159.89.12.139 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
159.89.125.16	attackbots	Oct 4 22:50:23 mail.srvfarm.net postfix/smtpd[1160735]: warning: unknown[159.89.125.16]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 4 22:50:23 mail.srvfarm.net postfix/smtpd[1160735]: lost connection after AUTH from unknown[159.89.125.16] Oct 4 22:53:44 mail.srvfarm.net postfix/smtpd[1166868]: warning: unknown[159.89.125.16]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 4 22:53:44 mail.srvfarm.net postfix/smtpd[1166868]: lost connection after AUTH from unknown[159.89.125.16] Oct 4 22:53:48 mail.srvfarm.net postfix/smtpd[1166869]: warning: unknown[159.89.125.16]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 4 22:53:48 mail.srvfarm.net postfix/smtpd[1161505]: warning: unknown[159.89.125.16]: SASL LOGIN authentication failed: UGFzc3dvcmQ6	2020-10-05 05:31:02
159.89.125.16	attack	Oct 4 05:33:33 mail.srvfarm.net postfix/smtpd[727581]: warning: unknown[159.89.125.16]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 4 05:33:33 mail.srvfarm.net postfix/smtpd[727581]: lost connection after AUTH from unknown[159.89.125.16] Oct 4 05:36:55 mail.srvfarm.net postfix/smtpd[727422]: warning: unknown[159.89.125.16]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 4 05:36:55 mail.srvfarm.net postfix/smtpd[727422]: lost connection after AUTH from unknown[159.89.125.16] Oct 4 05:36:59 mail.srvfarm.net postfix/smtpd[731567]: warning: unknown[159.89.125.16]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 4 05:36:59 mail.srvfarm.net postfix/smtpd[731585]: warning: unknown[159.89.125.16]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 4 05:36:59 mail.srvfarm.net postfix/smtpd[731567]: lost connection after AUTH from unknown[159.89.125.16] Oct 4 05:36:59 mail.srvfarm.net postfix/smtpd[731585]: lost connection after AUTH from unknown[159.89.125.16]	2020-10-04 21:25:20
159.89.125.16	attackbotsspam	Oct 4 05:33:33 mail.srvfarm.net postfix/smtpd[727581]: warning: unknown[159.89.125.16]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 4 05:33:33 mail.srvfarm.net postfix/smtpd[727581]: lost connection after AUTH from unknown[159.89.125.16] Oct 4 05:36:55 mail.srvfarm.net postfix/smtpd[727422]: warning: unknown[159.89.125.16]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 4 05:36:55 mail.srvfarm.net postfix/smtpd[727422]: lost connection after AUTH from unknown[159.89.125.16] Oct 4 05:36:59 mail.srvfarm.net postfix/smtpd[731567]: warning: unknown[159.89.125.16]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 4 05:36:59 mail.srvfarm.net postfix/smtpd[731585]: warning: unknown[159.89.125.16]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 4 05:36:59 mail.srvfarm.net postfix/smtpd[731567]: lost connection after AUTH from unknown[159.89.125.16] Oct 4 05:36:59 mail.srvfarm.net postfix/smtpd[731585]: lost connection after AUTH from unknown[159.89.125.16]	2020-10-04 13:13:00
159.89.123.66	attackspambots	/wp-login.php	2020-10-03 06:24:53
159.89.123.66	attackbotsspam	REQUESTED PAGE: /wp-login.php	2020-10-03 01:52:31
159.89.123.66	attack	159.89.123.66 - - [02/Oct/2020:09:17:58 +0100] "POST /wp-login.php HTTP/1.1" 200 2307 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 159.89.123.66 - - [02/Oct/2020:09:18:06 +0100] "POST /wp-login.php HTTP/1.1" 200 2262 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 159.89.123.66 - - [02/Oct/2020:09:18:12 +0100] "POST /wp-login.php HTTP/1.1" 200 2259 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-10-02 22:20:42
159.89.123.66	attack	159.89.123.66 - - [02/Oct/2020:09:17:58 +0100] "POST /wp-login.php HTTP/1.1" 200 2307 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 159.89.123.66 - - [02/Oct/2020:09:18:06 +0100] "POST /wp-login.php HTTP/1.1" 200 2262 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 159.89.123.66 - - [02/Oct/2020:09:18:12 +0100] "POST /wp-login.php HTTP/1.1" 200 2259 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-10-02 18:52:59
159.89.123.66	attackspam	159.89.123.66 - - [02/Oct/2020:07:53:22 +0200] "GET /wp-login.php HTTP/1.1" 200 8796 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 159.89.123.66 - - [02/Oct/2020:07:53:24 +0200] "POST /wp-login.php HTTP/1.1" 200 9047 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 159.89.123.66 - - [02/Oct/2020:07:53:30 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-10-02 15:27:36
159.89.121.102	attack	Sep 26 14:16:43 ny01 sshd[12195]: Failed password for root from 159.89.121.102 port 55452 ssh2 Sep 26 14:16:53 ny01 sshd[12195]: error: maximum authentication attempts exceeded for root from 159.89.121.102 port 55452 ssh2 [preauth] Sep 26 14:16:55 ny01 sshd[12216]: Failed password for root from 159.89.121.102 port 56470 ssh2	2020-09-27 04:26:06
159.89.121.102	attackspambots	$f2bV_matches	2020-09-26 20:33:38
159.89.121.102	attackspam	$f2bV_matches	2020-09-26 12:17:37
159.89.129.36	attackbotsspam	[N10.H2.VM2] Port Scanner Detected Blocked by UFW	2020-09-19 02:49:14
159.89.129.36	attack	Found on Github Combined on 5 lists / proto=6 . srcport=52728 . dstport=7540 . (928)	2020-09-18 18:50:21
159.89.129.36	attackspam	firewall-block, port(s): 5806/tcp	2020-09-04 21:51:03
159.89.129.36	attackbots	TCP (SYN) 159.89.129.36:44410 -> port 5806, len 44	2020-09-04 13:30:08

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 159.89.12.139
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 15569
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;159.89.12.139.			IN	A

;; AUTHORITY SECTION:
.			184	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022700 1800 900 604800 86400

;; Query time: 57 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 27 19:32:32 CST 2022
;; MSG SIZE  rcvd: 106

Host info

139.12.89.159.in-addr.arpa domain name pointer s3.wagahost.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
139.12.89.159.in-addr.arpa	name = s3.wagahost.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
119.254.7.114	attack	$f2bV_matches	2020-08-15 23:57:21
23.231.65.22	attack	TCP (SYN) 23.231.65.22:3229 -> port 23, len 44	2020-08-16 00:23:27
149.56.28.9	attackbots	TCP (SYN) 149.56.28.9:48285 -> port 3389, len 40	2020-08-16 00:12:52
123.99.80.150	attack	Automatic report - Port Scan Attack	2020-08-16 00:21:52
132.148.141.147	attack	132.148.141.147 - - [15/Aug/2020:15:28:12 +0100] "POST /wp-login.php HTTP/1.1" 200 1969 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 132.148.141.147 - - [15/Aug/2020:15:28:14 +0100] "POST /wp-login.php HTTP/1.1" 200 1977 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 132.148.141.147 - - [15/Aug/2020:15:28:16 +0100] "POST /wp-login.php HTTP/1.1" 200 1972 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-08-16 00:10:53
45.143.138.253	attack	Email rejected due to spam filtering	2020-08-16 00:16:57
187.191.96.60	attack	Aug 15 16:27:55 vpn01 sshd[11924]: Failed password for root from 187.191.96.60 port 36088 ssh2 ...	2020-08-16 00:12:31
103.129.223.101	attack	Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-08-15T13:23:58Z and 2020-08-15T13:32:14Z	2020-08-16 00:20:22
51.15.227.83	attackbots	Aug 15 05:48:53 web1 sshd\[8159\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.15.227.83 user=root Aug 15 05:48:55 web1 sshd\[8159\]: Failed password for root from 51.15.227.83 port 57078 ssh2 Aug 15 05:53:12 web1 sshd\[8568\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.15.227.83 user=root Aug 15 05:53:14 web1 sshd\[8568\]: Failed password for root from 51.15.227.83 port 39064 ssh2 Aug 15 05:57:17 web1 sshd\[8971\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.15.227.83 user=root	2020-08-16 00:17:22
80.51.100.49	attackspam	failed_logins	2020-08-15 23:54:39
193.56.28.161	attackspam	[N10.H2.VM2] Port Scanner Detected Blocked by UFW	2020-08-15 23:41:26
40.127.142.154	attackbotsspam	Fail2Ban Ban Triggered HTTP SQL Injection Attempt	2020-08-15 23:47:11
103.10.87.54	attack	(sshd) Failed SSH login from 103.10.87.54 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Aug 15 16:38:52 grace sshd[22047]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.10.87.54 user=root Aug 15 16:38:54 grace sshd[22047]: Failed password for root from 103.10.87.54 port 28378 ssh2 Aug 15 16:57:48 grace sshd[25714]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.10.87.54 user=root Aug 15 16:57:50 grace sshd[25714]: Failed password for root from 103.10.87.54 port 29451 ssh2 Aug 15 17:04:16 grace sshd[26735]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.10.87.54 user=root	2020-08-15 23:43:03
89.248.172.208	attack	Automatic report - Port Scan	2020-08-15 23:54:00
167.99.69.130	attackspambots	Aug 15 14:23:07 PorscheCustomer sshd[25776]: Failed password for root from 167.99.69.130 port 42188 ssh2 Aug 15 14:28:01 PorscheCustomer sshd[25914]: Failed password for root from 167.99.69.130 port 57242 ssh2 ...	2020-08-16 00:22:42

Recently Reported IPs

159.89.119.100	159.89.120.29	159.89.122.191	159.89.125.253
159.89.129.166	159.89.127.159	159.89.131.161	159.89.130.195
159.89.126.130	159.89.129.76	159.89.133.209	159.89.133.50
159.89.122.231	159.89.134.163	159.89.134.30	159.89.135.97
159.89.135.135	159.89.136.178	159.89.136.1	159.89.136.180