139.59.241.163

Basic Info

City: unknown

Region: unknown

Country: Singapore

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
139.59.241.75	attackbots	Cowrie Honeypot: Unauthorised SSH/Telnet login attempt with user "root" at 2020-10-07T21:50:45Z	2020-10-08 07:03:27
139.59.241.75	attack	Oct 7 13:33:06 ns382633 sshd\[12585\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.241.75 user=root Oct 7 13:33:08 ns382633 sshd\[12585\]: Failed password for root from 139.59.241.75 port 58325 ssh2 Oct 7 13:36:40 ns382633 sshd\[13090\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.241.75 user=root Oct 7 13:36:42 ns382633 sshd\[13090\]: Failed password for root from 139.59.241.75 port 45505 ssh2 Oct 7 13:37:48 ns382633 sshd\[13183\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.241.75 user=root	2020-10-07 23:27:34
139.59.241.75	attackspam	<6 unauthorized SSH connections	2020-10-07 15:32:39
139.59.241.75	attackbots	Sep 27 03:09:56 vmi369945 sshd\[15031\]: Invalid user shawn from 139.59.241.75 Sep 27 03:09:56 vmi369945 sshd\[15031\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.241.75 Sep 27 03:09:58 vmi369945 sshd\[15031\]: Failed password for invalid user shawn from 139.59.241.75 port 45915 ssh2 Sep 27 03:25:21 vmi369945 sshd\[15301\]: Invalid user pepe from 139.59.241.75 Sep 27 03:25:21 vmi369945 sshd\[15301\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.241.75 ...	2020-10-05 01:30:18
139.59.241.75	attackspambots	139.59.241.75 (SG/Singapore/-), 7 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Oct 1 09:00:25 server2 sshd[18911]: Failed password for root from 139.59.241.75 port 58770 ssh2 Oct 1 09:05:01 server2 sshd[22900]: Failed password for root from 179.242.42.87 port 14181 ssh2 Oct 1 09:00:56 server2 sshd[19313]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.100.146.24 user=root Oct 1 09:08:37 server2 sshd[26402]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.144.219 user=root Oct 1 09:04:50 server2 sshd[22755]: Failed password for root from 179.242.42.87 port 14178 ssh2 Oct 1 09:00:58 server2 sshd[19313]: Failed password for root from 189.100.146.24 port 35644 ssh2 Oct 1 09:04:54 server2 sshd[22857]: Failed password for root from 179.242.42.87 port 14179 ssh2 IP Addresses Blocked:	2020-10-02 01:22:44
139.59.241.75	attack	Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-10-01T04:08:39Z and 2020-10-01T04:16:42Z	2020-10-01 17:28:51
139.59.241.75	attackspambots	Invalid user alejo from 139.59.241.75 port 45550	2020-08-29 08:06:12
139.59.241.75	attackbots	Invalid user cliente from 139.59.241.75 port 44841	2020-08-26 13:18:56
139.59.241.75	attackspam	2020-08-25T19:39:06.944644centos sshd[31141]: Invalid user prueba from 139.59.241.75 port 35332 2020-08-25T19:39:09.370051centos sshd[31141]: Failed password for invalid user prueba from 139.59.241.75 port 35332 ssh2 2020-08-25T19:49:02.703992centos sshd[31684]: Invalid user adrian from 139.59.241.75 port 39958 ...	2020-08-26 02:44:24
139.59.241.75	attack	$f2bV_matches	2020-08-19 16:39:01
139.59.241.75	attackspam	Jul 31 23:15:28 rocket sshd[31396]: Failed password for root from 139.59.241.75 port 34480 ssh2 Jul 31 23:19:55 rocket sshd[31817]: Failed password for root from 139.59.241.75 port 41122 ssh2 ...	2020-08-01 06:28:16
139.59.241.75	attack	2020-07-31T14:26:20.940357shield sshd\[6666\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=theptex.netforce.co.th user=root 2020-07-31T14:26:22.832102shield sshd\[6666\]: Failed password for root from 139.59.241.75 port 34970 ssh2 2020-07-31T14:30:39.484497shield sshd\[7729\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=theptex.netforce.co.th user=root 2020-07-31T14:30:41.268038shield sshd\[7729\]: Failed password for root from 139.59.241.75 port 37534 ssh2 2020-07-31T14:34:57.407426shield sshd\[8738\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=theptex.netforce.co.th user=root	2020-08-01 00:12:21
139.59.241.75	attackbots	Jul 27 04:05:12 web8 sshd\[632\]: Invalid user rogerio from 139.59.241.75 Jul 27 04:05:12 web8 sshd\[632\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.241.75 Jul 27 04:05:14 web8 sshd\[632\]: Failed password for invalid user rogerio from 139.59.241.75 port 48429 ssh2 Jul 27 04:09:29 web8 sshd\[3043\]: Invalid user ftp from 139.59.241.75 Jul 27 04:09:29 web8 sshd\[3043\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.241.75	2020-07-27 12:11:34
139.59.241.75	attackspam	Jul 20 16:04:17 pornomens sshd\[2150\]: Invalid user oracle from 139.59.241.75 port 35287 Jul 20 16:04:17 pornomens sshd\[2150\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.241.75 Jul 20 16:04:20 pornomens sshd\[2150\]: Failed password for invalid user oracle from 139.59.241.75 port 35287 ssh2 ...	2020-07-20 23:11:35
139.59.241.75	attackspam	prod6 ...	2020-07-19 12:38:57

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.59.241.163
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 7969
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;139.59.241.163.			IN	A

;; AUTHORITY SECTION:
.			174	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022020700 1800 900 604800 86400

;; Query time: 42 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 07 20:23:46 CST 2022
;; MSG SIZE  rcvd: 107

Host info

Host 163.241.59.139.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 163.241.59.139.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
49.235.107.14	attackspambots	2019-10-14T22:17:58.108495shield sshd\[17395\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.107.14 user=root 2019-10-14T22:18:00.521881shield sshd\[17395\]: Failed password for root from 49.235.107.14 port 33887 ssh2 2019-10-14T22:22:56.770456shield sshd\[17945\]: Invalid user prueba from 49.235.107.14 port 51632 2019-10-14T22:22:56.775315shield sshd\[17945\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.107.14 2019-10-14T22:22:58.431061shield sshd\[17945\]: Failed password for invalid user prueba from 49.235.107.14 port 51632 ssh2	2019-10-15 06:32:41
180.249.116.70	attackbotsspam	Attempt to attack host OS, exploiting network vulnerabilities, on 14-10-2019 20:55:21.	2019-10-15 06:41:52
185.21.41.142	attackbotsspam	DATE:2019-10-14 21:44:16, IP:185.21.41.142, PORT:ssh SSH brute force auth on honeypot server (honey-neo-dc-bis)	2019-10-15 06:34:21
81.218.131.132	attackbotsspam	Automatic report - Port Scan Attack	2019-10-15 07:10:10
142.93.140.192	attack	WordPress login Brute force / Web App Attack on client site.	2019-10-15 07:08:37
106.12.127.211	attack	2019-10-14T21:32:35.038898abusebot-5.cloudsearch.cf sshd\[27657\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.127.211 user=root	2019-10-15 06:55:11
103.80.117.214	attackbots	Oct 15 00:39:29 ns381471 sshd[4240]: Failed password for sshd from 103.80.117.214 port 46416 ssh2 Oct 15 00:43:46 ns381471 sshd[4331]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.80.117.214 Oct 15 00:43:47 ns381471 sshd[4331]: Failed password for invalid user tir from 103.80.117.214 port 58650 ssh2	2019-10-15 06:50:28
37.187.74.146	attackspam	Oct 14 23:09:24 yesfletchmain sshd\[6063\]: Invalid user cisco from 37.187.74.146 port 39072 Oct 14 23:09:25 yesfletchmain sshd\[6063\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.74.146 Oct 14 23:09:27 yesfletchmain sshd\[6063\]: Failed password for invalid user cisco from 37.187.74.146 port 39072 ssh2 Oct 14 23:17:07 yesfletchmain sshd\[6257\]: Invalid user xbian from 37.187.74.146 port 41252 Oct 14 23:17:08 yesfletchmain sshd\[6257\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.74.146 ...	2019-10-15 07:08:02
12.189.126.59	attackbots	Oct 14 21:51:14 imap-login: Info: Disconnected $auth failed, 1 attempts in 5 secs$: user=\, method=PLAIN, rip=12.189.126.59, lip=192.168.100.101, session=\\ Oct 14 21:51:21 imap-login: Info: Disconnected $no auth attempts in 0 secs$: user=\<\>, rip=12.189.126.59, lip=192.168.100.101, session=\\ Oct 14 21:51:31 imap-login: Info: Disconnected $auth failed, 1 attempts in 10 secs$: user=\, method=PLAIN, rip=12.189.126.59, lip=192.168.100.101, session=\\ Oct 14 21:51:53 imap-login: Info: Disconnected $auth failed, 1 attempts in 4 secs$: user=\, method=PLAIN, rip=12.189.126.59, lip=192.168.100.101, session=\\ Oct 14 21:52:28 imap-login: Info: Disconnected $auth failed, 1 attempts in 6 secs$: user=\, method=PLAIN, rip=12.189.126.59, lip=192.168.100.101, session=\\ Oct 14 21:52:37 imap-login: Info: Disconnected \(no auth atte	2019-10-15 06:53:08
128.199.197.53	attackspam	Oct 14 11:37:47 hpm sshd\[3259\]: Invalid user liuh from 128.199.197.53 Oct 14 11:37:47 hpm sshd\[3259\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.197.53 Oct 14 11:37:49 hpm sshd\[3259\]: Failed password for invalid user liuh from 128.199.197.53 port 49904 ssh2 Oct 14 11:42:32 hpm sshd\[3802\]: Invalid user codwaw from 128.199.197.53 Oct 14 11:42:32 hpm sshd\[3802\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.197.53	2019-10-15 07:03:03
70.35.207.85	attack	WordPress login Brute force / Web App Attack on client site.	2019-10-15 06:34:48
133.167.100.109	attackbots	detected by Fail2Ban	2019-10-15 06:53:44
104.248.175.232	attackbots	Invalid user skfur from 104.248.175.232 port 41104	2019-10-15 06:32:12
178.46.164.91	attack	IMAP brute force ...	2019-10-15 06:45:12
45.114.143.201	attackbotsspam	Oct 14 21:36:06 apollo sshd\[14297\]: Failed password for root from 45.114.143.201 port 46114 ssh2Oct 14 21:51:24 apollo sshd\[14370\]: Failed password for root from 45.114.143.201 port 37366 ssh2Oct 14 21:55:21 apollo sshd\[14385\]: Failed password for root from 45.114.143.201 port 48360 ssh2 ...	2019-10-15 06:41:15

Recently Reported IPs

174.64.199.81	113.170.166.217	37.156.8.19	115.79.220.29
170.106.33.54	73.112.114.154	103.21.82.27	182.119.183.251
123.100.212.200	113.88.229.100	159.192.147.234	43.132.102.160
45.184.111.22	115.205.206.163	201.156.38.231	45.188.181.115
223.31.121.18	58.186.64.122	196.219.187.163	186.166.138.44