139.59.42.56 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Singapore

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
139.59.42.174	attackbotsspam	non-SMTP command used ...	2020-10-09 02:13:07
139.59.42.174	attackspambots	non-SMTP command used ...	2020-10-08 18:11:01
139.59.42.69	attackspambots	Jan 1 02:49:15 ws12vmsma01 sshd[34437]: Invalid user elake from 139.59.42.69 Jan 1 02:49:17 ws12vmsma01 sshd[34437]: Failed password for invalid user elake from 139.59.42.69 port 47266 ssh2 Jan 1 02:56:10 ws12vmsma01 sshd[35398]: Invalid user guest from 139.59.42.69 ...	2020-01-01 14:13:46
139.59.42.69	attack	Unauthorized connection attempt detected from IP address 139.59.42.69 to port 22	2020-01-01 05:54:49
139.59.42.69	attackspambots	Dec 28 11:29:15 dev0-dcde-rnet sshd[13126]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.42.69 Dec 28 11:29:17 dev0-dcde-rnet sshd[13126]: Failed password for invalid user trenduser from 139.59.42.69 port 51024 ssh2 Dec 28 11:32:39 dev0-dcde-rnet sshd[13191]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.42.69	2019-12-28 19:44:53
139.59.42.250	attack	Automatic report - XMLRPC Attack	2019-11-19 05:19:06
139.59.42.114	attackbots	[munged]::443 139.59.42.114 - - [30/Oct/2019:21:28:45 +0100] "POST /[munged]: HTTP/1.1" 200 9081 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 139.59.42.114 - - [30/Oct/2019:21:28:52 +0100] "POST /[munged]: HTTP/1.1" 200 9081 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 139.59.42.114 - - [30/Oct/2019:21:28:54 +0100] "POST /[munged]: HTTP/1.1" 200 9081 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 139.59.42.114 - - [30/Oct/2019:21:28:59 +0100] "POST /[munged]: HTTP/1.1" 200 6872 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 139.59.42.114 - - [30/Oct/2019:21:29:06 +0100] "POST /[munged]: HTTP/1.1" 200 9081 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 139.59.42.114 - - [30/Oct/2019:21:29:13 +0100] "POST /[munged]: HTTP/1.1" 200 9081 "-" "Mozilla/5.0 (X11; Ubun	2019-10-31 04:52:00
139.59.42.114	attack	Automatic report - XMLRPC Attack	2019-10-29 13:29:17
139.59.42.250	attackspambots	Automatic report - Banned IP Access	2019-10-28 16:58:08
139.59.42.250	attackbotsspam	Automatic report - XMLRPC Attack	2019-10-07 15:33:05
139.59.42.250	attackspambots	fail2ban honeypot	2019-09-26 16:35:12
139.59.42.211	attackspam	160/tcp 159/tcp 158/tcp... [2019-06-15/08-12]243pkt,65pt.(tcp)	2019-08-13 00:55:59
139.59.42.211	attack	31.07.2019 22:39:18 Connection to port 146 blocked by firewall	2019-08-01 09:17:33
139.59.42.211	attack	Unauthorized connection attempt from IP address 139.59.42.211 on Port 143(IMAP)	2019-07-30 01:45:22
139.59.42.211	attackbotsspam	MultiHost/MultiPort Probe, Scan, Hack -	2019-07-29 07:36:50

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.59.42.56
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 32674
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;139.59.42.56.			IN	A

;; AUTHORITY SECTION:
.			511	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021702 1800 900 604800 86400

;; Query time: 58 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 12:05:44 CST 2022
;; MSG SIZE  rcvd: 105

Host info

56.42.59.139.in-addr.arpa domain name pointer fortunnewindows.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
56.42.59.139.in-addr.arpa	name = fortunnewindows.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
35.233.219.188	attackspambots	Fail2Ban	2020-07-31 17:10:52
77.45.84.102	attackbotsspam	Distributed brute force attack	2020-07-31 16:47:55
218.92.0.165	attackspambots	Jul 31 05:07:17 lanister sshd[11740]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.165 user=root Jul 31 05:07:19 lanister sshd[11740]: Failed password for root from 218.92.0.165 port 18349 ssh2	2020-07-31 17:07:52
61.218.5.190	attackspam	Jul 30 18:01:45 plesk sshd[2020]: Invalid user ramyanjali from 61.218.5.190 Jul 30 18:01:45 plesk sshd[2020]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61-218-5-190.hinet-ip.hinet.net Jul 30 18:01:47 plesk sshd[2020]: Failed password for invalid user ramyanjali from 61.218.5.190 port 34786 ssh2 Jul 30 18:01:47 plesk sshd[2020]: Received disconnect from 61.218.5.190: 11: Bye Bye [preauth] Jul 30 18:04:42 plesk sshd[2152]: Invalid user elastic from 61.218.5.190 Jul 30 18:04:42 plesk sshd[2152]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61-218-5-190.hinet-ip.hinet.net Jul 30 18:04:44 plesk sshd[2152]: Failed password for invalid user elastic from 61.218.5.190 port 36052 ssh2 Jul 30 18:04:44 plesk sshd[2152]: Received disconnect from 61.218.5.190: 11: Bye Bye [preauth] Jul 30 18:05:58 plesk sshd[2222]: Invalid user xubo from 61.218.5.190 Jul 30 18:05:58 plesk sshd[2222]: pam_unix(s........ -------------------------------	2020-07-31 17:05:59
51.91.212.81	attackspambots	Unauthorized connection attempt detected from IP address 51.91.212.81 to port 2083	2020-07-31 16:36:29
112.85.42.176	attackspambots	Jul 31 10:50:49 eventyay sshd[30419]: Failed password for root from 112.85.42.176 port 9656 ssh2 Jul 31 10:51:02 eventyay sshd[30419]: error: maximum authentication attempts exceeded for root from 112.85.42.176 port 9656 ssh2 [preauth] Jul 31 10:51:07 eventyay sshd[30422]: Failed password for root from 112.85.42.176 port 34581 ssh2 ...	2020-07-31 16:53:43
222.186.30.35	attackbots	2020-07-31T08:52:32.103996dmca.cloudsearch.cf sshd[19746]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.35 user=root 2020-07-31T08:52:34.488056dmca.cloudsearch.cf sshd[19746]: Failed password for root from 222.186.30.35 port 23255 ssh2 2020-07-31T08:52:37.037597dmca.cloudsearch.cf sshd[19746]: Failed password for root from 222.186.30.35 port 23255 ssh2 2020-07-31T08:52:32.103996dmca.cloudsearch.cf sshd[19746]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.35 user=root 2020-07-31T08:52:34.488056dmca.cloudsearch.cf sshd[19746]: Failed password for root from 222.186.30.35 port 23255 ssh2 2020-07-31T08:52:37.037597dmca.cloudsearch.cf sshd[19746]: Failed password for root from 222.186.30.35 port 23255 ssh2 2020-07-31T08:52:32.103996dmca.cloudsearch.cf sshd[19746]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.35 user=root 2020-07- ...	2020-07-31 16:54:11
45.6.27.250	attackspambots	Distributed brute force attack	2020-07-31 16:44:00
193.56.28.176	attackspambots	2020-07-31 11:15:07 dovecot_login authenticator failed for \(User\) \[193.56.28.176\]: 535 Incorrect authentication data \(set_id=aerial@ift.org.ua\)2020-07-31 11:15:13 dovecot_login authenticator failed for \(User\) \[193.56.28.176\]: 535 Incorrect authentication data \(set_id=aerial@ift.org.ua\)2020-07-31 11:15:23 dovecot_login authenticator failed for \(User\) \[193.56.28.176\]: 535 Incorrect authentication data \(set_id=aerial@ift.org.ua\) ...	2020-07-31 16:58:30
66.70.130.152	attackspambots	Invalid user play from 66.70.130.152 port 56548	2020-07-31 16:39:57
171.220.242.90	attackspam	SSH Brute Force	2020-07-31 16:31:39
179.191.123.46	attackbots	Port scan: Attack repeated for 24 hours	2020-07-31 17:05:31
159.65.1.41	attack	Jul 30 21:51:01 Host-KLAX-C sshd[25785]: User root from 159.65.1.41 not allowed because not listed in AllowUsers ...	2020-07-31 16:43:11
118.24.8.99	attack	fail2ban detected brute force on sshd	2020-07-31 16:54:41
106.12.40.74	attackspam	Invalid user ddd from 106.12.40.74 port 43072	2020-07-31 17:08:42

Recently Reported IPs

139.59.42.119	139.59.43.125	139.59.43.122	139.59.42.86
139.59.43.165	139.59.43.156	139.59.43.195	139.59.43.25
139.59.43.222	139.59.43.255	139.59.43.93	139.59.45.145
139.59.46.121	139.59.46.246	139.59.47.142	139.59.48.181
139.59.46.53	139.59.49.164	139.59.48.74	139.59.49.211