This IP address has been reported a total of
95
times from
68 distinct
sources.
185.209.196.139 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
185.209.196.139 (DE/Germany/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; ...
show more185.209.196.139 (DE/Germany/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jun 18 17:26:13 18149 sshd[17692]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.209.196.139 user=root
Jun 18 17:26:15 18149 sshd[17692]: Failed password for root from 185.209.196.139 port 33110 ssh2
Jun 18 17:20:20 18149 sshd[14489]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.209.196.156 user=root
Jun 18 17:20:23 18149 sshd[14489]: Failed password for root from 185.209.196.156 port 43002 ssh2
Jun 18 17:25:24 18149 sshd[17189]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.164.194.33 user=root
IP Addresses Blocked:
show less
SSH Brute force: 1 attempts were recorded from 185.209.196.139
2026-06-17T06:16:38+02:00 Invalid use ...
show moreSSH Brute force: 1 attempts were recorded from 185.209.196.139
2026-06-17T06:16:38+02:00 Invalid user dima from 185.209.196.139 port 53270
show less
2026-06-17T07:16:47.779923+03:00 nexus6 sshd[1493122]: Invalid user dima from 185.209.196.139 port 5 ...
show more2026-06-17T07:16:47.779923+03:00 nexus6 sshd[1493122]: Invalid user dima from 185.209.196.139 port 55394
...
show less
Jun 16 19:28:54 ub-singapore-ipsec sshd[3071306]: pam_unix(sshd:auth): authentication failure; logna ...
show moreJun 16 19:28:54 ub-singapore-ipsec sshd[3071306]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.209.196.139
Jun 16 19:28:55 ub-singapore-ipsec sshd[3071306]: Failed password for invalid user webapp from 185.209.196.139 port 49910 ssh2
...
show less
Brute-Force
SSH
Anonymous
SSH Brute Force (3 attempts). Evidence: sshd:auth): authentication failure; logname= uid=0 euid=0 tt ...
show moreSSH Brute Force (3 attempts). Evidence: sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.209.196.139;sshd[296294]: Failed password for invalid user newtest from 185.209.196.139 port 52582 ssh2
show less
2026-06-13T20:10:29.273517+02:00 geneba sshd-session[335714]: Invalid user jake from 185.209.196.139 ...
show more2026-06-13T20:10:29.273517+02:00 geneba sshd-session[335714]: Invalid user jake from 185.209.196.139 port 47922
...
show less
2026-06-12T20:31:01.963786+00:00 [REDACTED_HOSTNAME] sshd-session[3825066]: Disconnected from authen ...
show more2026-06-12T20:31:01.963786+00:00 [REDACTED_HOSTNAME] sshd-session[3825066]: Disconnected from authenticating user root 185.209.196.139 port 46310 [preauth]
...
show less
185.209.196.139 (DE/Germany/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; ...
show more185.209.196.139 (DE/Germany/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jun 11 13:55:19 17546 sshd[4425]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.156.46.162 user=root
Jun 11 13:44:58 17546 sshd[32738]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.60.40.201 user=root
Jun 11 13:45:01 17546 sshd[32738]: Failed password for root from 92.60.40.201 port 41664 ssh2
Jun 11 13:51:57 17546 sshd[3009]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.209.196.139 user=root
Jun 11 13:51:59 17546 sshd[3009]: Failed password for root from 185.209.196.139 port 58918 ssh2
IP Addresses Blocked:
185.156.46.162 (US/United States/unn-185-156-46-162.datapacket.com)
92.60.40.201 (NL/The Netherlands/-)
show less
Brute-Force
SSH
Anonymous
2026-06-11T13:16:53.917259 localhost.localdomain sshd-session[35887]: pam_unix(sshd:auth): authentic ...
show more2026-06-11T13:16:53.917259 localhost.localdomain sshd-session[35887]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.209.196.139
2026-06-11T13:16:55.713407 localhost.localdomain sshd-session[35887]: Failed password for invalid user jeff from 185.209.196.139 port 47496 ssh2
...
show less
Brute-Force
SSH
Anonymous
2026-06-11T01:25:56.297530+02:00 vps575891 sshd[3893298]: pam_unix(sshd:auth): authentication failur ...
show more2026-06-11T01:25:56.297530+02:00 vps575891 sshd[3893298]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.209.196.139
2026-06-11T01:25:57.700064+02:00 vps575891 sshd[3893298]: Failed password for invalid user louise from 185.209.196.139 port 50204 ssh2
2026-06-11T01:25:57.787590+02:00 vps575891 sshd[3893298]: Disconnected from invalid user louise 185.209.196.139 port 50204 [preauth]
...
show less
Brute-Force
SSH
Anonymous
Jun 10 19:03:26 f2b auth.info sshd[1247843]: Invalid user ts3server from 185.209.196.139 port 57588
...
show moreJun 10 19:03:26 f2b auth.info sshd[1247843]: Invalid user ts3server from 185.209.196.139 port 57588
Jun 10 19:03:26 f2b auth.info sshd[1247843]: Failed password for invalid user ts3server from 185.209.196.139 port 57588 ssh2
Jun 10 19:03:26 f2b auth.info sshd[1247843]: Disconnected from invalid user ts3server 185.209.196.139 port 57588 [preauth]
...
show less
Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ...
show moreDetected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: api.ipify.org:443
show less