This IP address has been reported a total of
15
times from
14 distinct
sources.
85.133.243.219 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 5
reports;
Finland
with 4
reports;
Spain
with 2
reports.
The most common categories in these recent reports were:
Brute-Force
15
times;
SSH
15
times;
Web App Attack
1
time;
Email Spam
1
time;
Bad Web Bot
1
time;
Other
2
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-10-06T18:59:15.312364+03:00 6kw sshd[1364844]: Failed password for root from 85.133.243.219 por ...
show more2026-10-06T18:59:15.312364+03:00 6kw sshd[1364844]: Failed password for root from 85.133.243.219 port 55626 ssh2
...
show less
Oct 6 16:11:41 vpn sshd[3726396]: User root from 85.133.243.219 not allowed because not listed in A ...
show moreOct 6 16:11:41 vpn sshd[3726396]: User root from 85.133.243.219 not allowed because not listed in AllowUsers
Oct 6 16:20:55 vpn sshd[3728145]: User root from 85.133.243.219 not allowed because not listed in AllowUsers
Oct 6 17:32:36 vpn sshd[3741161]: User root from 85.133.243.219 not allowed because not listed in AllowUsers
...
show less
Oct 6 14:50:39 obsidian sshd[2369086]: Failed password for root from 85.133.243.219 port 36192 ssh2 ...
show moreOct 6 14:50:39 obsidian sshd[2369086]: Failed password for root from 85.133.243.219 port 36192 ssh2
Oct 6 14:50:37 obsidian sshd[2369088]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.133.243.219 user=root
Oct 6 14:50:39 obsidian sshd[2369088]: Failed password for root from 85.133.243.219 port 40820 ssh2
...
show less
2026-10-06T15:40:22.916527+01:00 CiviDrupal16GB sshd[941455]: User root from 85.133.243.219 not allo ...
show more2026-10-06T15:40:22.916527+01:00 CiviDrupal16GB sshd[941455]: User root from 85.133.243.219 not allowed because not listed in AllowUsers
2026-10-06T15:44:31.841416+01:00 CiviDrupal16GB sshd[941669]: User root from 85.133.243.219 not allowed because not listed in AllowUsers
...
show less
Oct 6 14:15:51 es sshd[927793]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 ...
show moreOct 6 14:15:51 es sshd[927793]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.133.243.219 user=root
Oct 6 14:15:53 es sshd[927793]: Failed password for root from 85.133.243.219 port 33886 ssh2
...
show less
Brute-Force
SSH
Anonymous
2026-10-06T13:53:27.363138+00:00 ebi sshd[1366909]: pam_unix(sshd:auth): authentication failure; log ...
show more2026-10-06T13:53:27.363138+00:00 ebi sshd[1366909]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.133.243.219 user=root
2026-10-06T13:53:29.635189+00:00 ebi sshd[1366909]: Failed password for invalid user root from 85.133.243.219 port 49068 ssh2
2026-10-06T13:58:45.869440+00:00 ebi sshd[1367491]: User root from 85.133.243.219 not allowed because not listed in AllowUsers
...
show less
2026-10-06T16:25:41.222321tim.mtkrbti.by sshd[18179]: Failed password for root from 85.133.243.219 p ...
show more2026-10-06T16:25:41.222321tim.mtkrbti.by sshd[18179]: Failed password for root from 85.133.243.219 port 40366 ssh2
2026-10-06T16:30:05.199817tim.mtkrbti.by sshd[18187]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.133.243.219 user=root
2026-10-06T16:30:06.674713tim.mtkrbti.by sshd[18187]: Failed password for root from 85.133.243.219 port 33290 ssh2
...
show less
This address is trying to log into our servers over SSH with passwords for accounts it does not hold ...
show moreThis address is trying to log into our servers over SSH with passwords for accounts it does not hold — a brute-force attack, usually run by a bot on a compromised host. A password tried for root or for a stock account name that does not exist here (admin, test, oracle…) is blocked at the first attempt; other accounts after repeated failures. The same bot is very likely hammering many other servers. Please check the machine for malware or an unauthorised user.
show less
Oct 6 13:07:17 webtest sshd[1648336]: pam_unix(sshd:auth): authentication failure; logname= uid=0 e ...
show moreOct 6 13:07:17 webtest sshd[1648336]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.133.243.219 user=root
Oct 6 13:07:19 webtest sshd[1648336]: Failed password for root from 85.133.243.219 port 60564 ssh2
...
show less
DDoS Attack
Web Spam
Email Spam
Brute-Force
Bad Web Bot
Web App Attack
SSH
