139.59.91.204 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Singapore

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
139.59.91.254	attackspambots	Jul 19 18:06:47 ajax sshd[11849]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.91.254 Jul 19 18:06:49 ajax sshd[11849]: Failed password for invalid user postgres from 139.59.91.254 port 48234 ssh2	2020-07-20 01:26:19
139.59.91.23	attackbots	Invalid user admin from 139.59.91.23 port 53526	2020-04-17 14:06:35
139.59.91.23	attack	Apr 16 13:44:27 www_kotimaassa_fi sshd[16132]: Failed password for root from 139.59.91.23 port 55098 ssh2 ...	2020-04-17 01:24:59
139.59.91.22	attackspam	Jan 19 22:08:06 vpn01 sshd[29170]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.91.22 Jan 19 22:08:08 vpn01 sshd[29170]: Failed password for invalid user hosting from 139.59.91.22 port 51236 ssh2 ...	2020-01-20 05:54:07
139.59.91.165	attackspambots	Unauthorized connection attempt detected from IP address 139.59.91.165 to port 2220 [J]	2020-01-15 09:26:31
139.59.91.165	attackspam	Unauthorized connection attempt detected from IP address 139.59.91.165 to port 2220 [J]	2020-01-14 20:38:18
139.59.91.176	attackspam	Nov 28 13:11:23 vpn01 sshd[12983]: Failed password for root from 139.59.91.176 port 56023 ssh2 ...	2019-11-28 22:31:15
139.59.91.176	attackspambots	Nov 27 15:03:21 vpn01 sshd[26949]: Failed password for root from 139.59.91.176 port 38403 ssh2 ...	2019-11-27 22:08:31
139.59.91.215	attackspam	2019-11-24T07:59:53.405861matrix.arvenenaske.de sshd[358984]: Invalid user mysql from 139.59.91.215 port 37302 2019-11-24T07:59:53.410726matrix.arvenenaske.de sshd[358984]: pam_sss(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.91.215 user=mysql 2019-11-24T07:59:53.411274matrix.arvenenaske.de sshd[358984]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.91.215 2019-11-24T07:59:53.405861matrix.arvenenaske.de sshd[358984]: Invalid user mysql from 139.59.91.215 port 37302 2019-11-24T07:59:55.437052matrix.arvenenaske.de sshd[358984]: Failed password for invalid user mysql from 139.59.91.215 port 37302 ssh2 2019-11-24T08:06:20.413519matrix.arvenenaske.de sshd[359101]: Invalid user adhhostname from 139.59.91.215 port 50514 2019-11-24T08:06:20.418255matrix.arvenenaske.de sshd[359101]: pam_sss(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.91.215 user=adhh........ ------------------------------	2019-11-25 02:46:00
139.59.91.176	attackbots	detected by Fail2Ban	2019-11-10 19:30:54
139.59.91.176	attackspam	Nov 7 08:26:32 vpn01 sshd[15260]: Failed password for root from 139.59.91.176 port 44660 ssh2 ...	2019-11-07 20:11:37
139.59.91.139	attackspambots	(sshd) Failed SSH login from 139.59.91.139 (-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 26 08:37:12 chookity sshd[30151]: Did not receive identification string from 139.59.91.139 port 60946 Sep 26 08:40:19 chookity sshd[30312]: Invalid user doctor from 139.59.91.139 port 33116 Sep 26 08:40:47 chookity sshd[30323]: Invalid user virus from 139.59.91.139 port 48666 Sep 26 08:41:15 chookity sshd[30326]: Invalid user windows from 139.59.91.139 port 37018 Sep 26 08:41:42 chookity sshd[30334]: Invalid user dummy from 139.59.91.139 port 52776	2019-09-26 21:00:58
139.59.91.139	attackspambots	Sep 4 02:20:00 vpn01 sshd\[21555\]: Invalid user quan from 139.59.91.139 Sep 4 02:20:00 vpn01 sshd\[21555\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.91.139 Sep 4 02:20:02 vpn01 sshd\[21555\]: Failed password for invalid user quan from 139.59.91.139 port 53652 ssh2	2019-09-04 11:00:48
139.59.91.139	attackbots	Sep 3 04:30:17 lcl-usvr-02 sshd[11852]: Invalid user patrick from 139.59.91.139 port 52970 Sep 3 04:30:17 lcl-usvr-02 sshd[11852]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.91.139 Sep 3 04:30:17 lcl-usvr-02 sshd[11852]: Invalid user patrick from 139.59.91.139 port 52970 Sep 3 04:30:18 lcl-usvr-02 sshd[11852]: Failed password for invalid user patrick from 139.59.91.139 port 52970 ssh2 Sep 3 04:34:49 lcl-usvr-02 sshd[12866]: Invalid user test from 139.59.91.139 port 51652 ...	2019-09-03 05:51:44
139.59.91.139	attack	Aug 15 10:51:50 localhost sshd[25589]: Invalid user est from 139.59.91.139 port 46252 Aug 15 10:51:50 localhost sshd[25589]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.91.139 Aug 15 10:51:50 localhost sshd[25589]: Invalid user est from 139.59.91.139 port 46252 Aug 15 10:51:52 localhost sshd[25589]: Failed password for invalid user est from 139.59.91.139 port 46252 ssh2 ...	2019-08-15 16:18:48

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.59.91.204
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 24155
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;139.59.91.204.			IN	A

;; AUTHORITY SECTION:
.			500	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021702 1800 900 604800 86400

;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 12:06:30 CST 2022
;; MSG SIZE  rcvd: 106

Host info

Host 204.91.59.139.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 204.91.59.139.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
187.162.120.141	attackbotsspam	Automatic report - Port Scan Attack	2020-08-31 19:07:55
73.148.98.191	attackbotsspam	Attempts against non-existent wp-login	2020-08-31 18:48:38
172.67.153.246	attackbots	*** Phishing website that camouflaged Amazon.co.jp https://support.zybcan27.com/ap/signin/index/openid/pape/maxauthage/openidreturntohttps/www.amazon.co.jp domain: support.zybcan27.com IP v6 address: 2606:4700:3032::ac43:99f6 / 2606:4700:3033::681c:cdb / 2606:4700:3031::681c:ddb IP v4 address: 104.28.13.219 / 172.67.153.246 / 104.28.12.219 location: USA hosting: Cloudflare, Inc web: https://www.cloudflare.com/abuse abuse contact: abuse@cloudflare.com, abuse+law@cloudflare.com, rir@cloudflare.com	2020-08-31 19:02:15
144.76.3.79	attack	20 attempts against mh-misbehave-ban on sea	2020-08-31 19:01:08
218.21.247.134	attackspambots	Aug 31 11:49:36 DAAP sshd[20902]: Invalid user operator from 218.21.247.134 port 43870 ...	2020-08-31 18:43:25
117.6.130.84	attackbots	20/8/30@23:49:19: FAIL: Alarm-Network address from=117.6.130.84 ...	2020-08-31 18:36:31
139.199.228.133	attackbots	Invalid user gilbert from 139.199.228.133 port 39354	2020-08-31 18:42:13
121.18.85.114	attack	(sshd) Failed SSH login from 121.18.85.114 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Aug 31 05:58:03 server4 sshd[13723]: Invalid user sergey from 121.18.85.114 Aug 31 05:58:03 server4 sshd[13723]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.18.85.114 Aug 31 05:58:06 server4 sshd[13723]: Failed password for invalid user sergey from 121.18.85.114 port 54870 ssh2 Aug 31 06:01:16 server4 sshd[15751]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.18.85.114 user=ftp Aug 31 06:01:17 server4 sshd[15751]: Failed password for ftp from 121.18.85.114 port 48800 ssh2	2020-08-31 18:38:17
192.144.137.82	attackspambots	Invalid user user from 192.144.137.82 port 33454	2020-08-31 19:04:34
176.122.129.114	attackspambots	Aug 31 12:47:28 lukav-desktop sshd\[10754\]: Invalid user sinusbot from 176.122.129.114 Aug 31 12:47:28 lukav-desktop sshd\[10754\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.122.129.114 Aug 31 12:47:30 lukav-desktop sshd\[10754\]: Failed password for invalid user sinusbot from 176.122.129.114 port 42912 ssh2 Aug 31 12:49:59 lukav-desktop sshd\[10762\]: Invalid user ajay from 176.122.129.114 Aug 31 12:49:59 lukav-desktop sshd\[10762\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.122.129.114	2020-08-31 18:35:48
141.98.9.36	attackspam	" "	2020-08-31 18:54:11
58.16.145.208	attackspambots	(sshd) Failed SSH login from 58.16.145.208 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Aug 31 05:29:31 server4 sshd[29656]: Invalid user gangadhar from 58.16.145.208 Aug 31 05:29:31 server4 sshd[29656]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.16.145.208 Aug 31 05:29:32 server4 sshd[29656]: Failed password for invalid user gangadhar from 58.16.145.208 port 35006 ssh2 Aug 31 05:46:22 server4 sshd[7148]: Invalid user sinusbot from 58.16.145.208 Aug 31 05:46:22 server4 sshd[7148]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.16.145.208	2020-08-31 18:38:43
62.210.185.4	attack	62.210.185.4 - - \[31/Aug/2020:11:04:47 +0200\] "POST /wp-login.php HTTP/1.0" 200 3528 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 62.210.185.4 - - \[31/Aug/2020:11:04:49 +0200\] "POST /wp-login.php HTTP/1.0" 200 3524 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 62.210.185.4 - - \[31/Aug/2020:11:04:51 +0200\] "POST /wp-login.php HTTP/1.0" 200 3527 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"	2020-08-31 19:03:16
166.62.123.55	attack	166.62.123.55 - - [31/Aug/2020:11:47:08 +0200] "GET /wp-login.php HTTP/1.1" 200 8691 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 166.62.123.55 - - [31/Aug/2020:11:47:11 +0200] "POST /wp-login.php HTTP/1.1" 200 8921 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 166.62.123.55 - - [31/Aug/2020:11:47:13 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-08-31 18:55:56
187.153.8.6	attackspam	firewall-block, port(s): 23/tcp	2020-08-31 19:06:59

Recently Reported IPs

139.59.90.25	139.59.91.39	139.59.87.251	139.59.91.232
139.59.92.223	139.59.91.71	139.59.92.143	139.59.94.38
139.59.94.76	139.59.92.67	139.59.95.223	139.59.95.103
139.59.96.178	139.59.96.200	139.59.99.233	139.59.98.163
139.60.0.41	139.6.10.199	139.59.99.216	139.60.101.0