This IP address has been reported a total of
364
times from
85 distinct
sources.
139.59.11.104 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
2026-08-23T17:42:52.493055front1.int sshd[140020]: Invalid user tch from 139.59.11.104 port 52894
20 ...
show more2026-08-23T17:42:52.493055front1.int sshd[140020]: Invalid user tch from 139.59.11.104 port 52894
2026-08-23T17:42:52.639534front1.int sshd[140020]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.11.104
2026-08-23T17:42:54.141727front1.int sshd[140020]: Failed password for invalid user tch from 139.59.11.104 port 52894 ssh2
2026-08-23T18:27:26.451389front1.int sshd[162311]: Invalid user dkg from 139.59.11.104 port 35216
...
show less
Aug 23 20:22:33 ns3129952 sshd[2651249]: Invalid user tch from 139.59.11.104 port 50470
Aug 23 20:22 ...
show moreAug 23 20:22:33 ns3129952 sshd[2651249]: Invalid user tch from 139.59.11.104 port 50470
Aug 23 20:22:35 ns3129952 sshd[2651249]: Failed password for invalid user tch from 139.59.11.104 port 50470 ssh2
Aug 23 20:22:33 ns3129952 sshd[2651249]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.11.104
Aug 23 20:22:33 ns3129952 sshd[2651249]: Invalid user tch from 139.59.11.104 port 50470
Aug 23 20:22:35 ns3129952 sshd[2651249]: Failed password for invalid user tch from 139.59.11.104 port 50470 ssh2
Aug 23 20:22:36 ns3129952 sshd[2651249]: Connection closed by invalid user tch 139.59.11.104 port 50470 [preauth]
...
show less
2026-08-24T00:26:11.072311+08:00 *** sshd[2435702]: pam_unix(sshd:auth): authentication failure; lo ...
show more2026-08-24T00:26:11.072311+08:00 *** sshd[2435702]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.11.104
2026-08-24T00:26:12.936699+08:00 *** sshd[2435702]: Failed password for invalid user zra from 139.59.11.104 port 42810 ssh2
2026-08-24T01:11:37.715192+08:00 *** sshd[2454387]: Invalid user tch from 139.59.11.104 port 58528
show less
Honeypot hit: Brute-force attack detected on 22/SSH
• Credential used: zra:zra
• Number of login att ...
show moreHoneypot hit: Brute-force attack detected on 22/SSH
• Credential used: zra:zra
• Number of login attempts: 1
• Client: SSH-2.0-Go
show less
Automated report: 66 attacks in 24h targeting cwp2 via SSH. SSH/brute_force: 33 on cwp2; SSH/invalid ...
show moreAutomated report: 66 attacks in 24h targeting cwp2 via SSH. SSH/brute_force: 33 on cwp2; SSH/invalid_user: 33 on cwp2
show less
Honeypot hit: Brute-force attack detected on 22/SSH
• Credential used: jb:1
• Number of login attemp ...
show moreHoneypot hit: Brute-force attack detected on 22/SSH
• Credential used: jb:1
• Number of login attempts: 1
• Client: SSH-2.0-Go
show less
2026-08-23T04:21:26.656303+03:00 radionet sshd[1796353]: Invalid user xj from 139.59.11.104 port 484 ...
show more2026-08-23T04:21:26.656303+03:00 radionet sshd[1796353]: Invalid user xj from 139.59.11.104 port 48422
show less
2026-08-22T16:54:05.663229front1.int sshd[93713]: Invalid user sv from 139.59.11.104 port 37418
2026 ...
show more2026-08-22T16:54:05.663229front1.int sshd[93713]: Invalid user sv from 139.59.11.104 port 37418
2026-08-22T16:54:05.806894front1.int sshd[93713]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.11.104
2026-08-22T16:54:07.937449front1.int sshd[93713]: Failed password for invalid user sv from 139.59.11.104 port 37418 ssh2
2026-08-22T17:36:54.559950front1.int sshd[113975]: Invalid user ib from 139.59.11.104 port 37916
...
show less
Aug 22 19:34:07 ns3129952 sshd[1639670]: Invalid user sv from 139.59.11.104 port 40526
Aug 22 19:34: ...
show moreAug 22 19:34:07 ns3129952 sshd[1639670]: Invalid user sv from 139.59.11.104 port 40526
Aug 22 19:34:09 ns3129952 sshd[1639670]: Failed password for invalid user sv from 139.59.11.104 port 40526 ssh2
Aug 22 19:34:07 ns3129952 sshd[1639670]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.11.104
Aug 22 19:34:07 ns3129952 sshd[1639670]: Invalid user sv from 139.59.11.104 port 40526
Aug 22 19:34:09 ns3129952 sshd[1639670]: Failed password for invalid user sv from 139.59.11.104 port 40526 ssh2
Aug 22 19:34:10 ns3129952 sshd[1639670]: Connection closed by invalid user sv 139.59.11.104 port 40526 [preauth]
...
show less
2026-08-23T00:23:22.441083+08:00 *** sshd[1840027]: Invalid user sv from 139.59.11.104 port 49534
2 ...
show more2026-08-23T00:23:22.441083+08:00 *** sshd[1840027]: Invalid user sv from 139.59.11.104 port 49534
2026-08-23T00:23:22.515721+08:00 *** sshd[1840027]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.11.104
2026-08-23T00:23:24.295610+08:00 *** sshd[1840027]: Failed password for invalid user sv from 139.59.11.104 port 49534 ssh2
show less
Honeypot hit: Brute-force attack detected on 22/SSH
• Credential used: fi:123
• Number of login atte ...
show moreHoneypot hit: Brute-force attack detected on 22/SSH
• Credential used: fi:123
• Number of login attempts: 1
• Client: SSH-2.0-Go
show less
Hacking
SSH
Anonymous
Aug 22 22:27:05 jongkong sshd[21989]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eu ...
show moreAug 22 22:27:05 jongkong sshd[21989]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.11.104
...
show less