139.59.71.27 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Singapore

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
139.59.71.184	attackspam	139.59.71.184 - - [20/Sep/2020:15:49:04 +0200] "GET /wp-login.php HTTP/1.1" 200 2566 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 139.59.71.184 - - [20/Sep/2020:15:49:05 +0200] "POST /wp-login.php HTTP/1.1" 200 2698 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 139.59.71.184 - - [20/Sep/2020:15:49:05 +0200] "GET /wp-login.php HTTP/1.1" 200 2566 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 139.59.71.184 - - [20/Sep/2020:15:49:06 +0200] "POST /wp-login.php HTTP/1.1" 200 2672 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 139.59.71.184 - - [20/Sep/2020:15:49:06 +0200] "GET /wp-login.php HTTP/1.1" 200 2566 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 139.59.71.184 - - [20/Sep/2020:15:49:07 +0200] "POST /wp-login.php HTTP/1.1" 200 2673 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Fir ...	2020-09-20 22:26:15
139.59.71.184	attackbotsspam	Automatic report generated by Wazuh	2020-09-20 14:17:26
139.59.71.184	attack	139.59.71.184 - - [19/Sep/2020:23:29:52 +0200] "GET /wp-login.php HTTP/1.1" 200 8796 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 139.59.71.184 - - [19/Sep/2020:23:29:54 +0200] "POST /wp-login.php HTTP/1.1" 200 9047 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 139.59.71.184 - - [19/Sep/2020:23:29:55 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-09-20 06:17:26
139.59.71.74	attackspam	"Unauthorized connection attempt on SSHD detected"	2020-08-05 22:56:23
139.59.71.74	attack	Aug 2 08:30:16 ny01 sshd[28663]: Failed password for root from 139.59.71.74 port 36544 ssh2 Aug 2 08:31:30 ny01 sshd[28833]: Failed password for root from 139.59.71.74 port 52436 ssh2	2020-08-03 02:11:34
139.59.71.74	attackspam	Aug 2 06:08:51 sticky sshd\[18888\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.71.74 user=root Aug 2 06:08:53 sticky sshd\[18888\]: Failed password for root from 139.59.71.74 port 57796 ssh2 Aug 2 06:13:18 sticky sshd\[18975\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.71.74 user=root Aug 2 06:13:20 sticky sshd\[18975\]: Failed password for root from 139.59.71.74 port 41318 ssh2 Aug 2 06:17:53 sticky sshd\[19046\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.71.74 user=root	2020-08-02 12:30:19
139.59.71.74	attack	Lines containing failures of 139.59.71.74 Jul 30 20:07:55 neweola sshd[20648]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.71.74 user=r.r Jul 30 20:07:57 neweola sshd[20648]: Failed password for r.r from 139.59.71.74 port 37982 ssh2 Jul 30 20:07:57 neweola sshd[20648]: Received disconnect from 139.59.71.74 port 37982:11: Bye Bye [preauth] Jul 30 20:07:57 neweola sshd[20648]: Disconnected from authenticating user r.r 139.59.71.74 port 37982 [preauth] Jul 30 20:22:30 neweola sshd[21771]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.71.74 user=r.r Jul 30 20:22:33 neweola sshd[21771]: Failed password for r.r from 139.59.71.74 port 49096 ssh2 Jul 30 20:22:35 neweola sshd[21771]: Received disconnect from 139.59.71.74 port 49096:11: Bye Bye [preauth] Jul 30 20:22:35 neweola sshd[21771]: Disconnected from authenticating user r.r 139.59.71.74 port 49096 [preauth] Jul 30 20:28:55........ ------------------------------	2020-08-01 01:17:41
139.59.71.74	attackbots	[ssh] SSH attack	2020-07-31 08:14:55
139.59.71.104	attackbots	2020-03-25T14:34:26.023108 sshd[29128]: Invalid user cacti from 139.59.71.104 port 43336 2020-03-25T14:34:26.036425 sshd[29128]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.71.104 2020-03-25T14:34:26.023108 sshd[29128]: Invalid user cacti from 139.59.71.104 port 43336 2020-03-25T14:34:28.539612 sshd[29128]: Failed password for invalid user cacti from 139.59.71.104 port 43336 ssh2 ...	2020-03-25 22:14:13
139.59.71.104	attackspambots	Invalid user user from 139.59.71.104 port 50698	2020-03-20 07:49:58
139.59.71.104	attack	Mar 12 16:04:54 lnxweb62 sshd[2454]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.71.104	2020-03-12 23:06:32
139.59.71.104	attackbots	sshd jail - ssh hack attempt	2020-03-12 00:36:11
139.59.71.104	attackspam	Mar 5 18:55:54 kapalua sshd\[18340\]: Invalid user haliimaile from 139.59.71.104 Mar 5 18:55:54 kapalua sshd\[18340\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.71.104 Mar 5 18:55:56 kapalua sshd\[18340\]: Failed password for invalid user haliimaile from 139.59.71.104 port 45310 ssh2 Mar 5 18:59:45 kapalua sshd\[18597\]: Invalid user haliimaile from 139.59.71.104 Mar 5 18:59:45 kapalua sshd\[18597\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.71.104	2020-03-06 13:16:16
139.59.71.104	attack	Mar 5 14:49:38 sigma sshd\[9898\]: Invalid user openmail from 139.59.71.104Mar 5 14:49:40 sigma sshd\[9898\]: Failed password for invalid user openmail from 139.59.71.104 port 56858 ssh2 ...	2020-03-05 22:59:43
139.59.71.19	attackbots	10 attempts against mh-misc-ban on heat.magehost.pro	2019-12-23 21:15:26

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.59.71.27
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 25917
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;139.59.71.27.			IN	A

;; AUTHORITY SECTION:
.			124	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022700 1800 900 604800 86400

;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 27 17:37:58 CST 2022
;; MSG SIZE  rcvd: 105

Host info

Host 27.71.59.139.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 27.71.59.139.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
68.183.12.80	attack	2020-04-05T22:27:48.210873shield sshd\[31077\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=chbluxury.com.ng user=root 2020-04-05T22:27:50.735236shield sshd\[31077\]: Failed password for root from 68.183.12.80 port 55196 ssh2 2020-04-05T22:31:38.854678shield sshd\[32045\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=chbluxury.com.ng user=root 2020-04-05T22:31:40.627330shield sshd\[32045\]: Failed password for root from 68.183.12.80 port 38654 ssh2 2020-04-05T22:35:25.083491shield sshd\[689\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=chbluxury.com.ng user=root	2020-04-06 07:34:59
85.93.20.62	attackbots	04/05/2020-17:38:03.159335 85.93.20.62 Protocol: 6 ET SCAN NMAP -sS window 1024	2020-04-06 07:27:04
153.149.9.127	attackbots	SASL broute force	2020-04-06 07:05:31
51.89.22.198	attackspambots	$f2bV_matches	2020-04-06 07:22:49
218.72.200.32	attackspam	Automatic report - Windows Brute-Force Attack	2020-04-06 07:19:17
49.88.112.75	attackspam	Apr 6 03:47:03 gw1 sshd[27278]: Failed password for root from 49.88.112.75 port 42567 ssh2 ...	2020-04-06 07:06:40
179.113.122.237	attackspam	Apr 6 00:18:35 mout sshd[25578]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.113.122.237 user=root Apr 6 00:18:36 mout sshd[25578]: Failed password for root from 179.113.122.237 port 34208 ssh2	2020-04-06 07:11:30
45.58.146.42	attack	US_Sharktech_<177>1586129901 [1:2403355:56467] ET CINS Active Threat Intelligence Poor Reputation IP UDP group 28 [Classification: Misc Attack] [Priority: 2]: {UDP} 45.58.146.42:50923	2020-04-06 07:38:49
35.208.67.232	attack	2020-04-05 23:38:15,259 fail2ban.actions: WARNING [ssh] Ban 35.208.67.232	2020-04-06 07:18:14
41.35.204.23	attackbotsspam	DATE:2020-04-05 23:37:52, IP:41.35.204.23, PORT:telnet - Telnet brute force auth on a honeypot server (epe-dc)	2020-04-06 07:35:55
187.155.200.84	attack	Apr 6 00:03:09 localhost sshd\[32443\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.155.200.84 user=root Apr 6 00:03:11 localhost sshd\[32443\]: Failed password for root from 187.155.200.84 port 37874 ssh2 Apr 6 00:05:42 localhost sshd\[32660\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.155.200.84 user=root Apr 6 00:05:44 localhost sshd\[32660\]: Failed password for root from 187.155.200.84 port 53630 ssh2 Apr 6 00:08:20 localhost sshd\[32741\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.155.200.84 user=root ...	2020-04-06 07:37:42
197.48.14.8	attackspambots	DATE:2020-04-05 23:38:13, IP:197.48.14.8, PORT:telnet Telnet brute force auth on honeypot server (epe-honey1-hq)	2020-04-06 07:16:48
222.186.180.9	attackbotsspam	Apr 6 07:33:47 bacztwo sshd[27012]: error: PAM: Authentication failure for root from 222.186.180.9 Apr 6 07:33:38 bacztwo sshd[27012]: error: PAM: Authentication failure for root from 222.186.180.9 Apr 6 07:33:41 bacztwo sshd[27012]: error: PAM: Authentication failure for root from 222.186.180.9 Apr 6 07:33:44 bacztwo sshd[27012]: error: PAM: Authentication failure for root from 222.186.180.9 Apr 6 07:33:47 bacztwo sshd[27012]: error: PAM: Authentication failure for root from 222.186.180.9 Apr 6 07:33:47 bacztwo sshd[27012]: Failed keyboard-interactive/pam for root from 222.186.180.9 port 60538 ssh2 Apr 6 07:33:38 bacztwo sshd[27012]: error: PAM: Authentication failure for root from 222.186.180.9 Apr 6 07:33:41 bacztwo sshd[27012]: error: PAM: Authentication failure for root from 222.186.180.9 Apr 6 07:33:44 bacztwo sshd[27012]: error: PAM: Authentication failure for root from 222.186.180.9 Apr 6 07:33:47 bacztwo sshd[27012]: error: PAM: Authentication failure for root from 2 ...	2020-04-06 07:39:59
189.171.149.22	attack	Port scan on 1 port(s): 81	2020-04-06 07:10:29
51.38.188.101	attackbotsspam	2020-04-06T00:42:43.719167librenms sshd[8778]: Failed password for root from 51.38.188.101 port 34782 ssh2 2020-04-06T00:46:36.726500librenms sshd[9381]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.ip-51-38-188.eu user=root 2020-04-06T00:46:39.123643librenms sshd[9381]: Failed password for root from 51.38.188.101 port 45828 ssh2 ...	2020-04-06 07:40:41

Recently Reported IPs

139.59.7.40	139.59.75.228	139.59.72.138	139.59.72.87
139.59.72.54	139.59.72.88	139.59.73.216	139.59.78.67
139.59.80.24	139.59.79.139	139.59.80.137	139.59.80.56
139.59.85.26	139.59.85.95	139.59.85.69	139.59.84.119
139.59.80.6	139.59.85.145	139.59.82.84	139.59.87.160