JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 139.159.206.165

139.159.206.165 was found in our database!

This IP was reported 79 times. Confidence of Abuse is 0%: ?

ISP	Huawei Public Cloud Service (Huawei Software Technologies Co.,Ltd)
Usage Type	Data Center/Web Hosting/Transit
ASN	AS55990
Hostname(s)	ecs-139-159-206-165.compute.hwclouds-dns.com
Domain Name	huawei.com
Country	🇨🇳 China
City	Guangzhou, Guangdong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 139.159.206.165

Whois 139.159.206.165

IP Abuse Reports for 139.159.206.165:

This IP address has been reported a total of 79 times from 59 distinct sources. 139.159.206.165 was first reported on March 25th 2026, and the most recent report was 4 months ago.

Old Reports: The most recent abuse report for this IP address is from 4 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 evicky2002	2026-04-30 13:04:29 (4 months ago)	Confirmed malicious by STILWaters CTI platform (score=97, sources=1)	Hacking Brute-Force SSH
🇧🇷 helix	2026-04-09 06:07:16 (5 months ago)	Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ... show more Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts). show less	Brute-Force SSH
🇧🇷 helix	2026-04-01 15:09:19 (5 months ago)	Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ... show more Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts). show less	Brute-Force SSH
🇹🇷 rtbh.com.tr	2026-03-27 20:12:18 (5 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇼 bluecloudwork	2026-03-27 09:46:30 (5 months ago)	Fail2Ban - Brute-force SSH server ...	Brute-Force SSH
🇺🇸 bigscoots.com	2026-03-27 09:04:28 (5 months ago)	139.159.206.165 (CN/China/ecs-139-159-206-165.compute.hwclouds-dns.com), 5 distributed sshd attacks ... show more 139.159.206.165 (CN/China/ecs-139-159-206-165.compute.hwclouds-dns.com), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Mar 27 04:01:48 13877 sshd[16280]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.159.206.165 user=root Mar 27 04:01:51 13877 sshd[16280]: Failed password for root from 139.159.206.165 port 47438 ssh2 Mar 27 04:04:15 13877 sshd[16516]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.62.117.67 user=root Mar 27 03:48:18 13877 sshd[15059]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.159.206.165 user=root Mar 27 03:48:20 13877 sshd[15059]: Failed password for root from 139.159.206.165 port 50832 ssh2 IP Addresses Blocked: show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-03-27 08:41:28 (5 months ago)	139.159.206.165 (CN/China/ecs-139-159-206-165.compute.hwclouds-dns.com), 6 distributed sshd attacks ... show more 139.159.206.165 (CN/China/ecs-139-159-206-165.compute.hwclouds-dns.com), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Mar 27 03:41:24 10231 sshd[4032]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.159.206.165 user=root Mar 27 03:22:47 10231 sshd[2152]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.243.29.61 user=root Mar 27 03:09:07 10231 sshd[923]: Failed password for root from 60.243.29.61 port 47868 ssh2 Mar 27 03:09:05 10231 sshd[923]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.243.29.61 user=root Mar 27 02:52:33 10231 sshd[31901]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.243.29.61 user=root Mar 27 02:52:35 10231 sshd[31901]: Failed password for root from 60.243.29.61 port 36164 ssh2 IP Addresses Blocked: show less	Brute-Force SSH
Anonymous	2026-03-27 07:48:29 (5 months ago)	ssh bruteforce	Brute-Force SSH
🇺🇸 bigscoots.com	2026-03-27 07:29:09 (5 months ago)	139.159.206.165 (CN/China/ecs-139-159-206-165.compute.hwclouds-dns.com), 5 distributed sshd attacks ... show more 139.159.206.165 (CN/China/ecs-139-159-206-165.compute.hwclouds-dns.com), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Mar 27 02:26:51 13308 sshd[19695]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.159.206.165 user=root Mar 27 02:26:53 13308 sshd[19695]: Failed password for root from 139.159.206.165 port 34956 ssh2 Mar 27 02:22:31 13308 sshd[18834]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.203.213.8 user=root Mar 27 02:22:33 13308 sshd[18834]: Failed password for root from 41.203.213.8 port 47648 ssh2 Mar 27 02:29:02 13308 sshd[20123]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.203.213.8 user=root IP Addresses Blocked: show less	Brute-Force SSH
🇩🇪 Thomas Barth	2026-03-27 07:13:54 (5 months ago)	2026-03-27T08:13:53.497729+01:00 server sshd[2468]: Timeout before authentication for connection fro ... show more 2026-03-27T08:13:53.497729+01:00 server sshd[2468]: Timeout before authentication for connection from 139.159.206.165 to 192.168.110.2, pid = 5134 ... show less	Brute-Force SSH
🇨🇳 pengpeng	2026-03-27 06:21:13 (5 months ago)	monitor: on VM-0-7-ubuntu \| port: 22 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan SSH
🇩🇪 ghostwarriors	2026-03-27 06:20:27 (5 months ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
🇺🇸 bigscoots.com	2026-03-27 04:07:53 (5 months ago)	139.159.206.165 (CN/China/ecs-139-159-206-165.compute.hwclouds-dns.com), 5 distributed sshd attacks ... show more 139.159.206.165 (CN/China/ecs-139-159-206-165.compute.hwclouds-dns.com), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Mar 26 22:40:03 16625 sshd[3352]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.224.167.65 user=root Mar 26 22:40:06 16625 sshd[3352]: Failed password for root from 112.224.167.65 port 42736 ssh2 Mar 26 23:07:42 16625 sshd[5404]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.159.206.165 user=root Mar 26 23:02:57 16625 sshd[5046]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.224.167.65 user=root Mar 26 23:02:58 16625 sshd[5046]: Failed password for root from 112.224.167.65 port 62616 ssh2 IP Addresses Blocked: 112.224.167.65 (CN/China/-) show less	Brute-Force SSH
🇯🇵 www.winos.me	2026-03-27 03:47:02 (5 months ago)	Default ban by fail2ban	Brute-Force Web App Attack SSH
🇧🇪 boxed-it	2026-03-27 03:28:42 (5 months ago)	2026-03-27T04:24:10.884361+01:00 poseidon sshd-session[1882127]: Failed password for root from 139.1 ... show more 2026-03-27T04:24:10.884361+01:00 poseidon sshd-session[1882127]: Failed password for root from 139.159.206.165 port 44624 ssh2 2026-03-27T04:28:39.780038+01:00 poseidon sshd-session[1889659]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.159.206.165 user=root 2026-03-27T04:28:41.797416+01:00 poseidon sshd-session[1889659]: Failed password for root from 139.159.206.165 port 41898 ssh2 show less	Brute-Force SSH

Showing 1 to 15 of 79 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2001:470:1:fb5::174

🇺🇸 162.35.116.238

🇸🇬 114.119.143.114

🇻🇳 113.161.222.150

🇮🇳 103.142.112.190

🇺🇸 103.21.11.36

🇺🇸 91.230.168.130

🇺🇸 70.184.72.177

🇺🇸 57.141.6.60

🇺🇸 45.56.97.67

🇬🇧 35.246.56.73

🇺🇸 20.80.93.123

🇱🇹 213.176.24.43

🇨🇳 152.136.130.29

🇮🇳 122.168.197.138

🇹🇼 111.70.29.158

🇫🇷 91.231.89.54

🇺🇸 23.128.248.168

🇺🇸 3.83.245.221

🇺🇸 195.184.76.60