139.59.66.18

Blocked by UFW (TCP on 27891) Source port: 45123 TTL: 45 Packet length: 52 TOS: 0x14 This report (for 139.59.66.18) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter

Fail2ban: sshd - 2592000s ban

Fail2ban: sshd - 2592000s ban

2026-03-13T12:08:32.972456+00:00 NYC-692910.op-net.com sshd[1971453]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.66.18 2026-03-13T12:08:35.172886+00:00 NYC-692910.op-net.com sshd[1971453]: Failed pa ... show more 2026-03-13T12:08:32.972456+00:00 NYC-692910.op-net.com sshd[1971453]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.66.18 2026-03-13T12:08:35.172886+00:00 NYC-692910.op-net.com sshd[1971453]: Failed password for invalid user apache from 139.59.66.18 port 40612 ssh2 2026-03-13T12:09:12.890393+00:00 NYC-692910.op-net.com sshd[1971599]: Invalid user apache from 139.59.66.18 port 53420 ... show less

2026-03-13T11:07:36.405365+00:00 NYC-692910.op-net.com sshd[1957595]: Failed password for mysql from 139.59.66.18 port 40808 ssh2 2026-03-13T11:08:17.513025+00:00 NYC-692910.op-net.com sshd[1957724]: pam_unix(sshd:auth): authentication failure; logna ... show more 2026-03-13T11:07:36.405365+00:00 NYC-692910.op-net.com sshd[1957595]: Failed password for mysql from 139.59.66.18 port 40808 ssh2 2026-03-13T11:08:17.513025+00:00 NYC-692910.op-net.com sshd[1957724]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.66.18 user=mysql 2026-03-13T11:08:19.103686+00:00 NYC-692910.op-net.com sshd[1957724]: Failed password for mysql from 139.59.66.18 port 33180 ssh2 ... show less

2026-03-13T10:05:40.293641+00:00 NYC-692910.op-net.com sshd[1943286]: Failed password for root from 139.59.66.18 port 54176 ssh2 2026-03-13T10:06:18.627426+00:00 NYC-692910.op-net.com sshd[1943439]: pam_unix(sshd:auth): authentication failure; lognam ... show more 2026-03-13T10:05:40.293641+00:00 NYC-692910.op-net.com sshd[1943286]: Failed password for root from 139.59.66.18 port 54176 ssh2 2026-03-13T10:06:18.627426+00:00 NYC-692910.op-net.com sshd[1943439]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.66.18 user=root 2026-03-13T10:06:20.328844+00:00 NYC-692910.op-net.com sshd[1943439]: Failed password for root from 139.59.66.18 port 50372 ssh2 ... show less

SSH Brute Force Attack

2026-03-13T18:03:40.847673+09:00 lifeway sshd[1586243]: Invalid user pi from 139.59.66.18 port 40020 2026-03-13T18:11:22.559999+09:00 lifeway sshd[1587802]: Invalid user docker from 139.59.66.18 port 35080 2026-03-13T18:12:08.114475+09:00 lifeway ssh ... show more 2026-03-13T18:03:40.847673+09:00 lifeway sshd[1586243]: Invalid user pi from 139.59.66.18 port 40020 2026-03-13T18:11:22.559999+09:00 lifeway sshd[1587802]: Invalid user docker from 139.59.66.18 port 35080 2026-03-13T18:12:08.114475+09:00 lifeway sshd[1587936]: Invalid user docker from 139.59.66.18 port 42234 2026-03-13T18:12:52.954735+09:00 lifeway sshd[1588092]: Invalid user docker from 139.59.66.18 port 45274 2026-03-13T18:13:36.953720+09:00 lifeway sshd[1588244]: Invalid user jenkins from 139.59.66.18 port 45220 ... show less

2026-03-13T09:04:01.634347+00:00 NYC-692910.op-net.com sshd[1929158]: Failed password for invalid user pi from 139.59.66.18 port 56506 ssh2 2026-03-13T09:04:50.337735+00:00 NYC-692910.op-net.com sshd[1929348]: pam_unix(sshd:auth): authentication fail ... show more 2026-03-13T09:04:01.634347+00:00 NYC-692910.op-net.com sshd[1929158]: Failed password for invalid user pi from 139.59.66.18 port 56506 ssh2 2026-03-13T09:04:50.337735+00:00 NYC-692910.op-net.com sshd[1929348]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.66.18 user=root 2026-03-13T09:04:52.742320+00:00 NYC-692910.op-net.com sshd[1929348]: Failed password for root from 139.59.66.18 port 53508 ssh2 ... show less

Fail2ban: sshd - 2592000s ban

2026-03-13T18:03:48.004326+09:00 *** sshd-session[3209211]: Failed password for invalid user pi from 139.59.66.18 port 43836 ssh2 2026-03-13T18:04:36.986759+09:00 *** sshd-session[3209418]: pam_unix(sshd:auth): authentication failure; logname= uid= ... show more 2026-03-13T18:03:48.004326+09:00 *** sshd-session[3209211]: Failed password for invalid user pi from 139.59.66.18 port 43836 ssh2 2026-03-13T18:04:36.986759+09:00 *** sshd-session[3209418]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.66.18 user=root 2026-03-13T18:04:39.200208+09:00 *** sshd-session[3209418]: Failed password for root from 139.59.66.18 port 57914 ssh2 show less

ssh

Cowrie Honeypot: Unauthorised SSH/Telnet login attempt with user "pi" at 2026-03-13T09:03:49Z

(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 139.59.66.18 (IN/India/-): 1 in the last 3600 secs (0-197)