JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 85.215.254.109

85.215.254.109

Recent Activity

34 reports found in our database

69% ▲ ▲ ▲ Elevated

Abuse confidence score ?

ISP

IONOS SE

Usage Type

Data Center/Web Hosting/Transit

ASN

AS8560

Hostname(s)

ip85-215-254-109.pbiaas.com

Domain Name

ionos.com

Country

🇩🇪 Germany

City

Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Top Reporter Countries (Last 60 Days)

Example preview

Report Categories (Last 60 Days)

Example preview

Reports Activity

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 85.215.254.109:

This IP address has been reported a total of 34 times from 13 distinct sources. 85.215.254.109 was first reported on August 31st 2026, and the most recent report was 1 hour ago. In the last 60 days, the top reporter locations were: United States of America with 20 reports; Colombia with 7 reports; Germany with 4 reports. The most common categories in these recent reports were: Fraud VoIP 25 times; Brute-Force 24 times; Port Scan 6 times; Hacking 5 times; SSH 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 defkev	2026-09-04 10:39:54 (1 hour ago)		Fraud VoIP
🇬🇧 VoicePro	2026-09-04 09:43:00 (2 hours ago)	2026-09-04 08:08:46.651974 == 0.000000 == Leg 1 == SRC->DST == 85.215.254.109:50753 ==> 199. ... show more 2026-09-04 08:08:46.651974 == 0.000000 == Leg 1 == SRC->DST == 85.215.254.109:50753 ==> 199.230.107.77:5060 INVITE sip:[email protected] SIP/2.0 Via: SIP/2.0/UDP 85.215.254.109:50753;branch=z9hG4bK1786794224 Max-Forwards: 70 From: <sip:[email protected]>;tag=1210891886 To: <sip:[email protected]> Call-ID: 1260422327-242660089-499464887 CSeq: 1 INVITE Contact: <sip:[email protected]:50753> Content-Type: application/sdp Content-Length: 216 Allow: ACK, BYE, CANCEL, INFO, INVITE, MESSAGE, NOTIFY, OPTIONS, PRACK, REFER, REGISTER, SUBSCRIBE, UPDATE, PUBLISH show less	Fraud VoIP
🇺🇸 kot	2026-09-04 05:03:00 (7 hours ago)	scan port 22, 85.215.254.109 block	Port Scan
🇺🇸 knock	2026-09-04 03:04:36 (9 hours ago)	Knock-Knock honeypot brute-force: SIP (56 total hits)	Fraud VoIP Brute-Force
🇺🇸 Neosmith20	2026-09-04 02:32:50 (9 hours ago)	Knock-Knock honeypot brute-force: SIP (59 total hits)	Hacking Brute-Force
🇺🇸 IndigoRidge	2026-09-04 00:16:41 (11 hours ago)	Knock-Knock SIP honeypot activity; time=2026-09-04 00:13:18; sip_method=INVITE; sip_dial_number=+135 ... show more Knock-Knock SIP honeypot activity; time=2026-09-04 00:13:18; sip_method=INVITE; sip_dial_number=+13522510081 show less	Fraud VoIP Brute-Force
🇩🇪 defkev	2026-09-03 10:39:02 (1 day ago)		Fraud VoIP
🇺🇸 kot	2026-09-03 04:02:44 (1 day ago)	scan port 22, 85.215.254.109 block	Port Scan
Anonymous	2026-09-03 02:55:56 (1 day ago)	2026-09-02 06:40:48,451 fail2ban.actions\[3695\]: WARNING \[asterisk-iptables\] Ban 85.215.254.10920 ... show more 2026-09-02 06:40:48,451 fail2ban.actions\[3695\]: WARNING \[asterisk-iptables\] Ban 85.215.254.1092026-09-02 08:42:48,893 fail2ban.actions\[3695\]: WARNING \[asterisk-iptables\] Ban 85.215.254.1092026-09-02 10:44:02,603 fail2ban.actions\[3695\]: WARNING \[asterisk-iptables\] Ban 85.215.254.1092026-09-02 12:45:37,175 fail2ban.actions\[3695\]: WARNING \[asterisk-iptables\] Ban 85.215.254.1092026-09-02 14:48:29,742 fail2ban.actions\[3695\]: WARNING \[asterisk-iptables\] Ban 85.215.254.1092026-09-02 16:51:15,278 fail2ban.actions\[3695\]: WARNING \[asterisk-iptables\] Ban 85.215.254.1092026-09-02 18:52:46,566 fail2ban.actions\[3695\]: WARNING \[asterisk-iptables\] Ban 85.215.254.1092026-09-02 20:54:18,077 fail2ban.actions\[3695\]: WARNING \[asterisk-iptables\] Ban 85.215.254.1092026-09-02 22:55:53,930 fail2ban.actions\[3695\]: WARNING \[asterisk-iptables\] Ban 85.215.254.109 ... show less	Fraud VoIP Brute-Force SSH
🇺🇸 knock	2026-09-03 02:38:43 (1 day ago)	Knock-Knock honeypot brute-force: SIP (41 total hits)	Fraud VoIP Brute-Force
🇺🇸 Neosmith20	2026-09-03 02:08:14 (1 day ago)	Knock-Knock honeypot brute-force: SIP (44 total hits)	Hacking Brute-Force
🇺🇸 IndigoRidge	2026-09-02 23:39:40 (1 day ago)	Knock-Knock SIP honeypot activity; time=2026-09-02 23:36:08; sip_method=INVITE; sip_dial_number=+135 ... show more Knock-Knock SIP honeypot activity; time=2026-09-02 23:36:08; sip_method=INVITE; sip_dial_number=+13522510081 show less	Fraud VoIP Brute-Force
🇬🇧 VoicePro	2026-09-02 17:39:00 (1 day ago)	2026-09-02 15:08:07.706670 == 0.000000 == Leg 1 == SRC->DST == 85.215.254.109:49383 ==> 199. ... show more 2026-09-02 15:08:07.706670 == 0.000000 == Leg 1 == SRC->DST == 85.215.254.109:49383 ==> 199.230.107.77:5060 INVITE sip:[email protected] SIP/2.0 Via: SIP/2.0/UDP 85.215.254.109:49383;branch=z9hG4bK955036103 Max-Forwards: 70 From: <sip:[email protected]>;tag=151644668 To: <sip:[email protected]> Call-ID: 1823353203-209659186-1515338390 CSeq: 1 INVITE Contact: <sip:[email protected]:49383> Content-Type: application/sdp Content-Length: 216 Allow: ACK, BYE, CANCEL, INFO, INVITE, MESSAGE, NOTIFY, OPTIONS, PRACK, REFER, REGISTER, SUBSCRIBE, UPDATE, PUBLISH show less	Port Scan Fraud VoIP
🇨🇴 ingentar	2026-09-02 13:53:47 (1 day ago)	[2026-09-02 08:52:39] SECURITY[19348] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2 ... show more [2026-09-02 08:52:39] SECURITY[19348] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2026-09-02T08:52:39.084-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="300",SessionID="0x7f3c44081e10",LocalAddress="IPV4/UDP/181.143.117.59/5060",RemoteAddress="IPV4/UDP/85.215.254.109/5060",Challenge="6d1b9064",ReceivedChallenge="6d1b9064",ReceivedHash="bca852a285baa3d76e542d9c0b367518" [2026-09-02 08:52:39] SECURITY[19348] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2026-09-02T08:52:39.397-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="18634854008",SessionID="0x7f3c440a1e20",LocalAddress="IPV4/UDP/181.143.117.59/5060",RemoteAddress="IPV4/UDP/85.215.254.109/5060",Challenge="2f235533",ReceivedChallenge="2f235533",ReceivedHash="20436aaf48ddd14aa0aa17d4974a8eed" [2026-09-02 08:52:39] SECURITY[19348] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2026-09-02T08:52:39.419-0500",Severity="Error",Service="SIP",EventVersion="2",A ... show less	Fraud VoIP Brute-Force
🇨🇴 ingentar	2026-09-02 13:21:50 (1 day ago)	[2026-09-02 08:20:40] SECURITY[19348] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2 ... show more [2026-09-02 08:20:40] SECURITY[19348] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2026-09-02T08:20:40.802-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="2001",SessionID="0x7f3c44081e10",LocalAddress="IPV4/UDP/181.143.117.59/5060",RemoteAddress="IPV4/UDP/85.215.254.109/5060",Challenge="3103bd8b",ReceivedChallenge="3103bd8b",ReceivedHash="1253443e49831e112e24c08a61931b5a" [2026-09-02 08:20:41] SECURITY[19348] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2026-09-02T08:20:41.132-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="18634854008",SessionID="0x7f3c4409ab60",LocalAddress="IPV4/UDP/181.143.117.59/5060",RemoteAddress="IPV4/UDP/85.215.254.109/5060",Challenge="36ebba45",ReceivedChallenge="36ebba45",ReceivedHash="343553e18e4875c96dd6863acc8284b1" [2026-09-02 08:20:41] SECURITY[19348] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2026-09-02T08:20:41.146-0500",Severity="Error",Service="SIP",EventVersion="2", ... show less	Fraud VoIP Brute-Force

Showing 1 to 15 of 34 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 198.2.131.167

🇳🇱 185.242.226.104

🇺🇸 185.150.190.130

🇺🇸 136.64.54.78

🇺🇸 129.146.188.65

🇺🇸 70.167.233.181

🇷🇺 45.15.113.195

🇦🇪 193.123.73.95

🇨🇳 140.246.137.102

🇩🇪 136.92.0.108

🇺🇸 136.67.42.162

🇬🇧 104.143.232.189

🇻🇳 103.172.236.241

🇺🇸 91.230.168.130

🇳🇱 85.11.167.154

🇨🇳 60.16.200.87

🇺🇸 35.237.13.130

🇧🇪 35.195.73.60

🇱🇹 187.15.175.156

🇻🇳 171.244.201.80