106.59.139.70

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
210 reports
95 reporters · latest 17 hours ago
ISP
CHINANET YunNan PROVINCE NETWORK
Usage Type
Fixed Line ISP
ASN
AS4134
Domain Name
chinatelecom.cn
Country
🇨🇳 China
City
Kunming, Yunnan
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
210 from 95 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 73 🇸🇪 Sweden 24 🇺🇸 United States of America 24
Most common categories SSH 189 Brute-Force 186 Port Scan 7 Hacking 6 Web App Attack 3
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 jaxyral
Cowrie SSH/Telnet honeypot: 4 malicious events over 24h. 2 SSH/Telnet login attempts; creds tried: root/Knowledgedump366, ubuntu/Knowledgedump366. Dest ports: 2222. First 2026-11-05T19:01:10+00:00, last 2026-11-05T19:01:15+00:00 UTC.
Brute-Force SSH
🇩🇪 Panter
Bruteforce detected by fail2ban SSH
Brute-Force SSH
🇨🇦 KIsmay
Brute-Force SSH
🇸🇪 ljo
Brute-Force SSH
Anonymous
SSH honeypot on port 22: 1 failed password attempt. Automated report from an SSH deception service.
Brute-Force SSH
🇸🇪 ljo
Brute-Force SSH
🇫🇷 otiima
Nov 5 16:50:28 box sshd[3731543]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.59.139.70 user=root Nov 5 16:50:30 box sshd[3731543]: Failed password for root from 106.59.139.70 port 3105 ssh2 ...
Brute-Force SSH
🇵🇱 hostero
Brute-Force SSH
🇩🇪 dirkey
SSH
🇩🇪 SELECT-IT Beratung und IT Dienstleistung GmbH
Brute-Force SSH
🇩🇪 cybergecko.de
Brute-Force SSH
🇩🇪 itxworks.com
SSH brute-force attempt. Auto-reported by CrowdSec.
Brute-Force SSH
🇩🇪 neoadvanced
Brute-Force SSH
🇩🇪 hostero
Brute-Force SSH
🇩🇪 hostopya.com
SSH brute-force: 8 failed authentication attempts from this IP within 15 minutes. Detected by log analysis on our server.
Brute-Force SSH

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇻🇳 171.250.162.65
🇻🇳 118.70.181.126
🇳🇱 93.123.109.167
🇮🇶 91.106.34.205
🇬🇷 79.103.132.150
🇺🇸 73.125.238.124
🇺🇸 72.174.136.141
🇺🇸 52.248.42.25
🇨🇦 45.198.224.231
🇬🇧 35.203.211.95
🇺🇸 34.11.30.4
🇫🇮 147.185.133.205
🇸🇾 78.155.65.146
🇺🇸 35.231.239.255
🇳🇱 192.253.248.226
🇺🇸 172.104.209.50
feedback