This IP address has been reported a total of
108
times from
73 distinct
sources.
139.59.190.42 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Jun 29 14:32:30 netllama sshd-session[408094]: User root from 139.59.190.42 not allowed because not ...
show moreJun 29 14:32:30 netllama sshd-session[408094]: User root from 139.59.190.42 not allowed because not listed in AllowUsers
Jun 29 14:33:59 netllama sshd-session[408184]: User root from 139.59.190.42 not allowed because not listed in AllowUsers
...
show less
2026-06-28T05:55:30.804191+00:00 ws1.trivox.sh sshd-session[3345402]: Disconnected from authenticati ...
show more2026-06-28T05:55:30.804191+00:00 ws1.trivox.sh sshd-session[3345402]: Disconnected from authenticating user root 139.59.190.42 port 43316 [preauth]
2026-06-28T05:56:28.782743+00:00 ws1.trivox.sh sshd-session[3345448]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.190.42 user=root
2026-06-28T05:56:30.543781+00:00 ws1.trivox.sh sshd-session[3345448]: Failed password for root from 139.59.190.42 port 60470 ssh2
2026-06-28T05:56:30.850450+00:00 ws1.trivox.sh sshd-session[3345448]: Disconnected from authenticating user root 139.59.190.42 port 60470 [preauth]
...
show less
2026-06-28T04:53:59.325886+00:00 ws1.trivox.sh sshd-session[3339945]: Disconnected from authenticati ...
show more2026-06-28T04:53:59.325886+00:00 ws1.trivox.sh sshd-session[3339945]: Disconnected from authenticating user root 139.59.190.42 port 33766 [preauth]
2026-06-28T04:54:47.666240+00:00 ws1.trivox.sh sshd-session[3339993]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.190.42 user=root
2026-06-28T04:54:49.248986+00:00 ws1.trivox.sh sshd-session[3339993]: Failed password for root from 139.59.190.42 port 45618 ssh2
2026-06-28T04:54:49.731312+00:00 ws1.trivox.sh sshd-session[3339993]: Disconnected from authenticating user root 139.59.190.42 port 45618 [preauth]
...
show less
Caught in SSH endlessh tarpit. 1 connection(s) held for 0 minute(s) total. Automated report via dotn ...
show moreCaught in SSH endlessh tarpit. 1 connection(s) held for 0 minute(s) total. Automated report via dotnetdork.dev honeypot.
show less
2026-06-27T05:36:55.275994+03:00 atom sshd-session[162267]: Failed password for root from 139.59.190 ...
show more2026-06-27T05:36:55.275994+03:00 atom sshd-session[162267]: Failed password for root from 139.59.190.42 port 42222 ssh2
2026-06-27T05:37:13.931435+03:00 atom sshd-session[162279]: Failed password for root from 139.59.190.42 port 41692 ssh2
2026-06-27T05:37:32.460301+03:00 atom sshd-session[162295]: Failed password for root from 139.59.190.42 port 44164 ssh2
2026-06-27T05:38:06.121916+03:00 atom sshd-session[162347]: Failed password for root from 139.59.190.42 port 49354 ssh2
2026-06-27T05:38:45.660354+03:00 atom sshd-session[162403]: Failed password for root from 139.59.190.42 port 45860 ssh2
...
show less
2026-06-25T04:04:33.277679+02:00 sshd-session[1511585]: Disconnected from authenticating user root ...
show more2026-06-25T04:04:33.277679+02:00 sshd-session[1511585]: Disconnected from authenticating user root 139.59.190.42 port 60600 [preauth]
2026-06-25T04:06:02.198965+02:00 sshd-session[1512413]: Disconnected from authenticating user root 139.59.190.42 port 56460 [preauth]
2026-06-25T04:07:29.717136+02:00 sshd-session[1513169]: Disconnected from authenticating user root 139.59.190.42 port 58966 [preauth]
...
show less
Brute-Force
SSH
Showing 1 to
15
of 108 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩