59.125.248.139

Basic Info

City: unknown

Region: unknown

Country: Taiwan, Province of China

Internet Service Provider: Chunghwa Telecom Co. Ltd.

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbotsspam	Brute-force general attack.	2020-09-26 03:50:21
attackbotsspam	Brute-force general attack.	2020-09-25 20:35:30
attackbotsspam	Email login attempts - missing mail login name (IMAP)	2020-09-25 12:12:30
attackspam	Dovecot Invalid User Login Attempt.	2020-08-26 21:28:42
attackbots	(imapd) Failed IMAP login from 59.125.248.139 (TW/Taiwan/59-125-248-139.HINET-IP.hinet.net): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Aug 21 08:22:23 ir1 dovecot[3110802]: imap-login: Disconnected (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=59.125.248.139, lip=5.63.12.44, session=	2020-08-21 17:39:04
attack	(imapd) Failed IMAP login from 59.125.248.139 (TW/Taiwan/59-125-248-139.HINET-IP.hinet.net): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Jun 20 12:37:38 ir1 dovecot[2885757]: imap-login: Disconnected (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=59.125.248.139, lip=5.63.12.44, TLS: Connection closed, session=	2020-06-20 19:31:33
attackspam	Autoban 59.125.248.139 ABORTED AUTH	2019-11-18 18:52:28

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 59.125.248.139
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 24087
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;59.125.248.139.			IN	A

;; AUTHORITY SECTION:
.			469	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019111800 1800 900 604800 86400

;; Query time: 116 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Nov 18 18:52:24 CST 2019
;; MSG SIZE  rcvd: 118

Host info

139.248.125.59.in-addr.arpa domain name pointer 59-125-248-139.HINET-IP.hinet.net.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
139.248.125.59.in-addr.arpa	name = 59-125-248-139.HINET-IP.hinet.net.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
106.12.160.6	attack	2020-09-30T10:45:43+0200 Failed SSH Authentication/Brute Force Attack.(Server 2)	2020-09-30 18:44:44
185.12.111.75	attackbots	/wp-login.php	2020-09-30 19:05:51
20.191.88.144	attackspam	malicious Brute-Force reported by https://www.patrick-binder.de ...	2020-09-30 18:50:40
117.248.170.28	attackspambots	Port probing on unauthorized port 23	2020-09-30 18:50:10
189.94.216.22	attackbots	MAIL: User Login Brute Force Attempt	2020-09-30 18:59:00
172.105.43.21	attackbots	172.105.43.21 - - [30/Sep/2020:04:11:58 +0200] "\x16\x03\x01\x00u\x01\x00\x00q\x03\x03Z\xA25\xB2\x0E\x04\x1A\xCD,\xAA\x5C\xFE\xD6\x09" 400 166 "-" "-"	2020-09-30 19:22:52
67.205.129.197	attackbotsspam	67.205.129.197 - - [30/Sep/2020:12:11:22 +0200] "GET /wp-login.php HTTP/1.1" 200 8712 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 67.205.129.197 - - [30/Sep/2020:12:11:25 +0200] "POST /wp-login.php HTTP/1.1" 200 9008 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 67.205.129.197 - - [30/Sep/2020:12:11:26 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-09-30 19:11:58
176.96.235.191	attackspambots	Automatic report - Port Scan Attack	2020-09-30 19:18:53
77.247.127.202	attackspambots	Telnet/23 MH Probe, Scan, BF, Hack -	2020-09-30 18:41:39
193.118.53.212	attackspambots	[N1.H1.VM1] Port Scanner Detected Blocked by UFW	2020-09-30 18:50:59
45.149.16.250	attackbots	SSH brute force	2020-09-30 18:55:50
113.110.203.202	attack	SSH Invalid Login	2020-09-30 19:07:57
114.204.218.154	attack	Brute force attempt	2020-09-30 18:56:17
145.239.87.35	attackbots	Invalid user hmn from 145.239.87.35 port 49104	2020-09-30 19:08:10
111.72.197.38	attackspambots	Sep 30 00:22:17 srv01 postfix/smtpd\[11533\]: warning: unknown\[111.72.197.38\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 30 00:29:08 srv01 postfix/smtpd\[11634\]: warning: unknown\[111.72.197.38\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 30 00:29:20 srv01 postfix/smtpd\[11634\]: warning: unknown\[111.72.197.38\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 30 00:29:36 srv01 postfix/smtpd\[11634\]: warning: unknown\[111.72.197.38\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 30 00:29:54 srv01 postfix/smtpd\[11634\]: warning: unknown\[111.72.197.38\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2020-09-30 19:08:22

Recently Reported IPs

89.138.187.221	249.236.178.65	207.225.132.61	15.159.192.107
183.89.112.224	103.227.244.225	82.103.128.170	171.113.54.30
49.67.160.167	59.38.126.238	172.25.113.19	103.217.159.223
77.35.182.38	104.237.152.149	103.216.48.78	103.215.193.88
85.145.24.53	218.76.255.16	212.83.149.96	103.214.41.98