] Port Scanner Detected Blocked by UFW	2020-10-08 13:33:00
190.215.57.118	attackbotsspam	Unauthorized connection attempt from IP address 190.215.57.118 on Port 445(SMB)	2020-10-08 14:07:38
50.81.211.43	attack	SS5,Magento Bruteforce Login Attack POST /index.php/admin/	2020-10-08 13:48:00
118.160.91.230	attackspambots	Unauthorized connection attempt from IP address 118.160.91.230 on Port 445(SMB)	2020-10-08 13:52:21
74.120.14.18	attackbots	" "	2020-10-08 13:35:56
124.193.101.194	attack	SSH login attempts.	2020-10-08 13:55:30
112.85.42.196	attack	Oct 8 08:00:21 amit sshd\[5136\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.196 user=root Oct 8 08:00:23 amit sshd\[5136\]: Failed password for root from 112.85.42.196 port 63352 ssh2 Oct 8 08:00:26 amit sshd\[5136\]: Failed password for root from 112.85.42.196 port 63352 ssh2 ...	2020-10-08 14:09:24
115.74.10.28	attack	TCP (SYN) 115.74.10.28:27615 -> port 23, len 44	2020-10-08 14:05:27
117.80.224.192	attackspam	Oct 8 06:39:41 vpn01 sshd[5682]: Failed password for root from 117.80.224.192 port 57782 ssh2 ...	2020-10-08 13:42:12
51.105.25.88	attackbots	Oct 7 21:51:56 ws22vmsma01 sshd[244472]: Failed password for root from 51.105.25.88 port 50950 ssh2 ...	2020-10-08 13:28:38
122.118.56.88	attackbots	Brute forcing email accounts	2020-10-08 13:43:43
5.39.88.60	attackspam	2020-10-08T10:41:32.684043billing sshd[14409]: Failed password for root from 5.39.88.60 port 49656 ssh2 2020-10-08T10:45:02.238205billing sshd[22310]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns3033121.ip-5-39-88.eu user=root 2020-10-08T10:45:04.289417billing sshd[22310]: Failed password for root from 5.39.88.60 port 56732 ssh2 ...	2020-10-08 13:48:19

Recently Reported IPs

139.59.21.229	139.59.216.106	139.59.21.56	139.59.213.252
139.59.210.163	139.59.214.55	139.59.219.148	139.59.218.76
139.59.205.180	139.59.222.161	8.35.10.241	139.59.220.92
139.59.22.238	139.59.225.231	139.59.229.26	139.59.23.137
139.59.225.55	139.59.229.206	139.59.225.91	139.59.23.90