AbuseIPDB » 85.237.63.204

85.237.63.204 was found in our database!

This IP was reported 50 times. Confidence of Abuse is 100%: ?

100%

ISP	PJSC Rostelecom, Penza branch
Usage Type	Fixed Line ISP
ASN	AS12389
Hostname(s)	host-85-237-63-204.dsl.sura.ru
Domain Name	penza.net
Country	Russian Federation
City	Penza, Penza Oblast

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 85.237.63.204

Whois 85.237.63.204

IP Abuse Reports for 85.237.63.204:

This IP address has been reported a total of 50 times from 38 distinct sources. 85.237.63.204 was first reported on June 18th 2025, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
rtbh.com.tr	2025-06-25 20:07:21 (2 weeks ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
NeverBehave	2025-06-25 06:56:21 (2 weeks ago)	Fail2ban Triggered	Brute-Force SSH
RAP	2025-06-25 06:53:27 (2 weeks ago)	2025-06-25 06:53:27 UTC Unauthorized activity to TCP port 22. SSH	SSH
gibsonplumbing.com	2025-06-25 06:26:25 (2 weeks ago)	Jun 25 06:26:23 Assets-ubuntu-sfo3a sshd[3538569]: Invalid user user from 85.237.63.204 port 60978<b ... show moreJun 25 06:26:23 Assets-ubuntu-sfo3a sshd[3538569]: Invalid user user from 85.237.63.204 port 60978 Jun 25 06:26:24 Assets-ubuntu-sfo3a sshd[3538571]: Invalid user user from 85.237.63.204 port 60990 Jun 25 06:26:25 Assets-ubuntu-sfo3a sshd[3538573]: Invalid user user from 85.237.63.204 port 60992 ... show less	Brute-Force SSH
rtbh.com.tr	2025-06-24 20:07:20 (2 weeks ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
ThreatBook.io	2025-06-24 00:06:50 (2 weeks ago)	ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/85.237.63.204	SSH
ghostwarriors	2025-06-23 15:50:20 (2 weeks ago)	Unauthorized connection attempt detected, SSH Brute-Force	Port Scan Brute-Force SSH
jomu	2025-06-23 15:35:19 (2 weeks ago)	2025-06-23T15:35:18.236490+00:00 jomu sshd[2462894]: Invalid user user from 85.237.63.204 port 56978 ... show more2025-06-23T15:35:18.236490+00:00 jomu sshd[2462894]: Invalid user user from 85.237.63.204 port 56978 2025-06-23T15:35:18.572586+00:00 jomu sshd[2462899]: Invalid user user from 85.237.63.204 port 56986 2025-06-23T15:35:18.918629+00:00 jomu sshd[2462901]: Invalid user user from 85.237.63.204 port 56996 ... show less	Brute-Force SSH
voolik.com	2025-06-23 08:40:05 (2 weeks ago)	2025-06-23T10:39:47.539069+02:00 bla016-truserv-jhb1-001 sshd[386148]: refused connect from ::ffff:8 ... show more2025-06-23T10:39:47.539069+02:00 bla016-truserv-jhb1-001 sshd[386148]: refused connect from ::ffff:85.237.63.204 (::ffff:85.237.63.204) 2025-06-23T10:39:52.989815+02:00 bla016-truserv-jhb1-001 sshd[386236]: refused connect from ::ffff:85.237.63.204 (::ffff:85.237.63.204) 2025-06-23T10:39:58.469422+02:00 bla016-truserv-jhb1-001 sshd[386643]: refused connect from ::ffff:85.237.63.204 (::ffff:85.237.63.204) 2025-06-23T10:40:03.925929+02:00 bla016-truserv-jhb1-001 sshd[386857]: refused connect from ::ffff:85.237.63.204 (::ffff:85.237.63.204) ... show less	Brute-Force SSH
Woodie	2025-06-23 01:06:14 (2 weeks ago)	2025-06-22T21:06:00.160092-04:00 debian sshd[130257]: Failed password for root from 85.237.63.204 po ... show more2025-06-22T21:06:00.160092-04:00 debian sshd[130257]: Failed password for root from 85.237.63.204 port 49012 ssh2 2025-06-22T21:06:02.672440-04:00 debian sshd[130365]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.237.63.204 user=root 2025-06-22T21:06:04.959065-04:00 debian sshd[130365]: Failed password for root from 85.237.63.204 port 49026 ssh2 2025-06-22T21:06:11.436174-04:00 debian sshd[130498]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.237.63.204 user=root 2025-06-22T21:06:13.959080-04:00 debian sshd[130498]: Failed password for root from 85.237.63.204 port 40792 ssh2 ... show less	Brute-Force SSH
Ssmidge	2025-06-22 15:05:06 (3 weeks ago)	Jun 22 11:05:01 vps-6 sshd[120208]: Failed password for root from 85.237.63.204 port 42466 ssh2<br / ... show moreJun 22 11:05:01 vps-6 sshd[120208]: Failed password for root from 85.237.63.204 port 42466 ssh2 Jun 22 11:05:03 vps-6 sshd[120301]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.237.63.204 user=root Jun 22 11:05:05 vps-6 sshd[120301]: Failed password for root from 85.237.63.204 port 40048 ssh2 ... show less	Brute-Force SSH
Woodie	2025-06-22 03:24:29 (3 weeks ago)	2025-06-21T23:24:12.807051-04:00 debian sshd[2897665]: Failed password for root from 85.237.63.204 p ... show more2025-06-21T23:24:12.807051-04:00 debian sshd[2897665]: Failed password for root from 85.237.63.204 port 60776 ssh2 2025-06-21T23:24:18.569136-04:00 debian sshd[2897770]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.237.63.204 user=root 2025-06-21T23:24:20.538339-04:00 debian sshd[2897770]: Failed password for root from 85.237.63.204 port 39986 ssh2 2025-06-21T23:24:26.018700-04:00 debian sshd[2897872]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.237.63.204 user=root 2025-06-21T23:24:28.419425-04:00 debian sshd[2897872]: Failed password for root from 85.237.63.204 port 49756 ssh2 ... show less	Brute-Force SSH
rtbh.com.tr	2025-06-21 20:07:16 (3 weeks ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
amit177	2025-06-21 01:06:56 (3 weeks ago)		Brute-Force SSH
Anonymous	2025-06-21 00:03:21 (3 weeks ago)	Aggressive web scan	SQL Injection Bad Web Bot Web App Attack

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩