This IP address has been reported a total of
38
times from
29 distinct
sources.
85.185.54.139 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
[rede-168-134] (sshd) Failed SSH login from 85.185.54.139 (IR/Iran/-): 5 in the last 3600 secs; Port ...
show more[rede-168-134] (sshd) Failed SSH login from 85.185.54.139 (IR/Iran/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Jul 31 21:12:52 sshd[464]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.185.54.139 user=[USERNAME]
Jul 31 21:12:54 sshd[464]: Failed password for [USERNAME] from 85.185.54.139 port 11215 ssh2
Jul 31 21:12:56 sshd[464]: Failed password for [USERNAME] from 85.185.54.139 port 11215 ssh2
Jul 31 21:12:58 sshd[464]: Failed password for [USERNAME] from 85.185.54.139 port 11215 ssh2
Jul 31 21:13:00 sshd[464]: Failed password for [USERNAME] from 85.185.54.13
show less
2026-07-31T13:06:05.965109 proxy-ssh.dsi.uvsq.fr sshd[484602]: Failed password for root from 85.185. ...
show more2026-07-31T13:06:05.965109 proxy-ssh.dsi.uvsq.fr sshd[484602]: Failed password for root from 85.185.54.139 port 15009 ssh2
2026-07-31T13:06:09.902621 proxy-ssh.dsi.uvsq.fr sshd[484602]: Failed password for root from 85.185.54.139 port 15009 ssh2
2026-07-31T13:06:13.506793 proxy-ssh.dsi.uvsq.fr sshd[484602]: Failed password for root from 85.185.54.139 port 15009 ssh2
2026-07-31T13:06:15.531287 proxy-ssh.dsi.uvsq.fr sshd[484602]: Failed password for root from 85.185.54.139 port 15009 ssh2
2026-07-31T13:06:17.884491 proxy-ssh.dsi.uvsq.fr sshd[484602]: Failed password for root from 85.185.54.139 port 15009 ssh2
...
show less
Honeypot [honeypot-ca-sensor1]: Brute-force attack detected on 22/SSH
• Credentials: root:<Any pass> ...
show moreHoneypot [honeypot-ca-sensor1]: Brute-force attack detected on 22/SSH
• Credentials: root:<Any pass>, root:1, root:12
• Number of login attempts: 3
• Client: SSH-2.0-libssh2_1.7.0
show less
Brute-Force
SSH
Anonymous
2026-07-31T00:38:40.924795 DDMZLXSFV01 sshd[1090768]: Failed password for root from 85.185.54.139 po ...
show more2026-07-31T00:38:40.924795 DDMZLXSFV01 sshd[1090768]: Failed password for root from 85.185.54.139 port 56250 ssh2
2026-07-31T00:38:44.042495 DDMZLXSFV01 sshd[1090768]: Failed password for root from 85.185.54.139 port 56250 ssh2
2026-07-31T00:38:46.023173 DDMZLXSFV01 sshd[1090768]: Failed password for root from 85.185.54.139 port 56250 ssh2
...
show less
2026-07-30T21:54:18.215448 gateway sshd[1186862]: Failed password for root from 85.185.54.139 port 5 ...
show more2026-07-30T21:54:18.215448 gateway sshd[1186862]: Failed password for root from 85.185.54.139 port 59411 ssh2
2026-07-30T21:54:21.206738 gateway sshd[1186862]: Failed password for root from 85.185.54.139 port 59411 ssh2
2026-07-30T21:54:23.867484 gateway sshd[1186862]: Failed password for root from 85.185.54.139 port 59411 ssh2
2026-07-30T21:54:27.670133 gateway sshd[1186862]: Failed password for root from 85.185.54.139 port 59411 ssh2
2026-07-30T21:54:29.669064 gateway sshd[1186862]: Failed password for root from 85.185.54.139 port 59411 ssh2
2026-07-30T21:54:29.818700 gateway sshd[1186862]: error: maximum authentication attempts exceeded for root from 85.185.54.139 port 59411 ssh2 [preauth]
2026-07-30T21:54:31.643379 gateway sshd[1186870]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.185.54.139 user=root
2026-07-30T21:54:32.894392 gateway sshd[1186870]: Failed password for root from 85.185.54.139 port 19099 ssh2
2026-07-30T21:54:35.55670
...
show less
2026-07-31T09:25:18.222269ipmgmt-abh sshd[3789]: Failed password for root from 85.185.54.139 port 52 ...
show more2026-07-31T09:25:18.222269ipmgmt-abh sshd[3789]: Failed password for root from 85.185.54.139 port 52640 ssh2
2026-07-31T09:25:20.458678ipmgmt-abh sshd[3789]: Failed password for root from 85.185.54.139 port 52640 ssh2
2026-07-31T09:25:22.638177ipmgmt-abh sshd[3789]: Failed password for root from 85.185.54.139 port 52640 ssh2
2026-07-31T09:25:25.092849ipmgmt-abh sshd[3789]: Failed password for root from 85.185.54.139 port 52640 ssh2
2026-07-31T09:25:27.312583ipmgmt-abh sshd[3789]: Failed password for root from 85.185.54.139 port 52640 ssh2
2026-07-31T09:25:29.777636ipmgmt-abh sshd[3789]: Failed password for root from 85.185.54.139 port 52640 ssh2
2026-07-31T09:25:29.778793ipmgmt-abh sshd[3789]: error: maximum authentication attempts exceeded for root from 85.185.54.139 port 52640 ssh2 [preauth]
...
show less
2026-07-31T04:52:45.842686 servers.open-bs.ru sshd[1189554]: Failed password for root from 85.185.54 ...
show more2026-07-31T04:52:45.842686 servers.open-bs.ru sshd[1189554]: Failed password for root from 85.185.54.139 port 56140 ssh2
2026-07-31T04:52:48.584211 servers.open-bs.ru sshd[1189554]: Failed password for root from 85.185.54.139 port 56140 ssh2
2026-07-31T04:52:50.753422 servers.open-bs.ru sshd[1189554]: Failed password for root from 85.185.54.139 port 56140 ssh2
2026-07-31T04:52:54.630838 servers.open-bs.ru sshd[1189554]: Failed password for root from 85.185.54.139 port 56140 ssh2
2026-07-31T04:52:57.840676 servers.open-bs.ru sshd[1189554]: Failed password for root from 85.185.54.139 port 56140 ssh2
...
show less
[rede-44-49] (PERMBLOCK) 85.185.54.139 (IR/Iran/-) has had more than 4 temp blocks in the last 86400 ...
show more[rede-44-49] (PERMBLOCK) 85.185.54.139 (IR/Iran/-) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs:
show less
SSH credential brute-force observed by honeypot.
Source IP: 85.185.54.139
Targeted device: NAS
First ...
show moreSSH credential brute-force observed by honeypot.
Source IP: 85.185.54.139
Targeted device: NAS
First seen: 31 Jul 2026 01:37:00 UTC
Last seen: 31 Jul 2026 01:37:05 UTC
Attempts: 5
Client: SSH-2.0-libssh2_1.7.0
Sample credentials: root:<Any pass>, root:1, root:12, root:123, root:1234
show less
2026-07-30T22:46:13.003999 minecraft sshd[608301]: Failed password for root from 85.185.54.139 port ...
show more2026-07-30T22:46:13.003999 minecraft sshd[608301]: Failed password for root from 85.185.54.139 port 63301 ssh2
2026-07-30T22:46:13.112430 minecraft sshd[608301]: Failed password for root from 85.185.54.139 port 63301 ssh2
2026-07-30T22:46:13.217220 minecraft sshd[608301]: Failed password for root from 85.185.54.139 port 63301 ssh2
2026-07-30T22:46:13.324566 minecraft sshd[608301]: Failed password for root from 85.185.54.139 port 63301 ssh2
2026-07-30T22:46:13.431392 minecraft sshd[608301]: Failed password for root from 85.185.54.139 port 63301 ssh2
...
show less