This IP address has been reported a total of
185
times from
135 distinct
sources.
85.215.206.211 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-09-19T14:24:31.163305likely-lavender.ptr.network sshd[121559]: Invalid user devops from 85.215. ...
show more2026-09-19T14:24:31.163305likely-lavender.ptr.network sshd[121559]: Invalid user devops from 85.215.206.211 port 60376
2026-09-19T14:24:31.165812likely-lavender.ptr.network sshd[121559]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.215.206.211
2026-09-19T14:24:33.011332likely-lavender.ptr.network sshd[121559]: Failed password for invalid user devops from 85.215.206.211 port 60376 ssh2
...
show less
Fail2Ban found 2026-09-19T13:28:29.028838+00:00 node1 sshd[1123755]: Invalid user ubuntu from 85.215 ...
show moreFail2Ban found 2026-09-19T13:28:29.028838+00:00 node1 sshd[1123755]: Invalid user ubuntu from 85.215.206.211 port 34478
2026-09-19T13:28:29.032118+00:00 node1 sshd[1123755]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.215.206.211
2026-09-19T13:28:30.666044+00:00 node1 sshd[1123755]: Failed password for invalid user ubuntu from 85.215.206.211 port 34478 ssh2 attempts
show less
2026-09-19T15:02:39.034561+02:00 eclipse sshd-session[47596]: Invalid user test from 85.215.206.211 ...
show more2026-09-19T15:02:39.034561+02:00 eclipse sshd-session[47596]: Invalid user test from 85.215.206.211 port 54676
2026-09-19T15:02:39.070100+02:00 eclipse sshd-session[47596]: Disconnected from invalid user test 85.215.206.211 port 54676 [preauth]
2026-09-19T15:05:10.021317+02:00 eclipse sshd-session[49074]: Disconnected from authenticating user root 85.215.206.211 port 44132 [preauth]
2026-09-19T15:07:30.671564+02:00 eclipse sshd-session[50431]: Invalid user sysadmin from 85.215.206.211 port 42948
2026-09-19T15:07:30.708936+02:00 eclipse sshd-session[50431]: Disconnected from invalid user sysadmin 85.215.206.211 port 42948 [preauth]
...
show less
2026-09-19T14:36:11.903429+02:00 eclipse sshd-session[32100]: Disconnected from invalid user geoserv ...
show more2026-09-19T14:36:11.903429+02:00 eclipse sshd-session[32100]: Disconnected from invalid user geoserver 85.215.206.211 port 41720 [preauth]
2026-09-19T14:38:37.306414+02:00 eclipse sshd-session[33522]: Disconnected from authenticating user root 85.215.206.211 port 41502 [preauth]
2026-09-19T14:41:00.566249+02:00 eclipse sshd-session[34914]: Disconnected from authenticating user root 85.215.206.211 port 60570 [preauth]
2026-09-19T14:48:15.535980+02:00 eclipse sshd-session[39154]: Invalid user fermin from 85.215.206.211 port 47704
2026-09-19T14:48:15.574950+02:00 eclipse sshd-session[39154]: Disconnected from invalid user fermin 85.215.206.211 port 47704 [preauth]
...
show less
2026-09-19T14:01:42.727313+02:00 cerium sshd-session[1595731]: Invalid user runner from 85.215.206.2 ...
show more2026-09-19T14:01:42.727313+02:00 cerium sshd-session[1595731]: Invalid user runner from 85.215.206.211 port 50230
2026-09-19T14:01:42.731842+02:00 cerium sshd-session[1595731]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.215.206.211
2026-09-19T14:01:45.168984+02:00 cerium sshd-session[1595731]: Failed password for invalid user runner from 85.215.206.211 port 50230 ssh2
...
show less
2026-09-19T13:42:39.053902+02:00 cerium sshd-session[1592256]: pam_unix(sshd:auth): authentication f ...
show more2026-09-19T13:42:39.053902+02:00 cerium sshd-session[1592256]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.215.206.211 user=root
2026-09-19T13:42:40.882740+02:00 cerium sshd-session[1592256]: Failed password for root from 85.215.206.211 port 39512 ssh2
2026-09-19T13:45:07.077087+02:00 cerium sshd-session[1592643]: Invalid user ttx from 85.215.206.211 port 60862
...
show less
2026-09-19T13:36:40.331205+02:00 customerweb1 sshd[162514]: Invalid user amendoza from 85.215.206.21 ...
show more2026-09-19T13:36:40.331205+02:00 customerweb1 sshd[162514]: Invalid user amendoza from 85.215.206.211 port 45278
2026-09-19T13:36:40.334647+02:00 customerweb1 sshd[162514]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.215.206.211
2026-09-19T13:36:42.271853+02:00 customerweb1 sshd[162514]: Failed password for invalid user amendoza from 85.215.206.211 port 45278 ssh2
2026-09-19T13:39:13.869843+02:00 customerweb1 sshd[163727]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.215.206.211 user=root
2026-09-19T13:39:16.479204+02:00 customerweb1 sshd[163727]: Failed password for root from 85.215.206.211 port 34618 ssh2
...
show less
2026-09-19T13:36:23.219703+02:00 talaxie sshd-session[1610958]: pam_unix(sshd:auth): authentication ...
show more2026-09-19T13:36:23.219703+02:00 talaxie sshd-session[1610958]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.215.206.211 user=root
2026-09-19T13:36:25.087805+02:00 talaxie sshd-session[1610958]: Failed password for root from 85.215.206.211 port 41742 ssh2
2026-09-19T13:38:54.266546+02:00 talaxie sshd-session[1611602]: Invalid user amendoza from 85.215.206.211 port 51430
...
show less
2026-09-19T12:32:46.079159+02:00 gigacity.eu sshd[18732]: Failed password for invalid user stream fr ...
show more2026-09-19T12:32:46.079159+02:00 gigacity.eu sshd[18732]: Failed password for invalid user stream from 85.215.206.211 port 43898 ssh2
2026-09-19T12:41:29.117574+02:00 gigacity.eu sshd[19424]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.215.206.211 user=root
2026-09-19T12:41:31.179424+02:00 gigacity.eu sshd[19424]: Failed password for root from 85.215.206.211 port 35920 ssh2
2026-09-19T12:43:57.646657+02:00 gigacity.eu sshd[20892]: Invalid user git from 85.215.206.211 port 34012
...
show less
Brute-Force
SSH
Showing 1 to
15
of 185 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ