This IP address has been reported a total of
114
times from
65 distinct
sources.
139.59.243.9 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
Jul 11 23:15:37 srv2 sshd[1471303]: Invalid user enrico from 139.59.243.9 port 48210
Jul 11 23:17:48 ...
show moreJul 11 23:15:37 srv2 sshd[1471303]: Invalid user enrico from 139.59.243.9 port 48210
Jul 11 23:17:48 srv2 sshd[1471418]: Invalid user oxidized from 139.59.243.9 port 45282
Jul 11 23:19:52 srv2 sshd[1471509]: Invalid user lm from 139.59.243.9 port 58050
Jul 11 23:24:10 srv2 sshd[1471859]: Invalid user steam from 139.59.243.9 port 44402
Jul 11 23:26:21 srv2 sshd[1472040]: Invalid user moises from 139.59.243.9 port 51470
...
show less
Brute-Force
SSH
Anonymous
Jul 11 20:55:48 marseille sshd[1911964]: Invalid user rex from 139.59.243.9 port 39964
Jul 11 20:58: ...
show moreJul 11 20:55:48 marseille sshd[1911964]: Invalid user rex from 139.59.243.9 port 39964
Jul 11 20:58:01 marseille sshd[1912257]: Invalid user forest from 139.59.243.9 port 34026
Jul 11 21:00:06 marseille sshd[1912548]: Invalid user operador from 139.59.243.9 port 42498
Jul 11 21:02:09 marseille sshd[1912844]: Invalid user compras from 139.59.243.9 port 41930
Jul 11 21:04:15 marseille sshd[1913114]: Invalid user mac from 139.59.243.9 port 53772
...
show less
Port Scan
Hacking
Brute-Force
Bad Web Bot
Web App Attack
SSH
Anonymous
Jul 11 22:53:54 srv2 sshd[1468740]: Invalid user ubuntu from 139.59.243.9 port 38860
Jul 11 22:56:11 ...
show moreJul 11 22:53:54 srv2 sshd[1468740]: Invalid user ubuntu from 139.59.243.9 port 38860
Jul 11 22:56:11 srv2 sshd[1468933]: Invalid user rex from 139.59.243.9 port 53414
Jul 11 22:58:23 srv2 sshd[1469047]: Invalid user forest from 139.59.243.9 port 37920
Jul 11 23:00:26 srv2 sshd[1469812]: Invalid user operador from 139.59.243.9 port 53292
Jul 11 23:02:30 srv2 sshd[1469952]: Invalid user compras from 139.59.243.9 port 33980
...
show less
2026-07-11T22:48:50.890247+02:00 sso-host-01.sso.srvfarm.net sshd-session[73363]: Disconnected from ...
show more2026-07-11T22:48:50.890247+02:00 sso-host-01.sso.srvfarm.net sshd-session[73363]: Disconnected from authenticating user root 139.59.243.9 port 57644 [preauth]
2026-07-11T22:52:24.412937+02:00 sso-host-01.sso.srvfarm.net sshd-session[73542]: Disconnected from authenticating user root 139.59.243.9 port 57226 [preauth]
2026-07-11T22:54:40.909092+02:00 sso-host-01.sso.srvfarm.net sshd-session[73669]: Invalid user ubuntu from 139.59.243.9 port 39460
2026-07-11T22:54:41.100210+02:00 sso-host-01.sso.srvfarm.net sshd-session[73669]: Disconnected from invalid user ubuntu 139.59.243.9 port 39460 [preauth]
2026-07-11T22:56:59.162109+02:00 sso-host-01.sso.srvfarm.net sshd-session[73811]: Invalid user rex from 139.59.243.9 port 59468
show less
Report 2549194 with IP 3596761 for SSH brute-force attack by source 3591419 via ssh-honeypot/0.2.0+h ...
show moreReport 2549194 with IP 3596761 for SSH brute-force attack by source 3591419 via ssh-honeypot/0.2.0+http
show less
2026-07-11T20:46:29.951368+00:00 ws1.trivox.sh sshd-session[1083437]: Disconnected from authenticati ...
show more2026-07-11T20:46:29.951368+00:00 ws1.trivox.sh sshd-session[1083437]: Disconnected from authenticating user root 139.59.243.9 port 50062 [preauth]
2026-07-11T20:52:03.470231+00:00 ws1.trivox.sh sshd-session[1083979]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.243.9 user=root
2026-07-11T20:52:05.241689+00:00 ws1.trivox.sh sshd-session[1083979]: Failed password for root from 139.59.243.9 port 53802 ssh2
2026-07-11T20:52:05.687170+00:00 ws1.trivox.sh sshd-session[1083979]: Disconnected from authenticating user root 139.59.243.9 port 53802 [preauth]
...
show less
Jul 11 11:56:40 stories sshd[3037154]: Invalid user adam from 139.59.243.9 port 57750
Jul 11 12:08:0 ...
show moreJul 11 11:56:40 stories sshd[3037154]: Invalid user adam from 139.59.243.9 port 57750
Jul 11 12:08:04 stories sshd[3038572]: Invalid user minecraft from 139.59.243.9 port 40502
Jul 11 12:09:56 stories sshd[3038794]: Invalid user rancher from 139.59.243.9 port 47842
Jul 11 12:11:45 stories sshd[3038996]: Invalid user hik from 139.59.243.9 port 45242
Jul 11 12:13:28 stories sshd[3039193]: Invalid user vpn from 139.59.243.9 port 49334
...
show less
2026-07-11T21:07:50.917966+02:00 gw-de12-01.guestgw.net sshd[962006]: Invalid user minecraft from 13 ...
show more2026-07-11T21:07:50.917966+02:00 gw-de12-01.guestgw.net sshd[962006]: Invalid user minecraft from 139.59.243.9 port 35594
2026-07-11T21:07:51.129388+02:00 gw-de12-01.guestgw.net sshd[962006]: Disconnected from invalid user minecraft 139.59.243.9 port 35594 [preauth]
2026-07-11T21:09:43.056495+02:00 gw-de12-01.guestgw.net sshd[962557]: Invalid user rancher from 139.59.243.9 port 47248
2026-07-11T21:09:43.276668+02:00 gw-de12-01.guestgw.net sshd[962557]: Disconnected from invalid user rancher 139.59.243.9 port 47248 [preauth]
2026-07-11T21:11:33.604389+02:00 gw-de12-01.guestgw.net sshd[963266]: Invalid user hik from 139.59.243.9 port 51730
show less
(sshd) Failed SSH login from 139.59.243.9 (SG/Singapore/-): 5 in the last 3600 secs; Ports: *; Direc ...
show more(sshd) Failed SSH login from 139.59.243.9 (SG/Singapore/-): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jul 11 14:03:05 15574 sshd[31299]: Invalid user adam from 139.59.243.9 port 38076
Jul 11 14:03:07 15574 sshd[31299]: Failed password for invalid user adam from 139.59.243.9 port 38076 ssh2
Jul 11 14:08:51 15574 sshd[1666]: Invalid user minecraft from 139.59.243.9 port 40516
Jul 11 14:08:53 15574 sshd[1666]: Failed password for invalid user minecraft from 139.59.243.9 port 40516 ssh2
Jul 11 14:10:43 15574 sshd[2723]: Invalid user rancher from 139.59.243.9 port 45188
show less
2026-07-11T20:30:23.791239+02:00 dcs1 sshd[2814293]: Invalid user lee from 139.59.243.9 port 37326
2 ...
show more2026-07-11T20:30:23.791239+02:00 dcs1 sshd[2814293]: Invalid user lee from 139.59.243.9 port 37326
2026-07-11T20:32:42.551611+02:00 dcs1 sshd[2814756]: Invalid user ubuntu from 139.59.243.9 port 54982
2026-07-11T20:34:55.115894+02:00 dcs1 sshd[2815184]: Invalid user testuser from 139.59.243.9 port 34132
2026-07-11T20:37:07.649452+02:00 dcs1 sshd[2815664]: Invalid user admin from 139.59.243.9 port 58414
2026-07-11T20:39:21.076772+02:00 dcs1 sshd[2816115]: Invalid user caroline from 139.59.243.9 port 49718
...
show less
Jul 11 20:10:14 remote.srvfarm.net sshd[1998437]: Disconnected from authenticating user admin 139.59 ...
show moreJul 11 20:10:14 remote.srvfarm.net sshd[1998437]: Disconnected from authenticating user admin 139.59.243.9 port 48328 [preauth]
Jul 11 20:12:35 remote.srvfarm.net sshd[1999051]: Invalid user jason from 139.59.243.9 port 34478
Jul 11 20:12:35 remote.srvfarm.net sshd[1999051]: Disconnected from invalid user jason 139.59.243.9 port 34478 [preauth]
Jul 11 20:14:57 remote.srvfarm.net sshd[1999631]: Disconnected from authenticating user root 139.59.243.9 port 48530 [preauth]
Jul 11 20:17:02 remote.srvfarm.net sshd[2000194]: Disconnected from authenticating user root 139.59.243.9 port 36170 [preauth]
show less
Brute-Force
Showing 1 to
15
of 114 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩