139.59.93.25 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: India

Internet Service Provider: Digital Ocean Inc.

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	Oct 11 05:58:15 venus sshd\[28766\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.93.25 user=root Oct 11 05:58:17 venus sshd\[28766\]: Failed password for root from 139.59.93.25 port 59636 ssh2 Oct 11 06:02:27 venus sshd\[28797\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.93.25 user=root ...	2019-10-11 18:24:35
attackbotsspam	2019-10-09T05:14:48.643551shield sshd\[28821\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.93.25 user=root 2019-10-09T05:14:50.871256shield sshd\[28821\]: Failed password for root from 139.59.93.25 port 33094 ssh2 2019-10-09T05:19:10.962885shield sshd\[29089\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.93.25 user=root 2019-10-09T05:19:12.824243shield sshd\[29089\]: Failed password for root from 139.59.93.25 port 45854 ssh2 2019-10-09T05:23:35.160766shield sshd\[29562\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.93.25 user=root	2019-10-09 13:24:14

Type

Details

Datetime

attack

Oct 11 05:58:15 venus sshd\[28766\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.93.25  user=root
Oct 11 05:58:17 venus sshd\[28766\]: Failed password for root from 139.59.93.25 port 59636 ssh2
Oct 11 06:02:27 venus sshd\[28797\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.93.25  user=root
...

2019-10-11 18:24:35

attackbotsspam

2019-10-09T05:14:48.643551shield sshd\[28821\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.93.25  user=root
2019-10-09T05:14:50.871256shield sshd\[28821\]: Failed password for root from 139.59.93.25 port 33094 ssh2
2019-10-09T05:19:10.962885shield sshd\[29089\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.93.25  user=root
2019-10-09T05:19:12.824243shield sshd\[29089\]: Failed password for root from 139.59.93.25 port 45854 ssh2
2019-10-09T05:23:35.160766shield sshd\[29562\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.93.25  user=root

2019-10-09 13:24:14

Comments on same subnet:

IP	Type	Details	Datetime
139.59.93.93	attack	2020-10-11T20:47:04.793419vps773228.ovh.net sshd[4085]: Invalid user chris from 139.59.93.93 port 58602 2020-10-11T20:47:04.806572vps773228.ovh.net sshd[4085]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.93.93 2020-10-11T20:47:04.793419vps773228.ovh.net sshd[4085]: Invalid user chris from 139.59.93.93 port 58602 2020-10-11T20:47:06.828594vps773228.ovh.net sshd[4085]: Failed password for invalid user chris from 139.59.93.93 port 58602 ssh2 2020-10-11T20:51:11.784374vps773228.ovh.net sshd[4203]: Invalid user surendra from 139.59.93.93 port 35976 ...	2020-10-12 03:07:15
139.59.93.93	attackbotsspam	(sshd) Failed SSH login from 139.59.93.93 (IN/India/rupal-chaudhary-ubuntu-18.04): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct 11 05:48:49 optimus sshd[28088]: Invalid user alex from 139.59.93.93 Oct 11 05:48:49 optimus sshd[28088]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.93.93 Oct 11 05:48:51 optimus sshd[28088]: Failed password for invalid user alex from 139.59.93.93 port 60706 ssh2 Oct 11 05:50:59 optimus sshd[29050]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.93.93 user=root Oct 11 05:51:01 optimus sshd[29050]: Failed password for root from 139.59.93.93 port 34850 ssh2	2020-10-11 18:59:40
139.59.93.93	attack	(sshd) Failed SSH login from 139.59.93.93 (IN/India/rupal-chaudhary-ubuntu-18.04): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct 8 14:21:21 server sshd[30790]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.93.93 user=root Oct 8 14:21:22 server sshd[30790]: Failed password for root from 139.59.93.93 port 36748 ssh2 Oct 8 14:22:01 server sshd[30959]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.93.93 user=root Oct 8 14:22:03 server sshd[30959]: Failed password for root from 139.59.93.93 port 42698 ssh2 Oct 8 14:22:37 server sshd[31090]: Invalid user test from 139.59.93.93 port 48308	2020-10-09 02:49:18
139.59.93.93	attackspam	sshd: Failed password for .... from 139.59.93.93 port 48720 ssh2 (10 attempts)	2020-10-08 18:50:13
139.59.93.93	attack	reported through recidive - multiple failed attempts(SSH)	2020-10-04 06:51:21
139.59.93.93	attackspam	(sshd) Failed SSH login from 139.59.93.93 (IN/India/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct 3 07:25:27 server5 sshd[3127]: Invalid user ubuntu from 139.59.93.93 Oct 3 07:25:27 server5 sshd[3127]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.93.93 Oct 3 07:25:29 server5 sshd[3127]: Failed password for invalid user ubuntu from 139.59.93.93 port 33760 ssh2 Oct 3 07:31:09 server5 sshd[5660]: Invalid user rg from 139.59.93.93 Oct 3 07:31:09 server5 sshd[5660]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.93.93	2020-10-03 23:01:37
139.59.93.93	attack	Oct 3 08:41:24 sso sshd[25701]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.93.93 Oct 3 08:41:26 sso sshd[25701]: Failed password for invalid user voip from 139.59.93.93 port 44950 ssh2 ...	2020-10-03 14:44:28
139.59.93.93	attackbotsspam	2020-09-25 20:57:29,629 fail2ban.actions: WARNING [ssh] Ban 139.59.93.93	2020-09-26 05:01:00
139.59.93.93	attack	Connection to SSH Honeypot - Detected by HoneypotDB	2020-09-25 21:53:45
139.59.93.93	attackbotsspam	Sep 24 19:22:20 eddieflores sshd\[28713\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.93.93 user=root Sep 24 19:22:22 eddieflores sshd\[28713\]: Failed password for root from 139.59.93.93 port 52864 ssh2 Sep 24 19:27:00 eddieflores sshd\[29271\]: Invalid user admin from 139.59.93.93 Sep 24 19:27:00 eddieflores sshd\[29271\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.93.93 Sep 24 19:27:02 eddieflores sshd\[29271\]: Failed password for invalid user admin from 139.59.93.93 port 34998 ssh2	2020-09-25 13:32:34
139.59.93.93	attack	Invalid user robert from 139.59.93.93 port 58610	2020-08-21 15:18:14
139.59.93.93	attack	Aug 20 11:34:30 mx sshd[18205]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.93.93 Aug 20 11:34:32 mx sshd[18205]: Failed password for invalid user malaga from 139.59.93.93 port 42080 ssh2	2020-08-21 03:27:33
139.59.93.93	attackspambots	Aug 16 05:56:18 db sshd[21410]: User root from 139.59.93.93 not allowed because none of user's groups are listed in AllowGroups ...	2020-08-16 13:41:17
139.59.93.93	attack	Aug 5 10:39:44 firewall sshd[6540]: Failed password for root from 139.59.93.93 port 58212 ssh2 Aug 5 10:44:26 firewall sshd[6796]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.93.93 user=root Aug 5 10:44:27 firewall sshd[6796]: Failed password for root from 139.59.93.93 port 39008 ssh2 ...	2020-08-06 00:01:14
139.59.93.93	attack	Aug 5 10:39:04 pornomens sshd\[30297\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.93.93 user=root Aug 5 10:39:06 pornomens sshd\[30297\]: Failed password for root from 139.59.93.93 port 33652 ssh2 Aug 5 10:43:38 pornomens sshd\[30306\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.93.93 user=root ...	2020-08-05 18:01:56

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.59.93.25
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 13412
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.59.93.25.			IN	A

;; AUTHORITY SECTION:
.			599	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019100900 1800 900 604800 86400

;; Query time: 356 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Oct 09 13:24:10 CST 2019
;; MSG SIZE  rcvd: 116

Host info

25.93.59.139.in-addr.arpa domain name pointer parkezetech.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
25.93.59.139.in-addr.arpa	name = parkezetech.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
103.9.195.59	attackbotsspam	May 24 12:07:24 localhost sshd[80507]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.9.195.59 user=root May 24 12:07:26 localhost sshd[80507]: Failed password for root from 103.9.195.59 port 46138 ssh2 May 24 12:15:08 localhost sshd[81290]: Invalid user amssys from 103.9.195.59 port 56324 May 24 12:15:08 localhost sshd[81290]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.9.195.59 May 24 12:15:08 localhost sshd[81290]: Invalid user amssys from 103.9.195.59 port 56324 May 24 12:15:10 localhost sshd[81290]: Failed password for invalid user amssys from 103.9.195.59 port 56324 ssh2 ...	2020-05-24 21:37:09
112.85.42.176	attack	Brute-force attempt banned	2020-05-24 21:27:09
49.234.107.68	attackbotsspam	May 24 15:07:59 pkdns2 sshd\[64838\]: Invalid user htc from 49.234.107.68May 24 15:08:01 pkdns2 sshd\[64838\]: Failed password for invalid user htc from 49.234.107.68 port 48248 ssh2May 24 15:11:40 pkdns2 sshd\[65025\]: Invalid user ote from 49.234.107.68May 24 15:11:42 pkdns2 sshd\[65025\]: Failed password for invalid user ote from 49.234.107.68 port 59092 ssh2May 24 15:15:18 pkdns2 sshd\[65208\]: Invalid user personal from 49.234.107.68May 24 15:15:20 pkdns2 sshd\[65208\]: Failed password for invalid user personal from 49.234.107.68 port 41708 ssh2 ...	2020-05-24 21:25:19
165.22.35.21	attackbots	Automatic report - XMLRPC Attack	2020-05-24 21:28:46
14.182.61.167	attackspam	Unauthorized connection attempt from IP address 14.182.61.167 on Port 445(SMB)	2020-05-24 21:39:36
113.255.74.167	attackbots	Unauthorized connection attempt from IP address 113.255.74.167 on Port 445(SMB)	2020-05-24 21:21:36
40.121.18.230	attackspambots	May 24 14:11:09 piServer sshd[15822]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.121.18.230 May 24 14:11:11 piServer sshd[15822]: Failed password for invalid user xrg from 40.121.18.230 port 34440 ssh2 May 24 14:15:08 piServer sshd[16170]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.121.18.230 ...	2020-05-24 21:38:58
173.236.224.115	attackbotsspam	xmlrpc attack	2020-05-24 21:16:40
201.83.39.53	attackbotsspam	Netgear DGN Device Remote Command Execution Vulnerability	2020-05-24 21:20:02
183.6.118.116	attack	May 24 15:23:56 server sshd[20897]: Failed password for root from 183.6.118.116 port 51274 ssh2 May 24 15:28:40 server sshd[21169]: Failed password for root from 183.6.118.116 port 50410 ssh2 ...	2020-05-24 21:41:57
118.71.126.64	attackbotsspam	Unauthorized connection attempt from IP address 118.71.126.64 on Port 445(SMB)	2020-05-24 21:38:12
31.166.254.252	attackspambots	Unauthorized connection attempt from IP address 31.166.254.252 on Port 445(SMB)	2020-05-24 21:35:14
49.232.33.182	attackspam	May 24 17:15:16 gw1 sshd[18370]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.232.33.182 May 24 17:15:18 gw1 sshd[18370]: Failed password for invalid user sungki from 49.232.33.182 port 37222 ssh2 ...	2020-05-24 21:29:35
134.209.96.131	attack	May 24 15:16:45 pve1 sshd[12183]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.96.131 May 24 15:16:47 pve1 sshd[12183]: Failed password for invalid user yrb from 134.209.96.131 port 38206 ssh2 ...	2020-05-24 21:52:40
185.147.215.8	attackbots	[2020-05-24 08:59:15] NOTICE[1157] chan_sip.c: Registration from '' failed for '185.147.215.8:53022' - Wrong password [2020-05-24 08:59:15] SECURITY[1173] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-05-24T08:59:15.644-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1675",SessionID="0x7f5f10787a08",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.147.215.8/53022",Challenge="02fb0f2e",ReceivedChallenge="02fb0f2e",ReceivedHash="293d876a5de02ad268aa61077bb6eef1" [2020-05-24 08:59:56] NOTICE[1157] chan_sip.c: Registration from '' failed for '185.147.215.8:64713' - Wrong password [2020-05-24 08:59:56] SECURITY[1173] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-05-24T08:59:56.816-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="3390",SessionID="0x7f5f100266a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.147.215.8 ...	2020-05-24 21:18:16

Recently Reported IPs

165.255.135.180	165.255.126.166	165.255.125.205	45.136.109.82
234.8.35.182	46.166.148.150	159.253.146.16	5.55.201.151
182.61.178.138	111.168.82.86	201.148.252.31	200.194.27.193
165.90.75.21	152.158.130.24	112.179.242.181	79.134.194.81
233.123.53.207	105.178.116.240	140.239.177.191	124.75.31.17