This IP address has been reported a total of
273
times from
185 distinct
sources.
85.215.138.48 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-07-10T17:11:55.814157+00:00 de-fra2-matrix1 sshd[36195]: Invalid user ts from 85.215.138.48 por ...
show more2026-07-10T17:11:55.814157+00:00 de-fra2-matrix1 sshd[36195]: Invalid user ts from 85.215.138.48 port 48806
2026-07-10T17:13:40.816958+00:00 de-fra2-matrix1 sshd[36214]: Invalid user tsadmin from 85.215.138.48 port 37460
2026-07-10T17:15:34.356163+00:00 de-fra2-matrix1 sshd[36491]: Invalid user test1 from 85.215.138.48 port 53612
...
show less
Brute-Force
SSH
Anonymous
Jul 10 19:09:50 sd-161643 sshd[209883]: Failed password for root from 85.215.138.48 port 48698 ssh2
...
show moreJul 10 19:09:50 sd-161643 sshd[209883]: Failed password for root from 85.215.138.48 port 48698 ssh2
Jul 10 19:09:48 sd-161643 sshd[209883]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.215.138.48 user=root
Jul 10 19:09:50 sd-161643 sshd[209883]: Failed password for root from 85.215.138.48 port 48698 ssh2
Jul 10 19:11:36 sd-161643 sshd[209887]: Invalid user ts from 85.215.138.48 port 52414
Jul 10 19:11:36 sd-161643 sshd[209887]: Invalid user ts from 85.215.138.48 port 52414
...
show less
Brute-Force
SSH
Anonymous
2026-07-10T16:00:29.185736+00:00 de-fra2-matrix1 sshd[34723]: Invalid user sqlite from 85.215.138.48 ...
show more2026-07-10T16:00:29.185736+00:00 de-fra2-matrix1 sshd[34723]: Invalid user sqlite from 85.215.138.48 port 54604
2026-07-10T16:05:49.979731+00:00 de-fra2-matrix1 sshd[34765]: Invalid user hlm from 85.215.138.48 port 51308
2026-07-10T16:11:03.226313+00:00 de-fra2-matrix1 sshd[34821]: Invalid user leo from 85.215.138.48 port 52416
...
show less
Brute-Force
SSH
Anonymous
Jul 10 18:05:30 sd-161643 sshd[208660]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ...
show moreJul 10 18:05:30 sd-161643 sshd[208660]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.215.138.48
Jul 10 18:05:30 sd-161643 sshd[208660]: Invalid user hlm from 85.215.138.48 port 54408
Jul 10 18:05:32 sd-161643 sshd[208660]: Failed password for invalid user hlm from 85.215.138.48 port 54408 ssh2
Jul 10 18:07:18 sd-161643 sshd[208663]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.215.138.48 user=root
Jul 10 18:07:21 sd-161643 sshd[208663]: Failed password for root from 85.215.138.48 port 45084 ssh2
...
show less
2026-07-10T18:02:52.285330+02:00 pietje sshd-session[472022]: pam_unix(sshd:auth): authentication fa ...
show more2026-07-10T18:02:52.285330+02:00 pietje sshd-session[472022]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.215.138.48
2026-07-10T18:02:54.361354+02:00 pietje sshd-session[472022]: Failed password for invalid user sqlite from 85.215.138.48 port 56438 ssh2
2026-07-10T18:02:56.418399+02:00 pietje sshd-session[472022]: Disconnected from invalid user sqlite 85.215.138.48 port 56438 [preauth]
...
show less
2026-07-10T10:07:18.513900-04:00 neptune.izeug.com sshd[941742]: pam_unix(sshd:auth): authentication ...
show more2026-07-10T10:07:18.513900-04:00 neptune.izeug.com sshd[941742]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.215.138.48
2026-07-10T10:07:20.599471-04:00 neptune.izeug.com sshd[941742]: Failed password for invalid user reolink from 85.215.138.48 port 59932 ssh2
2026-07-10T10:14:22.811521-04:00 neptune.izeug.com sshd[942678]: Invalid user mcserver from 85.215.138.48 port 51692
...
show less
2026-07-10T10:12:14.006682-04:00 Host-KEWR-E sshd[109503]: Invalid user reolink from 85.215.138.48 p ...
show more2026-07-10T10:12:14.006682-04:00 Host-KEWR-E sshd[109503]: Invalid user reolink from 85.215.138.48 port 60940
...
show less
2026-07-10T12:08:38.296514+00:00 mercury.fsmail.org.uk sshd-session[931939]: Invalid user user01 fro ...
show more2026-07-10T12:08:38.296514+00:00 mercury.fsmail.org.uk sshd-session[931939]: Invalid user user01 from 85.215.138.48 port 52462
2026-07-10T12:08:38.300383+00:00 mercury.fsmail.org.uk sshd-session[931939]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.215.138.48
2026-07-10T12:08:40.801622+00:00 mercury.fsmail.org.uk sshd-session[931939]: Failed password for invalid user user01 from 85.215.138.48 port 52462 ssh2
...
show less
Jul 10 06:08:02 jeeves sshd[3618117]: Invalid user user01 from 85.215.138.48 port 48342
Jul 10 06:08 ...
show moreJul 10 06:08:02 jeeves sshd[3618117]: Invalid user user01 from 85.215.138.48 port 48342
Jul 10 06:08:02 jeeves sshd[3618117]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.215.138.48
Jul 10 06:08:03 jeeves sshd[3618117]: Failed password for invalid user user01 from 85.215.138.48 port 48342 ssh2
...
show less
Brute-Force
SSH
Showing 1 to
15
of 273 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩