139.59.70.161 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: unknown

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
139.59.70.186	attackspam	Oct 5 00:08:17 prox sshd[13002]: Failed password for root from 139.59.70.186 port 52148 ssh2	2020-10-05 07:23:09
139.59.70.186	attackspam	Oct 4 17:18:33 dev0-dcde-rnet sshd[491]: Failed password for root from 139.59.70.186 port 60534 ssh2 Oct 4 17:22:57 dev0-dcde-rnet sshd[685]: Failed password for root from 139.59.70.186 port 39232 ssh2	2020-10-04 23:36:43
139.59.70.186	attackbotsspam	Oct 4 07:24:06 vpn01 sshd[2855]: Failed password for root from 139.59.70.186 port 60498 ssh2 ...	2020-10-04 15:20:30
139.59.70.186	attack	" "	2020-09-30 03:34:08
139.59.70.186	attack	Found on Github Combined on 4 lists / proto=6 . srcport=53107 . dstport=20959 . (1429)	2020-09-29 19:39:36
139.59.70.186	attackspam	TCP ports : 17670 / 19280	2020-09-11 20:15:29
139.59.70.186	attackbots	Port scan: Attack repeated for 24 hours	2020-09-11 12:21:33
139.59.70.186	attackbotsspam	Found on Github Combined on 4 lists / proto=6 . srcport=50997 . dstport=17670 . (807)	2020-09-11 04:42:02
139.59.70.186	attackbots	TCP (SYN) 139.59.70.186:53867 -> port 379, len 44	2020-08-30 18:06:52
139.59.70.186	attack	Invalid user www from 139.59.70.186 port 45566	2020-08-29 18:38:29
139.59.70.186	attackbotsspam	2020-08-26T09:20:06.321365centos sshd[11287]: Invalid user aldo from 139.59.70.186 port 57280 2020-08-26T09:20:08.272485centos sshd[11287]: Failed password for invalid user aldo from 139.59.70.186 port 57280 ssh2 2020-08-26T09:27:20.705032centos sshd[11704]: Invalid user pierre from 139.59.70.186 port 56014 ...	2020-08-26 17:56:15
139.59.70.186	attackbotsspam	[N10.H2.VM2] Port Scanner Detected Blocked by UFW	2020-08-26 07:10:20
139.59.70.186	attackbots	Port scan denied	2020-08-25 14:15:10
139.59.70.186	attackspam	Multiple SSH authentication failures from 139.59.70.186	2020-08-17 12:59:32
139.59.70.186	attackspam	Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-08-16T18:04:16Z and 2020-08-16T18:15:01Z	2020-08-17 03:44:55

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.59.70.161
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 34379
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;139.59.70.161.			IN	A

;; AUTHORITY SECTION:
.			456	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030803 1800 900 604800 86400

;; Query time: 15 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 09 08:39:35 CST 2022
;; MSG SIZE  rcvd: 106

Host info

Host 161.70.59.139.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 161.70.59.139.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
187.162.29.119	attack	MultiHost/MultiPort Probe, Scan, Hack -	2019-12-17 03:19:34
125.231.6.145	attackbotsspam	port 23	2019-12-17 03:08:58
118.200.41.3	attack	Dec 16 16:04:43 lnxweb61 sshd[22588]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.200.41.3 Dec 16 16:04:43 lnxweb61 sshd[22588]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.200.41.3	2019-12-17 03:28:43
13.68.137.194	attackbots	Dec 16 05:53:03 wbs sshd\[710\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.68.137.194 user=root Dec 16 05:53:05 wbs sshd\[710\]: Failed password for root from 13.68.137.194 port 34236 ssh2 Dec 16 05:59:10 wbs sshd\[1276\]: Invalid user hars from 13.68.137.194 Dec 16 05:59:10 wbs sshd\[1276\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.68.137.194 Dec 16 05:59:12 wbs sshd\[1276\]: Failed password for invalid user hars from 13.68.137.194 port 42770 ssh2	2019-12-17 03:10:16
222.186.173.180	attackbots	Dec 16 20:28:55 localhost sshd\[31704\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.180 user=root Dec 16 20:28:57 localhost sshd\[31704\]: Failed password for root from 222.186.173.180 port 33798 ssh2 Dec 16 20:29:01 localhost sshd\[31704\]: Failed password for root from 222.186.173.180 port 33798 ssh2	2019-12-17 03:34:45
49.234.189.19	attackbots	Dec 16 16:20:27 sd-53420 sshd\[21665\]: User root from 49.234.189.19 not allowed because none of user's groups are listed in AllowGroups Dec 16 16:20:28 sd-53420 sshd\[21665\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.189.19 user=root Dec 16 16:20:29 sd-53420 sshd\[21665\]: Failed password for invalid user root from 49.234.189.19 port 43466 ssh2 Dec 16 16:28:48 sd-53420 sshd\[24783\]: Invalid user kymane from 49.234.189.19 Dec 16 16:28:48 sd-53420 sshd\[24783\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.189.19 ...	2019-12-17 03:14:00
38.94.42.190	attackbots	Dec 16 15:29:28 tux postfix/smtpd[24781]: connect from unknown[38.94.42.190] Dec 16 15:29:28 tux postfix/smtpd[24781]: Anonymous TLS connection established from unknown[38.94.42.190]: TLSv1.2 whostnameh cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bhostnames) Dec 16 15:29:29 tux postfix/smtpd[24781]: 2A5E2B0002: client=unknown[38.94.42.190] Dec 16 15:29:29 tux postfix/smtpd[24781]: disconnect from unknown[38.94.42.190] Dec 16 15:29:30 tux postfix/smtpd[24684]: connect from unknown[38.94.42.190] Dec 16 15:29:30 tux postfix/smtpd[24684]: Anonymous TLS connection established from unknown[38.94.42.190]: TLSv1.2 whostnameh cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bhostnames) Dec 16 15:29:31 tux postfix/smtpd[24684]: 37B6EB0002: client=unknown[38.94.42.190] Dec 16 15:29:31 tux postfix/smtpd[24684]: disconnect from unknown[38.94.42.190] Dec 16 15:29:57 tux postfix/smtpd[24781]: connect from unknown[38.94.42.190] Dec 16 15:29:57 tux postfix/smtpd[24781]: Anonymous TLS connect........ -------------------------------	2019-12-17 03:31:26
40.92.41.67	attackspam	Dec 16 17:42:06 debian-2gb-vpn-nbg1-1 kernel: [885695.255066] [UFW BLOCK] IN=eth0 OUT= MAC=96:00:00:38:96:44:d2:74:7f:6e:37:e3:08:00 SRC=40.92.41.67 DST=78.46.192.101 LEN=52 TOS=0x02 PREC=0x00 TTL=104 ID=23341 DF PROTO=TCP SPT=55233 DPT=25 WINDOW=8192 RES=0x00 CWR ECE SYN URGP=0	2019-12-17 03:29:40
27.204.239.6	attack	27.204.239.6 was recorded 5 times by 5 hosts attempting to connect to the following ports: 123. Incident counter (4h, 24h, all-time): 5, 5, 14	2019-12-17 03:39:37
129.204.87.153	attack	Dec 16 15:23:59 game-panel sshd[524]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.87.153 Dec 16 15:24:01 game-panel sshd[524]: Failed password for invalid user meinich from 129.204.87.153 port 52916 ssh2 Dec 16 15:32:36 game-panel sshd[912]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.87.153	2019-12-17 03:01:00
109.173.40.60	attack	sshd jail - ssh hack attempt	2019-12-17 03:37:06
195.144.69.206	attack	Dec 16 20:52:44 server sshd\[3686\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.69.144.195.ipv4.evonet.be user=root Dec 16 20:52:45 server sshd\[3686\]: Failed password for root from 195.144.69.206 port 36227 ssh2 Dec 16 21:00:43 server sshd\[6218\]: Invalid user guest from 195.144.69.206 Dec 16 21:00:43 server sshd\[6218\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.69.144.195.ipv4.evonet.be Dec 16 21:00:46 server sshd\[6218\]: Failed password for invalid user guest from 195.144.69.206 port 4883 ssh2 ...	2019-12-17 03:24:08
187.162.32.159	attackbotsspam	MultiHost/MultiPort Probe, Scan, Hack -	2019-12-17 03:12:23
69.162.68.54	attackbots	Dec 16 17:02:59 legacy sshd[4973]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.162.68.54 Dec 16 17:03:01 legacy sshd[4973]: Failed password for invalid user user from 69.162.68.54 port 35298 ssh2 Dec 16 17:08:54 legacy sshd[5136]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.162.68.54 ...	2019-12-17 03:33:41
222.186.175.215	attackbots	Dec 16 20:02:46 eventyay sshd[16046]: Failed password for root from 222.186.175.215 port 46522 ssh2 Dec 16 20:02:49 eventyay sshd[16046]: Failed password for root from 222.186.175.215 port 46522 ssh2 Dec 16 20:02:53 eventyay sshd[16046]: Failed password for root from 222.186.175.215 port 46522 ssh2 Dec 16 20:02:57 eventyay sshd[16046]: Failed password for root from 222.186.175.215 port 46522 ssh2 ...	2019-12-17 03:04:56

Recently Reported IPs

139.59.70.142	139.59.70.195	139.59.70.215	118.254.202.98
139.59.70.248	139.59.69.73	139.59.70.98	139.59.71.175
139.59.70.61	139.59.71.183	139.59.70.72	139.59.72.14
118.254.203.100	139.59.72.73	139.59.73.164	139.59.73.189
139.59.73.51	139.59.73.89	139.59.72.60	118.254.203.104