This IP address has been reported a total of
6
times from
6 distinct
sources.
139.59.31.18 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Jul 27 23:40:20 gateway sshd[2724905]: Invalid user ghc from 139.59.31.18 port 59456
Jul 27 23:43:41 ...
show moreJul 27 23:40:20 gateway sshd[2724905]: Invalid user ghc from 139.59.31.18 port 59456
Jul 27 23:43:41 gateway sshd[2727005]: Invalid user mcr from 139.59.31.18 port 39206
Jul 27 23:45:18 gateway sshd[2728102]: Invalid user bfx from 139.59.31.18 port 38628
Jul 27 23:47:31 gateway sshd[2729586]: Invalid user pwg from 139.59.31.18 port 53670
Jul 27 23:49:26 gateway sshd[2730750]: Invalid user ehq from 139.59.31.18 port 40562
...
show less
2026-07-26T01:58:37.704106+08:00 nekoaru-shanghai-1 sshd-session[2381044]: Failed password for inval ...
show more2026-07-26T01:58:37.704106+08:00 nekoaru-shanghai-1 sshd-session[2381044]: Failed password for invalid user adam from 139.59.31.18 port 46966 ssh2
2026-07-26T02:06:48.374070+08:00 nekoaru-shanghai-1 sshd-session[2381725]: Connection from 139.59.31.18 port 46766 on 192.168.12.24 port 41022 rdomain ""
2026-07-26T02:06:48.995669+08:00 nekoaru-shanghai-1 sshd-session[2381725]: Invalid user adam from 139.59.31.18 port 46766
...
show less
Jun 2 10:53:19 ihweb003 sshd[14757]: Connection from 139.59.31.18 port 40064 on 139.59.173.177 port ...
show moreJun 2 10:53:19 ihweb003 sshd[14757]: Connection from 139.59.31.18 port 40064 on 139.59.173.177 port 22
Jun 2 10:53:19 ihweb003 sshd[14757]: Did not receive identification string from 139.59.31.18 port 40064
Jun 2 10:57:19 ihweb003 sshd[15387]: Connection from 139.59.31.18 port 36790 on 139.59.173.177 port 22
Jun 2 10:57:19 ihweb003 sshd[15387]: User r.r from 139.59.31.18 not allowed because none of user's groups are listed in AllowGroups
Jun 2 10:57:20 ihweb003 sshd[15387]: Received disconnect from 139.59.31.18 port 36790:11: Normal Shutdown, Thank you for playing [preauth]
Jun 2 10:57:20 ihweb003 sshd[15387]: Disconnected from 139.59.31.18 port 36790 [preauth]
Jun 2 11:02:22 ihweb003 sshd[16182]: Connection from 139.59.31.18 port 50074 on 139.59.173.177 port 22
Jun 2 11:02:22 ihweb003 sshd[16182]: AD user frappe from 139.59.31.18 port 50074
Jun 2 11:02:23 ihweb003 sshd[16182]: Received disconnect from 139.59.31.18 port 50074:11: Normal Shutdown, Thank you for ........
-------------------------------
show less