This IP address has been reported a total of
109
times from
80 distinct
sources.
106.59.139.165 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 43
reports;
United States of America
with 15
reports;
France
with 11
reports.
The most common categories in these recent reports were:
SSH
95
times;
Brute-Force
95
times;
Port Scan
6
times;
Hacking
5
times;
Web App Attack
3
times;
Other
4
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Oct 19 06:49:58 web sshd[26385]: Invalid user ubuntu from 106.59.139.165 port 18032
Oct 19 06:49:58 ...
show moreOct 19 06:49:58 web sshd[26385]: Invalid user ubuntu from 106.59.139.165 port 18032
Oct 19 06:49:58 web sshd[26385]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.59.139.165
Oct 19 06:50:00 web sshd[26385]: Failed password for invalid user ubuntu from 106.59.139.165 port 18032 ssh2
...
show less
Cowrie Honeypot: 2 unauthorised SSH/Telnet login attempts between 2026-10-19T04:38:13Z and 2026-10-1 ...
show moreCowrie Honeypot: 2 unauthorised SSH/Telnet login attempts between 2026-10-19T04:38:13Z and 2026-10-19T04:38:17Z
show less
2026-10-19 04:21:20,660 quad proftpd[2489604] 2a03:4000:3e:312:360a:466c:8ea1:45b9 (106.59.139.165[1 ...
show more2026-10-19 04:21:20,660 quad proftpd[2489604] 2a03:4000:3e:312:360a:466c:8ea1:45b9 (106.59.139.165[106.59.139.165]): USER root: no such user found from 106.59.139.165 [106.59.139.165] to 2.56.97.107:22
show less
Oct 19 04:01:46 Veslys sshd[6150]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid= ...
show moreOct 19 04:01:46 Veslys sshd[6150]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.59.139.165 user=ubuntu
Oct 19 04:01:48 Veslys sshd[6150]: Failed password for ubuntu from 106.59.139.165 port 32245 ssh2
Oct 19 04:01:49 Veslys sshd[7597]: Invalid user honoredone from 106.59.139.165 port 32866
...
show less
Oct 19 05:58:01 dev sshd[401061]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 ...
show moreOct 19 05:58:01 dev sshd[401061]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.59.139.165 user=root
Oct 19 05:58:04 dev sshd[401061]: Failed password for root from 106.59.139.165 port 14905 ssh2
Oct 19 05:58:04 dev sshd[401100]: Invalid user ubuntu from 106.59.139.165 port 15514
Oct 19 05:58:04 dev sshd[401100]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.59.139.165
Oct 19 05:58:06 dev sshd[401100]: Failed password for invalid user ubuntu from 106.59.139.165 port 15514 ssh2
show less
2026-10-19T05:48:24.769065+02:00 www sshd[2098195]: pam_unix(sshd:auth): authentication failure; log ...
show more2026-10-19T05:48:24.769065+02:00 www sshd[2098195]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.59.139.165
2026-10-19T05:48:26.738538+02:00 www sshd[2098195]: Failed password for invalid user ubuntu from 106.59.139.165 port 33099 ssh2
2026-10-19T05:48:27.498470+02:00 www sshd[2098197]: Invalid user devcircle from 106.59.139.165 port 33840
...
show less
SSH brute-force: 8 failed authentication attempts from this IP within 15 minutes. Detected by log an ...
show moreSSH brute-force: 8 failed authentication attempts from this IP within 15 minutes. Detected by log analysis on our server.
show less
2026-10-19T03:05:31.271512+00:00 my-vps sshd-session[1053710]: Failed password for root from 106.59. ...
show more2026-10-19T03:05:31.271512+00:00 my-vps sshd-session[1053710]: Failed password for root from 106.59.139.165 port 6163 ssh2
2026-10-19T03:05:30.839724+00:00 my-vps sshd-session[1053713]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.59.139.165
2026-10-19T03:05:32.066876+00:00 my-vps sshd-session[1053713]: Failed password for invalid user ubuntu from 106.59.139.165 port 6943 ssh2
...
show less
Oct 19 03:48:44 dev sshd[1944676]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid= ...
show moreOct 19 03:48:44 dev sshd[1944676]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.59.139.165
Oct 19 03:48:47 dev sshd[1944676]: Failed password for invalid user ubuntu from 106.59.139.165 port 15023 ssh2
Oct 19 03:48:47 dev sshd[1944678]: Invalid user dirtbikerider from 106.59.139.165 port 15834
Oct 19 03:48:47 dev sshd[1944678]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.59.139.165
Oct 19 03:48:49 dev sshd[1944678]: Failed password for invalid user dirtbikerider from 106.59.139.165 port 15834 ssh2
...
show less
2026-10-19T04:41:05.829521+02:00 my.hidden.domain sshd[1324952]: Connection closed by authenticating ...
show more2026-10-19T04:41:05.829521+02:00 my.hidden.domain sshd[1324952]: Connection closed by authenticating user root 106.59.139.165 port 27463 [preauth]
...
show less
Oct 19 03:12:18 box sshd[367919]: Failed password for invalid user ubuntu from 106.59.139.165 port 1 ...
show moreOct 19 03:12:18 box sshd[367919]: Failed password for invalid user ubuntu from 106.59.139.165 port 11754 ssh2
Oct 19 03:12:16 box sshd[367898]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.59.139.165 user=root
Oct 19 03:12:18 box sshd[367898]: Failed password for root from 106.59.139.165 port 11034 ssh2
...
show less
Detected by CrowdSec on web-6405131d: CrowdSec: crowdsecurity/ssh-slow-bf | ASN: 4134 (Chinanet) | C ...
show moreDetected by CrowdSec on web-6405131d: CrowdSec: crowdsecurity/ssh-slow-bf | ASN: 4134 (Chinanet) | Country: CN | Range: 106.59.138.0/23
show less
