JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

85.209.49.241

Recent Activity

Abuse confidence score ?

49% Elevated

15 reports

8 reporters · latest 1 hour ago

ISP	netcup GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS197540
Hostname(s)	v2202405198678271232.bestsrv.de
Domain Name	netcup.de
Country	🇩🇪 Germany
City	Nuremberg, Bavaria

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 85.209.49.241

Export CSV

This IP address has been reported a total of 15 times from 8 distinct sources. 85.209.49.241 was first reported on September 29th 2026, and the most recent report was 1 hour ago. In the last 60 days, the top reporter locations were: China with 11 reports; Australia with 1 report; Canada with 1 report. The most common categories in these recent reports were: SSH 12 times; Brute-Force 11 times; Port Scan 4 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇭🇰 Paschen J Ki	2026-10-11 03:26:54 (1 hour ago)	2026-10-11T11:26:51.412543ser850623582384 sshd[2019396]: Invalid user zhangshenghong from 85.209.49. ... show more 2026-10-11T11:26:51.412543ser850623582384 sshd[2019396]: Invalid user zhangshenghong from 85.209.49.241 port 59434 2026-10-11T11:26:51.770492ser850623582384 sshd[2019396]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.209.49.241 2026-10-11T11:26:53.842536ser850623582384 sshd[2019396]: Failed password for invalid user zhangshenghong from 85.209.49.241 port 59434 ssh2 ... show less	Brute-Force SSH
🇨🇳 鹏鹏	2026-10-11 01:39:33 (3 hours ago)	monitor: on VM-0-7-ubuntu \| port: 22 \| ttl: 250 script: github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan SSH
🇨🇳 Pumilk	2026-10-11 01:02:42 (3 hours ago)	SSH brute-force (2 failed logins), auto-banned by fail2ban	Brute-Force SSH
🇨🇳 さいとうあすか	2026-10-10 17:39:56 (11 hours ago)	2026-10-11T01:39:53.804294+08:00 pbs sshd[598485]: pam_unix(sshd:auth): authentication failure; logn ... show more 2026-10-11T01:39:53.804294+08:00 pbs sshd[598485]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.209.49.241 2026-10-11T01:39:55.725811+08:00 pbs sshd[598485]: Failed password for invalid user denghuaren from 85.209.49.241 port 52252 ssh2 ... show less	Brute-Force SSH
🇨🇳 ryzenx3d	2026-10-10 17:19:07 (11 hours ago)	Automated report from an SSH honeypot: successful password authentication	Brute-Force
🇨🇳 さいとうあすか	2026-10-10 17:09:46 (11 hours ago)	Oct 11 01:09:42 pbs sshd[3201531]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid= ... show more Oct 11 01:09:42 pbs sshd[3201531]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.209.49.241 user=root Oct 11 01:09:45 pbs sshd[3201531]: Failed password for root from 85.209.49.241 port 42196 ssh2 ... show less	Brute-Force SSH
🇨🇳 鹏鹏	2026-10-10 16:56:44 (12 hours ago)	monitor: on VM-0-7-ubuntu \| port: 22 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan SSH
🇨🇳 Bro Charlie	2026-10-10 16:33:24 (12 hours ago)	2026-10-11T00:33:22.178020+08:00 localhost sshd[3886257]: Invalid user egova_admin from 85.209.49.24 ... show more 2026-10-11T00:33:22.178020+08:00 localhost sshd[3886257]: Invalid user egova_admin from 85.209.49.241 port 49054 ... show less	Brute-Force SSH
🇨🇦 hpg	2026-10-08 18:11:28 (2 days ago)	10 invalid SSH login attempts from 85.209.49.241 in the last 5.3 hours	Brute-Force SSH
🇨🇳 鹏鹏	2026-10-08 16:05:29 (2 days ago)	monitor: on VM-0-7-ubuntu \| port: 22 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan SSH
🇺🇸 Bro Charlie	2026-10-08 13:11:33 (2 days ago)	2026-10-08T21:11:29.761531+08:00 localhost sshd[1302220]: Invalid user zhen from 85.209.49.241 port ... show more 2026-10-08T21:11:29.761531+08:00 localhost sshd[1302220]: Invalid user zhen from 85.209.49.241 port 48542 ... show less	Brute-Force SSH
🇨🇳 鹏鹏	2026-10-08 13:09:56 (2 days ago)	monitor: on VM-0-7-ubuntu \| port: 22 \| ttl: 250 script: github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan SSH
🇨🇳 さいとうあすか	2026-10-08 13:06:45 (2 days ago)	Oct 8 21:06:44 pbs sshd[3183876]: Invalid user zhen from 85.209.49.241 port 53580 ...	Brute-Force SSH
🇨🇳 ryzenx3d	2026-10-08 12:53:43 (2 days ago)	Automated report from an SSH honeypot: successful password authentication	Brute-Force
🇦🇺 AWW-Admin	2026-09-29 22:17:20 (1 week ago)	(pop3d) Failed POP3 login from 85.209.49.241 (DE/Germany/v2202405198678271232.bestsrv.de)	Brute-Force

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 207.90.244.6

🇿🇦 197.184.173.135

🇭🇰 152.32.128.204

🇺🇸 137.184.61.137

🇵🇭 103.252.32.129

🇳🇱 81.19.216.68

🇺🇸 64.62.197.45

🇧🇪 35.195.54.85

🇸🇬 35.187.231.181

🇧🇪 34.38.21.150

🇩🇪 213.209.159.231

🇧🇩 202.84.34.85

🇧🇩 182.160.127.181

🇰🇷 175.201.85.209

🇹🇼 128.14.239.39

🇮🇳 122.187.226.21

🇧🇩 103.138.191.40

🇬🇷 83.235.16.111

🇺🇸 68.183.139.2

🇬🇧 64.205.72.74