85.159.209.207
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- Linode, LLC
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS63949
- Hostname(s)
- 85-159-209-207.ip.linodeusercontent.com
- Domain Name
- linode.com
- Country
- 🇬🇧 United Kingdom of Great Britain and Northern Ireland
- City
- London, England
No reports in the last 60 days
85.159.209.207 has been reported 36 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
36 from
27 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇳🇮 elfita |
Blocked by nftables on AmneziaWG gateway
|
Port Scan Brute-Force Exploited Host | |
| 🇮🇳 Mr.Singh |
NFT blocked 85.159.209.207 on 27-May-2026..
|
Port Scan Brute-Force | |
| 🇷🇴 abuse_IP_reporter |
May 27 00:05:14 server UFW BLOCK SRC=85.159.209.207
|
Port Scan | |
| 🇩🇪 KPS |
PortscanN
|
Port Scan | |
| Anonymous |
Honeypot multi-source hit. Sources: tpot:Suricata. Ports: 6881. Automated tiered (T-Pot+DShield).
|
Port Scan Hacking | |
| 🇩🇪 Admins@FBN |
FW-PortScan: Traffic Blocked srcport=36576 dstport=6881
|
Port Scan | |
| 🇳🇱 DonAtari |
DShield firewall scan - UDP to port 6881
|
Brute-Force SSH | |
| 🇺🇸 [email protected] |
Ports: 6881. Proto: UDP. Observations: 1
|
Port Scan | |
| 🇳🇵 radheykrishna.com.np |
May 26 22:48:29 kernel: [3304794.895994] [UFW BLOCK] IN=ens160 OUT= SRC=85.159.209.207 LEN=120 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=UDP SPT=59869 DPT=6881 LEN=100
...
|
Port Scan | |
| 🇨🇦 DRI |
Unsolicited UDP traffic on Honeypot, srcport=58894 dstport=6881
|
Port Scan Hacking | |
| 🇳🇱 ByeByte API |
Port scan from this IP. Firewall dropped every packet. Targeted UDP ports: 6881. Single burst at 2026-05-26 14:29 UTC.
|
Port Scan | |
| 🇩🇪 iNetWorker |
firewall-block, port(s): 6881/udp
|
Port Scan | |
| 🇺🇸 anon333 |
Hacker syslog review 1779802471
|
Hacking | |
| 🇪🇸 librebit |
Brute force
|
Brute-Force | |
| 🇸🇪 NordhTech |
More than 3 malicious connection attempts, trying port(s) 6881/tcp, then blocked from services ...
|
Port Scan Hacking |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown