139.59.242.221

Basic Info

City: unknown

Region: unknown

Country: None

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
139.59.242.22	attackbots	SSH login attempts.	2020-10-09 16:24:39
139.59.242.22	attackspambots	Lines containing failures of 139.59.242.22 Oct 7 10:23:42 MAKserver05 sshd[7358]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.242.22 user=r.r Oct 7 10:23:43 MAKserver05 sshd[7358]: Failed password for r.r from 139.59.242.22 port 57086 ssh2 Oct 7 10:23:43 MAKserver05 sshd[7358]: Received disconnect from 139.59.242.22 port 57086:11: Bye Bye [preauth] Oct 7 10:23:43 MAKserver05 sshd[7358]: Disconnected from authenticating user r.r 139.59.242.22 port 57086 [preauth] Oct 7 10:45:59 MAKserver05 sshd[8321]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.242.22 user=r.r Oct 7 10:46:01 MAKserver05 sshd[8321]: Failed password for r.r from 139.59.242.22 port 37070 ssh2 Oct 7 10:46:03 MAKserver05 sshd[8321]: Received disconnect from 139.59.242.22 port 37070:11: Bye Bye [preauth] Oct 7 10:46:03 MAKserver05 sshd[8321]: Disconnected from authenticating user r.r 139.59.242.22 por........ ------------------------------	2020-10-09 03:24:31

Type

Details

Datetime

139.59.242.22

attackbots

SSH login attempts.

2020-10-09 16:24:39

139.59.242.22

attackspambots

Lines containing failures of 139.59.242.22
Oct  7 10:23:42 MAKserver05 sshd[7358]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.242.22  user=r.r
Oct  7 10:23:43 MAKserver05 sshd[7358]: Failed password for r.r from 139.59.242.22 port 57086 ssh2
Oct  7 10:23:43 MAKserver05 sshd[7358]: Received disconnect from 139.59.242.22 port 57086:11: Bye Bye [preauth]
Oct  7 10:23:43 MAKserver05 sshd[7358]: Disconnected from authenticating user r.r 139.59.242.22 port 57086 [preauth]
Oct  7 10:45:59 MAKserver05 sshd[8321]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.242.22  user=r.r
Oct  7 10:46:01 MAKserver05 sshd[8321]: Failed password for r.r from 139.59.242.22 port 37070 ssh2
Oct  7 10:46:03 MAKserver05 sshd[8321]: Received disconnect from 139.59.242.22 port 37070:11: Bye Bye [preauth]
Oct  7 10:46:03 MAKserver05 sshd[8321]: Disconnected from authenticating user r.r 139.59.242.22 por........
------------------------------

2020-10-09 03:24:31

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.59.242.221
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 1758
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;139.59.242.221.			IN	A

;; AUTHORITY SECTION:
.			593	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022701 1800 900 604800 86400

;; Query time: 27 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 28 04:07:49 CST 2022
;; MSG SIZE  rcvd: 107

Host info

Host 221.242.59.139.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 221.242.59.139.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
104.140.188.22	attackbotsspam	[N3.H3.VM3] Port Scanner Detected Blocked by UFW	2020-10-05 12:24:11
190.65.223.142	attackspambots	445/tcp 445/tcp 445/tcp... [2020-08-05/10-04]7pkt,1pt.(tcp)	2020-10-05 12:24:50
103.83.232.17	attackbots	Lines containing failures of 103.83.232.17 Oct 4 22:26:19 shared11 sshd[9581]: Did not receive identification string from 103.83.232.17 port 52733 Oct 4 22:26:25 shared11 sshd[9585]: Invalid user system from 103.83.232.17 port 53115 Oct 4 22:26:26 shared11 sshd[9585]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.83.232.17 Oct 4 22:26:28 shared11 sshd[9585]: Failed password for invalid user system from 103.83.232.17 port 53115 ssh2 Oct 4 22:26:28 shared11 sshd[9585]: Connection closed by invalid user system 103.83.232.17 port 53115 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=103.83.232.17	2020-10-05 12:10:32
68.66.193.24	attackspambots	Oct 5 00:03:09 journals sshd\[96695\]: Invalid user rpm from 68.66.193.24 Oct 5 00:03:09 journals sshd\[96695\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.66.193.24 Oct 5 00:03:11 journals sshd\[96695\]: Failed password for invalid user rpm from 68.66.193.24 port 42954 ssh2 Oct 5 00:03:40 journals sshd\[96712\]: Invalid user testuser from 68.66.193.24 Oct 5 00:03:40 journals sshd\[96712\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.66.193.24 ...	2020-10-05 12:22:36
86.155.150.189	attackbotsspam	Oct 4 22:50:15 prod4 sshd\[18328\]: Invalid user pi from 86.155.150.189 Oct 4 22:50:15 prod4 sshd\[18330\]: Invalid user pi from 86.155.150.189 Oct 4 22:50:17 prod4 sshd\[18328\]: Failed password for invalid user pi from 86.155.150.189 port 55496 ssh2 ...	2020-10-05 12:21:44
142.93.47.124	attackbots	4922/tcp 2859/tcp 22992/tcp... [2020-08-07/10-04]188pkt,106pt.(tcp)	2020-10-05 12:02:45
103.119.58.28	attack	20/10/4@16:41:46: FAIL: Alarm-Telnet address from=103.119.58.28 ...	2020-10-05 12:14:50
184.75.235.204	attackbots	Oct 4 22:26:03 CT721 sshd[32094]: Invalid user admin from 184.75.235.204 port 51982 Oct 4 22:26:04 CT721 sshd[32094]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=184.75.235.204 Oct 4 22:26:06 CT721 sshd[32094]: Failed password for invalid user admin from 184.75.235.204 port 51982 ssh2 Oct 4 22:26:06 CT721 sshd[32094]: Connection closed by 184.75.235.204 port 51982 [preauth] Oct 4 22:26:08 CT721 sshd[32096]: Invalid user admin from 184.75.235.204 port 51987 Oct 4 22:26:08 CT721 sshd[32096]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=184.75.235.204 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=184.75.235.204	2020-10-05 12:06:38
112.85.42.13	attack	Oct 5 06:12:20 ucs sshd\[18696\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.13 user=root Oct 5 06:12:22 ucs sshd\[18693\]: error: PAM: User not known to the underlying authentication module for root from 112.85.42.13 Oct 5 06:12:23 ucs sshd\[18699\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.13 user=root ...	2020-10-05 12:15:27
118.25.181.3	attackspam	445/tcp 1433/tcp [2020-10-02/04]2pkt	2020-10-05 12:03:12
36.69.8.73	attack	Honeypot hit.	2020-10-05 12:04:42
103.45.150.7	attack	Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-10-04T23:16:53Z and 2020-10-04T23:22:37Z	2020-10-05 12:18:08
103.28.32.18	attackbotsspam	Unauthorized SSH login attempts	2020-10-05 12:28:26
176.212.108.205	attackbotsspam	Telnet/23 MH Probe, Scan, BF, Hack -	2020-10-05 08:15:35
71.95.252.231	attackspambots	TCP (SYN) 71.95.252.231:58701 -> port 23, len 44	2020-10-05 12:24:37

Recently Reported IPs

139.59.242.110	139.59.245.143	139.59.247.170	139.59.247.239
139.59.247.249	139.59.244.36	139.59.248.124	139.59.248.145
139.59.248.184	139.59.252.36	139.59.248.32	139.59.25.160
139.59.27.246	139.59.25.223	139.59.26.170	139.59.27.57
139.59.248.53	139.59.28.137	139.59.28.51	139.59.29.147