139.59.71.142 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Singapore

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
139.59.71.184	attackspam	139.59.71.184 - - [20/Sep/2020:15:49:04 +0200] "GET /wp-login.php HTTP/1.1" 200 2566 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 139.59.71.184 - - [20/Sep/2020:15:49:05 +0200] "POST /wp-login.php HTTP/1.1" 200 2698 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 139.59.71.184 - - [20/Sep/2020:15:49:05 +0200] "GET /wp-login.php HTTP/1.1" 200 2566 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 139.59.71.184 - - [20/Sep/2020:15:49:06 +0200] "POST /wp-login.php HTTP/1.1" 200 2672 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 139.59.71.184 - - [20/Sep/2020:15:49:06 +0200] "GET /wp-login.php HTTP/1.1" 200 2566 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 139.59.71.184 - - [20/Sep/2020:15:49:07 +0200] "POST /wp-login.php HTTP/1.1" 200 2673 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Fir ...	2020-09-20 22:26:15
139.59.71.184	attackbotsspam	Automatic report generated by Wazuh	2020-09-20 14:17:26
139.59.71.184	attack	139.59.71.184 - - [19/Sep/2020:23:29:52 +0200] "GET /wp-login.php HTTP/1.1" 200 8796 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 139.59.71.184 - - [19/Sep/2020:23:29:54 +0200] "POST /wp-login.php HTTP/1.1" 200 9047 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 139.59.71.184 - - [19/Sep/2020:23:29:55 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-09-20 06:17:26
139.59.71.74	attackspam	"Unauthorized connection attempt on SSHD detected"	2020-08-05 22:56:23
139.59.71.74	attack	Aug 2 08:30:16 ny01 sshd[28663]: Failed password for root from 139.59.71.74 port 36544 ssh2 Aug 2 08:31:30 ny01 sshd[28833]: Failed password for root from 139.59.71.74 port 52436 ssh2	2020-08-03 02:11:34
139.59.71.74	attackspam	Aug 2 06:08:51 sticky sshd\[18888\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.71.74 user=root Aug 2 06:08:53 sticky sshd\[18888\]: Failed password for root from 139.59.71.74 port 57796 ssh2 Aug 2 06:13:18 sticky sshd\[18975\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.71.74 user=root Aug 2 06:13:20 sticky sshd\[18975\]: Failed password for root from 139.59.71.74 port 41318 ssh2 Aug 2 06:17:53 sticky sshd\[19046\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.71.74 user=root	2020-08-02 12:30:19
139.59.71.74	attack	Lines containing failures of 139.59.71.74 Jul 30 20:07:55 neweola sshd[20648]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.71.74 user=r.r Jul 30 20:07:57 neweola sshd[20648]: Failed password for r.r from 139.59.71.74 port 37982 ssh2 Jul 30 20:07:57 neweola sshd[20648]: Received disconnect from 139.59.71.74 port 37982:11: Bye Bye [preauth] Jul 30 20:07:57 neweola sshd[20648]: Disconnected from authenticating user r.r 139.59.71.74 port 37982 [preauth] Jul 30 20:22:30 neweola sshd[21771]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.71.74 user=r.r Jul 30 20:22:33 neweola sshd[21771]: Failed password for r.r from 139.59.71.74 port 49096 ssh2 Jul 30 20:22:35 neweola sshd[21771]: Received disconnect from 139.59.71.74 port 49096:11: Bye Bye [preauth] Jul 30 20:22:35 neweola sshd[21771]: Disconnected from authenticating user r.r 139.59.71.74 port 49096 [preauth] Jul 30 20:28:55........ ------------------------------	2020-08-01 01:17:41
139.59.71.74	attackbots	[ssh] SSH attack	2020-07-31 08:14:55
139.59.71.104	attackbots	2020-03-25T14:34:26.023108 sshd[29128]: Invalid user cacti from 139.59.71.104 port 43336 2020-03-25T14:34:26.036425 sshd[29128]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.71.104 2020-03-25T14:34:26.023108 sshd[29128]: Invalid user cacti from 139.59.71.104 port 43336 2020-03-25T14:34:28.539612 sshd[29128]: Failed password for invalid user cacti from 139.59.71.104 port 43336 ssh2 ...	2020-03-25 22:14:13
139.59.71.104	attackspambots	Invalid user user from 139.59.71.104 port 50698	2020-03-20 07:49:58
139.59.71.104	attack	Mar 12 16:04:54 lnxweb62 sshd[2454]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.71.104	2020-03-12 23:06:32
139.59.71.104	attackbots	sshd jail - ssh hack attempt	2020-03-12 00:36:11
139.59.71.104	attackspam	Mar 5 18:55:54 kapalua sshd\[18340\]: Invalid user haliimaile from 139.59.71.104 Mar 5 18:55:54 kapalua sshd\[18340\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.71.104 Mar 5 18:55:56 kapalua sshd\[18340\]: Failed password for invalid user haliimaile from 139.59.71.104 port 45310 ssh2 Mar 5 18:59:45 kapalua sshd\[18597\]: Invalid user haliimaile from 139.59.71.104 Mar 5 18:59:45 kapalua sshd\[18597\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.71.104	2020-03-06 13:16:16
139.59.71.104	attack	Mar 5 14:49:38 sigma sshd\[9898\]: Invalid user openmail from 139.59.71.104Mar 5 14:49:40 sigma sshd\[9898\]: Failed password for invalid user openmail from 139.59.71.104 port 56858 ssh2 ...	2020-03-05 22:59:43
139.59.71.19	attackbots	10 attempts against mh-misc-ban on heat.magehost.pro	2019-12-23 21:15:26

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.59.71.142
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 34746
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;139.59.71.142.			IN	A

;; AUTHORITY SECTION:
.			560	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022601 1800 900 604800 86400

;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 27 12:41:19 CST 2022
;; MSG SIZE  rcvd: 106

Host info

142.71.59.139.in-addr.arpa domain name pointer server31.thulo.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
142.71.59.139.in-addr.arpa	name = server31.thulo.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
153.36.242.114	attackbotsspam	Triggered by Fail2Ban at Vostok web server	2019-07-18 22:42:52
163.47.37.74	attack	@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-18 08:20:24,147 INFO [amun_request_handler] PortScan Detected on Port: 445 (163.47.37.74)	2019-07-18 22:35:07
123.27.108.47	attack	Port Scan detected from 123.27.108.47 (VN/Vietnam/localhost). 4 hits in the last 286 seconds	2019-07-18 22:50:53
96.114.71.146	attackspam	Jul 18 15:40:20 localhost sshd\[15536\]: Invalid user eric from 96.114.71.146 port 40738 Jul 18 15:40:20 localhost sshd\[15536\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=96.114.71.146 ...	2019-07-18 22:56:11
62.234.38.143	attack	no	2019-07-18 22:35:37
106.12.108.23	attackspam	Jul 18 10:55:01 sshgateway sshd\[27432\]: Invalid user file from 106.12.108.23 Jul 18 10:55:01 sshgateway sshd\[27432\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.108.23 Jul 18 10:55:04 sshgateway sshd\[27432\]: Failed password for invalid user file from 106.12.108.23 port 60730 ssh2	2019-07-18 22:46:18
123.58.107.130	attackbotsspam	Jul 18 16:11:42 MK-Soft-Root1 sshd\[28562\]: Invalid user dj from 123.58.107.130 port 23216 Jul 18 16:11:42 MK-Soft-Root1 sshd\[28562\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.58.107.130 Jul 18 16:11:44 MK-Soft-Root1 sshd\[28562\]: Failed password for invalid user dj from 123.58.107.130 port 23216 ssh2 ...	2019-07-18 22:36:04
148.63.108.65	attack	$f2bV_matches	2019-07-18 22:13:03
178.128.241.99	attackbots	2019-07-18T16:11:53.581225 sshd[1655]: Invalid user test1 from 178.128.241.99 port 41998 2019-07-18T16:11:53.596434 sshd[1655]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.241.99 2019-07-18T16:11:53.581225 sshd[1655]: Invalid user test1 from 178.128.241.99 port 41998 2019-07-18T16:11:55.224679 sshd[1655]: Failed password for invalid user test1 from 178.128.241.99 port 41998 ssh2 2019-07-18T16:16:35.855530 sshd[1739]: Invalid user melissa from 178.128.241.99 port 38172 ...	2019-07-18 22:24:15
92.118.161.9	attackbotsspam	MultiHost/MultiPort Probe, Scan, Hack -	2019-07-18 23:03:39
213.79.119.42	attackbotsspam	@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-18 09:32:26,093 INFO [amun_request_handler] PortScan Detected on Port: 445 (213.79.119.42)	2019-07-18 22:58:25
218.92.0.155	attack	Jul 18 16:12:54 MainVPS sshd[16042]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.155 user=root Jul 18 16:12:56 MainVPS sshd[16042]: Failed password for root from 218.92.0.155 port 20098 ssh2 Jul 18 16:13:08 MainVPS sshd[16042]: Failed password for root from 218.92.0.155 port 20098 ssh2 Jul 18 16:12:54 MainVPS sshd[16042]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.155 user=root Jul 18 16:12:56 MainVPS sshd[16042]: Failed password for root from 218.92.0.155 port 20098 ssh2 Jul 18 16:13:08 MainVPS sshd[16042]: Failed password for root from 218.92.0.155 port 20098 ssh2 Jul 18 16:12:54 MainVPS sshd[16042]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.155 user=root Jul 18 16:12:56 MainVPS sshd[16042]: Failed password for root from 218.92.0.155 port 20098 ssh2 Jul 18 16:13:08 MainVPS sshd[16042]: Failed password for root from 218.92.0.155 port 20098 ssh2 J	2019-07-18 22:37:40
164.132.104.58	attackspam	Jul 18 16:52:59 meumeu sshd[7447]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.132.104.58 Jul 18 16:53:01 meumeu sshd[7447]: Failed password for invalid user game from 164.132.104.58 port 37744 ssh2 Jul 18 16:57:36 meumeu sshd[8286]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.132.104.58 ...	2019-07-18 23:05:39
177.67.162.43	attackbotsspam	Trying to deliver email spam, but blocked by RBL	2019-07-18 22:30:15
120.28.78.171	attack	@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-18 09:33:53,187 INFO [amun_request_handler] PortScan Detected on Port: 445 (120.28.78.171)	2019-07-18 22:11:11

Recently Reported IPs

139.59.74.118	139.59.76.2	139.59.74.17	139.59.76.208
139.59.75.135	139.59.77.226	139.59.78.126	139.59.77.83
139.59.78.64	162.105.149.155	139.59.77.73	139.59.81.55
139.59.78.34	139.59.82.24	139.59.77.188	139.59.8.119
139.59.81.31	139.59.83.9	139.59.83.109	139.71.116.64