139.59.39.199 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Singapore

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
139.59.39.174	attackbots	...	2020-04-25 18:07:28
139.59.39.174	attackspam	Apr 22 16:43:21 santamaria sshd\[12996\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.39.174 user=root Apr 22 16:43:23 santamaria sshd\[12996\]: Failed password for root from 139.59.39.174 port 57808 ssh2 Apr 22 16:48:07 santamaria sshd\[13063\]: Invalid user ka from 139.59.39.174 Apr 22 16:48:07 santamaria sshd\[13063\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.39.174 ...	2020-04-22 23:21:04
139.59.39.174	attackspam	Aug 29 23:30:40 MK-Soft-Root1 sshd\[16081\]: Invalid user norma from 139.59.39.174 port 53376 Aug 29 23:30:40 MK-Soft-Root1 sshd\[16081\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.39.174 Aug 29 23:30:42 MK-Soft-Root1 sshd\[16081\]: Failed password for invalid user norma from 139.59.39.174 port 53376 ssh2 ...	2019-08-30 05:35:15
139.59.39.174	attackspam	Aug 28 22:25:07 ubuntu-2gb-nbg1-dc3-1 sshd[8212]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.39.174 Aug 28 22:25:08 ubuntu-2gb-nbg1-dc3-1 sshd[8212]: Failed password for invalid user teste from 139.59.39.174 port 43662 ssh2 ...	2019-08-29 05:26:04
139.59.39.174	attackbots	Invalid user bdoherty from 139.59.39.174 port 55306	2019-08-23 15:22:05
139.59.39.174	attackbots	Aug 19 22:16:17 ns315508 sshd[20221]: Invalid user tgz from 139.59.39.174 port 54750 Aug 19 22:16:17 ns315508 sshd[20221]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.39.174 Aug 19 22:16:17 ns315508 sshd[20221]: Invalid user tgz from 139.59.39.174 port 54750 Aug 19 22:16:19 ns315508 sshd[20221]: Failed password for invalid user tgz from 139.59.39.174 port 54750 ssh2 Aug 19 22:21:14 ns315508 sshd[20260]: Invalid user garcia from 139.59.39.174 port 44356 ...	2019-08-20 07:29:31
139.59.39.49	attackbotsspam	Jan 3 16:17:00 motanud sshd\[11110\]: Invalid user sandok from 139.59.39.49 port 41270 Jan 3 16:17:00 motanud sshd\[11110\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.39.49 Jan 3 16:17:02 motanud sshd\[11110\]: Failed password for invalid user sandok from 139.59.39.49 port 41270 ssh2	2019-08-11 01:53:51
139.59.39.119	attack	xmlrpc attack	2019-08-04 07:41:39
139.59.39.174	attack	Invalid user jira from 139.59.39.174 port 36578	2019-07-28 06:41:52
139.59.39.174	attackbotsspam	Invalid user jira from 139.59.39.174 port 36578	2019-07-24 15:57:30
139.59.39.174	attackbotsspam	Jul 17 08:14:50 ArkNodeAT sshd\[3368\]: Invalid user data from 139.59.39.174 Jul 17 08:14:50 ArkNodeAT sshd\[3368\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.39.174 Jul 17 08:14:52 ArkNodeAT sshd\[3368\]: Failed password for invalid user data from 139.59.39.174 port 44000 ssh2	2019-07-17 14:23:16
139.59.39.174	attackbots	2019-07-16T14:09:37.839774abusebot-4.cloudsearch.cf sshd\[29696\]: Invalid user guest from 139.59.39.174 port 40138	2019-07-16 22:16:19
139.59.39.174	attackspam	detected by Fail2Ban	2019-07-11 15:43:10
139.59.39.174	attackbotsspam	Invalid user support from 139.59.39.174 port 33572	2019-06-30 13:19:30
139.59.39.174	attack	Jun 27 13:08:27 MK-Soft-VM4 sshd\[12037\]: Invalid user user2 from 139.59.39.174 port 50314 Jun 27 13:08:27 MK-Soft-VM4 sshd\[12037\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.39.174 Jun 27 13:08:29 MK-Soft-VM4 sshd\[12037\]: Failed password for invalid user user2 from 139.59.39.174 port 50314 ssh2 ...	2019-06-27 23:39:42

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.59.39.199
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 41282
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;139.59.39.199.			IN	A

;; AUTHORITY SECTION:
.			514	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021702 1800 900 604800 86400

;; Query time: 64 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 12:05:41 CST 2022
;; MSG SIZE  rcvd: 106

Host info

Host 199.39.59.139.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 199.39.59.139.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
178.154.200.236	attackspambots	[Wed May 20 06:43:49.344906 2020] [:error] [pid 11834:tid 140678382311168] [client 178.154.200.236:51780] [client 178.154.200.236] ModSecurity: Access denied with code 403 (phase 2). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "696"] [id "920350"] [msg "Host header is a numeric IP address"] [data "103.27.207.197"] [severity "WARNING"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/IP_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "103.27.207.197"] [uri "/"] [unique_id "XsRvNUsBILHTgfg3KLatpQAAAZU"] ...	2020-05-20 07:58:53
180.76.240.225	attackspam	May 20 01:39:44 srv01 sshd[7316]: Invalid user loi from 180.76.240.225 port 56356 May 20 01:39:44 srv01 sshd[7316]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.240.225 May 20 01:39:44 srv01 sshd[7316]: Invalid user loi from 180.76.240.225 port 56356 May 20 01:39:45 srv01 sshd[7316]: Failed password for invalid user loi from 180.76.240.225 port 56356 ssh2 May 20 01:43:53 srv01 sshd[7438]: Invalid user sve from 180.76.240.225 port 50610 ...	2020-05-20 07:56:43
203.205.37.224	attack	2020-05-20 02:05:43,397 fail2ban.actions: WARNING [ssh] Ban 203.205.37.224	2020-05-20 08:07:25
183.215.119.158	attackspam	TCP (SYN) 183.215.119.158:53181 -> port 1433, len 52	2020-05-20 07:35:16
51.254.222.108	attack	Brute-Force,SSH	2020-05-20 07:52:43
183.62.15.114	attackspam	$f2bV_matches	2020-05-20 07:54:31
222.186.30.218	attack	2020-05-19T23:50:39.174397randservbullet-proofcloud-66.localdomain sshd[11343]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.218 user=root 2020-05-19T23:50:40.929699randservbullet-proofcloud-66.localdomain sshd[11343]: Failed password for root from 222.186.30.218 port 30677 ssh2 2020-05-19T23:50:43.518350randservbullet-proofcloud-66.localdomain sshd[11343]: Failed password for root from 222.186.30.218 port 30677 ssh2 2020-05-19T23:50:39.174397randservbullet-proofcloud-66.localdomain sshd[11343]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.218 user=root 2020-05-19T23:50:40.929699randservbullet-proofcloud-66.localdomain sshd[11343]: Failed password for root from 222.186.30.218 port 30677 ssh2 2020-05-19T23:50:43.518350randservbullet-proofcloud-66.localdomain sshd[11343]: Failed password for root from 222.186.30.218 port 30677 ssh2 ...	2020-05-20 07:53:58
223.222.178.51	attackspam	Port scan denied	2020-05-20 07:42:09
14.39.255.66	attack	TCP (SYN) 14.39.255.66:22593 -> port 81, len 40	2020-05-20 07:40:00
120.53.1.97	attack	May 20 01:54:35 eventyay sshd[14134]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.53.1.97 May 20 01:54:37 eventyay sshd[14134]: Failed password for invalid user mpc from 120.53.1.97 port 47432 ssh2 May 20 02:00:02 eventyay sshd[14438]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.53.1.97 ...	2020-05-20 08:04:47
148.153.12.200	attack	TCP (SYN) 148.153.12.200:50301 -> port 1433, len 40	2020-05-20 07:31:06
59.126.1.215	attack	TCP (SYN) 59.126.1.215:23505 -> port 80, len 40	2020-05-20 07:33:34
192.236.163.127	attack	2020-05-20T00:44:04.225108hq.tia3.com postfix/smtpd[478519]: NOQUEUE: reject: RCPT from box.apexsruveyors.com[192.236.163.127]: 550 5.1.1 : Recipient address rejected: User unknown in virtual mailbox table; from= to= proto=ESMTP helo= ...	2020-05-20 07:49:51
181.53.251.181	attack	May 20 01:41:47 server sshd[21597]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.53.251.181 May 20 01:41:49 server sshd[21597]: Failed password for invalid user kob from 181.53.251.181 port 55526 ssh2 May 20 01:44:01 server sshd[21744]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.53.251.181 ...	2020-05-20 07:51:30
128.106.132.157	attack	Automatic report - Port Scan Attack	2020-05-20 07:49:34

Recently Reported IPs

139.59.39.116	139.59.39.194	139.59.4.190	139.59.39.150
139.59.4.198	139.59.40.81	139.59.41.233	139.59.40.243
139.59.41.230	139.59.42.210	139.59.42.119	139.59.42.56
139.59.43.125	139.59.43.122	139.59.42.86	139.59.43.165
139.59.43.156	139.59.43.195	139.59.43.25	139.59.43.222