JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

159.255.38.85

Neutral Activity

Abuse Confidence Score

0% Low Risk

167 reports

102 reporters · latest 6 months ago

ISP: FIRST SERVER LIMITED
Usage Type: Data Center/Web Hosting/Transit
ASN: AS200740
Hostname(s): vm3576406.firstbyte.club
Domain Name: 1st-server.pro
Country: 🇫🇷 France
City: Paris, Ile-de-France

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

159.255.38.85 has been reported 167 times. The most recent report is from 6 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

167 from 102 distinct reporters

First reported

September 13th 2025

Most recent report

6 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 thetomtaylor.co.uk	2026-05-05 22:08:28 UTC · (6 months ago)	Fail2Ban - [SSH]Brute-force login attempts on sshd ... [mx02]	Brute-Force SSH
🇬🇧 thetomtaylor.co.uk	2026-05-05 06:07:43 UTC · (6 months ago)	Fail2Ban - [SSH]Brute-force login attempts on sshd ... [mx01]	Brute-Force SSH
🇬🇧 thetomtaylor.co.uk	2026-04-09 04:07:05 UTC · (7 months ago)	Fail2Ban - [SSH]Brute-force login attempts on sshd ... [wa02]	Brute-Force SSH
🇷🇺 Agrohim	2026-02-07 00:37:34 UTC · (9 months ago)	Gate Inet blocked for categories:	DDoS Attack Ping of Death Port Scan Hacking Brute-Force
🇫🇷 ACE-INFORMATIQUE.NC	2025-10-01 01:08:02 UTC · (1 year ago)	Fail2ban automated report	Brute-Force
🇺🇸 sh97	2025-09-28 16:04:59 UTC · (1 year ago)	US01-CB-WA: SSH Brute Force from 159.255.38.85 at 2025-09-28 21:34:58 IST	Brute-Force SSH
🇹🇷 rtbh.com.tr	2025-09-16 20:08:50 UTC · (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇨🇳 ThreatBook.io	2025-09-16 01:20:19 UTC · (1 year ago)	ThreatBook Intelligence: cdn more details on http://threatbook.io/ip/159.255.38.85	SSH
🇹🇷 rtbh.com.tr	2025-09-15 20:08:48 UTC · (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇩🇪 mueller-nils.com	2025-09-15 05:29:57 UTC · (1 year ago)	Sep 15 07:27:54 : Failed password for root from 159.255.38.85 port 46498 ssh2 Sep 15 07:28:55 : pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.255.38.85 user=root Sep 15 07:28:56 : Failed password for root	Brute-Force SSH
🇩🇪 TostHost	2025-09-15 05:29:38 UTC · (1 year ago)	2025-09-15T07:27:33.334735+02:00 s1 sshd[2882324]: Failed password for root from 159.255.38.85 port 42566 ssh2 2025-09-15T07:28:35.003441+02:00 s1 sshd[2882721]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost= ... show more 2025-09-15T07:27:33.334735+02:00 s1 sshd[2882324]: Failed password for root from 159.255.38.85 port 42566 ssh2 2025-09-15T07:28:35.003441+02:00 s1 sshd[2882721]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.255.38.85 user=root 2025-09-15T07:28:36.509537+02:00 s1 sshd[2882721]: Failed password for root from 159.255.38.85 port 43370 ssh2 2025-09-15T07:29:36.080459+02:00 s1 sshd[2883117]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.255.38.85 user=root 2025-09-15T07:29:38.097496+02:00 s1 sshd[2883117]: Failed password for root from 159.255.38.85 port 36886 ssh2 ... show less	Brute-Force SSH
🇷🇺 iGor2024	2025-09-15 05:27:30 UTC · (1 year ago)	$f2bV_matches	Brute-Force
🇵🇱 pshost.pl	2025-09-15 05:26:16 UTC · (1 year ago)	2025-09-15T05:26:16.528Z, an unauthorized access attempt was detected from source IP address 159.255.38.85.	Port Scan Brute-Force
🇺🇸 bigscoots.com	2025-09-15 05:25:09 UTC · (1 year ago)	159.255.38.85 (FR/France/vm3149456.firstbyte.club), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Sep 15 00:24:32 15975 sshd[28332]: pam_unix(sshd:auth): authentication failu ... show more 159.255.38.85 (FR/France/vm3149456.firstbyte.club), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Sep 15 00:24:32 15975 sshd[28332]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.190.104.66 user=root Sep 15 00:24:34 15975 sshd[28332]: Failed password for root from 195.190.104.66 port 50356 ssh2 Sep 15 00:24:59 15975 sshd[28336]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.255.38.85 user=root Sep 15 00:23:39 15975 sshd[28257]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.104.25.221 user=root Sep 15 00:23:41 15975 sshd[28257]: Failed password for root from 190.104.25.221 port 50002 ssh2 IP Addresses Blocked: 195.190.104.66 (RU/Russia/spb-195-190-104-66.sovintel.ru) show less	Brute-Force SSH
🇺🇸 bigscoots.com	2025-09-15 04:47:46 UTC · (1 year ago)	159.255.38.85 (FR/France/vm3149456.firstbyte.club), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Sep 14 23:43:44 16199 sshd[11296]: pam_unix(sshd:auth): authentication failu ... show more 159.255.38.85 (FR/France/vm3149456.firstbyte.club), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Sep 14 23:43:44 16199 sshd[11296]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.103.112.110 user=root Sep 14 23:43:46 16199 sshd[11296]: Failed password for root from 14.103.112.110 port 23562 ssh2 Sep 14 23:47:27 16199 sshd[11608]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.255.38.85 user=root Sep 14 23:45:47 16199 sshd[11459]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.137.196.65 user=root Sep 14 23:45:49 16199 sshd[11459]: Failed password for root from 79.137.196.65 port 48428 ssh2 IP Addresses Blocked: 14.103.112.110 (CN/China/-) show less	Brute-Force SSH

Showing 1 to 15 of 167 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇰🇷 221.167.25.207

🇺🇸 199.165.159.67

🇦🇷 190.246.0.207

🇲🇽 189.203.137.160

🇲🇽 187.190.35.163

🇺🇸 184.105.139.69

🇳🇱 178.231.170.73

🇧🇷 170.80.145.247

🇺🇸 167.172.211.251

🇹🇳 165.50.21.99

🇫🇮 147.185.133.6

🇲🇹 141.8.55.245

🇹🇼 111.70.32.201

🇳🇱 109.160.32.157

🇨🇳 106.13.228.234

🇨🇳 103.171.137.227

🇹🇼 102.134.36.172

🇺🇿 92.38.27.114

🇺🇸 66.132.224.235

🇳🇱 64.205.72.216