This IP address has been reported a total of
26
times from
21 distinct
sources.
139.59.65.40 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
China
with 3
reports;
Singapore
with 1
report.
The most common categories in these recent reports were:
Port Scan
3
times;
SSH
1
time;
Brute-Force
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-10-08T22:53:04.782565+08:00 localhost sshd-session[1774588]: Failed password for root from 139. ...
show more2026-10-08T22:53:04.782565+08:00 localhost sshd-session[1774588]: Failed password for root from 139.59.65.40 port 53026 ssh2
2026-10-08T22:53:06.171497+08:00 localhost sshd-session[1775536]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.65.40 user=root
2026-10-08T22:53:08.244811+08:00 localhost sshd-session[1775536]: Failed password for root from 139.59.65.40 port 53036 ssh2
...
show less
UFW BLOCK Report:
Total attempts: 3
Top ports and details:
- Port 22 (3x): SSH Brute-Force (e. ...
show moreUFW BLOCK Report:
Total attempts: 3
Top ports and details:
- Port 22 (3x): SSH Brute-Force (e.g., CVE-2024-6387 regreSSHion, botnets like Mirai, Mozi)
Source IP: 139.59.65.40
| this report is autogenerated by ZIME Cloud
show less
Brute-Force
SSH
Anonymous
2026-06-23T09:32:48.424813+01:00 vps kernel: [43943716.247699] [PORTSCAN DETECTED] IN=ens3 OUT= MAC= ...
show more2026-06-23T09:32:48.424813+01:00 vps kernel: [43943716.247699] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=139.59.65.40 DST=54.37.14.118 LEN=44 TOS=0x08 PREC=0x40 TTL=232 ID=58043 PROTO=TCP SPT=61013 DPT=4000 WINDOW=1025 RES=0x00 SYN URGP=0
...
show less
Blocked by UFW (TCP on 80)
Source port: 61005
TTL: 243
Packet length: 44
TOS: 0x00
This report (for ...
show moreBlocked by UFW (TCP on 80)
Source port: 61005
TTL: 243
Packet length: 44
TOS: 0x00
This report (for 139.59.65.40) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
SSH Brute force: 2 attempts were recorded from 139.59.65.40
2026-03-20T03:38:27+01:00 Connection clo ...
show moreSSH Brute force: 2 attempts were recorded from 139.59.65.40
2026-03-20T03:38:27+01:00 Connection closed by authenticating user root 139.59.65.40 port 35722 [preauth]
2026-03-20T03:38:28+01:00 Connection closed by authenticating user root 139.59.65.40 port 50638 [preauth]
show less
Mar 20 04:55:40 www sshd\[192906\]: Invalid user ali from 139.59.65.40
Mar 20 04:55:40 www sshd\[192 ...
show moreMar 20 04:55:40 www sshd\[192906\]: Invalid user ali from 139.59.65.40
Mar 20 04:55:40 www sshd\[192906\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.65.40
Mar 20 04:55:41 www sshd\[192906\]: Failed password for invalid user ali from 139.59.65.40 port 52412 ssh2
...
show less
