Log in to view charts and search reports for this IP.
Log In
No reports in the last 60 days
139.59.3.85 has been reported 16
times. The most recent report is from
.
The full history is preserved below and remains searchable. A
0% score reflects the absence of recent activity, but
this is not a guarantee that earlier reports were invalid. Abuse confidence score decays,
naturally, over time, when the abusive activity stops.
2026-03-15T00:24:41.243250+02:00 jane sshd[436879]: Failed password for root from 139.59.3.85 port 51906 ssh2
2026-03-15T00:27:00.861260+02:00 jane sshd[439392]: Invalid user 0000 from 139.59.3.85 port 54370
2026-03-15T00:27:03.498511+02:00 jane sshd ...
show more2026-03-15T00:24:41.243250+02:00 jane sshd[436879]: Failed password for root from 139.59.3.85 port 51906 ssh2
2026-03-15T00:27:00.861260+02:00 jane sshd[439392]: Invalid user 0000 from 139.59.3.85 port 54370
2026-03-15T00:27:03.498511+02:00 jane sshd[439394]: Invalid user 123456 from 139.59.3.85 port 54392
...
show less
2026-03-14T21:54:49.372325+00:00 SRV-HQ-CO sshd[156875]: Failed password for root from 139.59.3.85 port 53038 ssh2
2026-03-14T21:55:33.772494+00:00 SRV-HQ-CO sshd[156880]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh rus ...
show more2026-03-14T21:54:49.372325+00:00 SRV-HQ-CO sshd[156875]: Failed password for root from 139.59.3.85 port 53038 ssh2
2026-03-14T21:55:33.772494+00:00 SRV-HQ-CO sshd[156880]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.3.85 user=root
2026-03-14T21:55:35.417986+00:00 SRV-HQ-CO sshd[156880]: Failed password for root from 139.59.3.85 port 37420 ssh2
show less
Mar 14 22:54:41 centrum sshd-session[3336]: Connection closed by authenticating user root 139.59.3.85 port 44912 [preauth]
Mar 14 22:55:27 centrum sshd-session[3370]: Connection closed by authenticating user root 139.59.3.85 port 41108 [preauth]
...
2026-03-14T21:54:13.002849+00:00 instance-20241019-1127 sshd[1813888]: Connection closed by authenticating user root 139.59.3.85 port 37602 [preauth]
...
Hacking
Brute-Force
SSH
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown