This IP address has been reported a total of
17
times from
17 distinct
sources.
85.239.149.72 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Aug 17 19:18:39 vps-93630192 sshd[2929107]: Failed password for invalid user admin from 85.239.149.7 ...
show moreAug 17 19:18:39 vps-93630192 sshd[2929107]: Failed password for invalid user admin from 85.239.149.72 port 44372 ssh2
Aug 17 19:20:15 vps-93630192 sshd[2932896]: Invalid user orangepi from 85.239.149.72 port 60644
Aug 17 19:20:15 vps-93630192 sshd[2932896]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.239.149.72
Aug 17 19:20:17 vps-93630192 sshd[2932896]: Failed password for invalid user orangepi from 85.239.149.72 port 60644 ssh2
Aug 17 19:21:48 vps-93630192 sshd[2934319]: User root from 85.239.149.72 not allowed because not listed in AllowUsers
...
show less
2026-08-17T19:05:19.548039+00:00 edge-hur-fmt01.int.pdx.net.uk sshd[1045188]: Invalid user admin fro ...
show more2026-08-17T19:05:19.548039+00:00 edge-hur-fmt01.int.pdx.net.uk sshd[1045188]: Invalid user admin from 85.239.149.72 port 60080
2026-08-17T19:06:23.252700+00:00 edge-hur-fmt01.int.pdx.net.uk sshd[1045297]: Invalid user orangepi from 85.239.149.72 port 58928
2026-08-17T19:15:24.793919+00:00 edge-hur-fmt01.int.pdx.net.uk sshd[1046330]: Invalid user test from 85.239.149.72 port 39508
...
show less
Aug 17 21:00:38 [host] sshd[3320]: Connection closed by invalid user admin 85.239.149.72 port 39242 ...
show moreAug 17 21:00:38 [host] sshd[3320]: Connection closed by invalid user admin 85.239.149.72 port 39242
Aug 17 21:01:40 [host] sshd[3409]: Invalid user orangepi from 85.239.149.72 port 35004
Aug 17 21:01:40 [host] sshd[3409]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=
Aug 17 21:01:42 [host] sshd[3409]: Failed password for invalid user orangepi from 85.239.149.72 port
Aug 17 21:01:42 [host] sshd[3409]: Connection closed by invalid user orangepi 85.239.149.72 port 350
show less
2026-08-17T20:57:34.890035+02:00 mail sshd-session[1382049]: Invalid user admin from 85.239.149.72 p ...
show more2026-08-17T20:57:34.890035+02:00 mail sshd-session[1382049]: Invalid user admin from 85.239.149.72 port 34698
2026-08-17T20:57:36.735643+02:00 mail sshd-session[1382049]: Failed password for invalid user admin from 85.239.149.72 port 34698 ssh2
2026-08-17T20:58:15.658767+02:00 mail sshd-session[1382111]: Invalid user orangepi from 85.239.149.72 port 60824
2026-08-17T20:58:17.799686+02:00 mail sshd-session[1382111]: Failed password for invalid user orangepi from 85.239.149.72 port 60824 ssh2
2026-08-17T20:59:32.541341+02:00 mail sshd-session[1382214]: Failed password for root from 85.239.149.72 port 55986 ssh2
...
show less
Honeypot hit: Brute-force attack detected on 22/SSH
• Credentials: admin:admin, orangepi:orangepi, r ...
show moreHoneypot hit: Brute-force attack detected on 22/SSH
• Credentials: admin:admin, orangepi:orangepi, root:P
• Number of login attempts: 3
• Client: SSH-2.0-libssh2_1.11.1
show less
2026-08-17T13:44:42.952638-05:00 lab.bjmgeek.science sshd-session[2776419]: Invalid user admin from ...
show more2026-08-17T13:44:42.952638-05:00 lab.bjmgeek.science sshd-session[2776419]: Invalid user admin from 85.239.149.72 port 35542
2026-08-17T13:44:43.097016-05:00 lab.bjmgeek.science sshd-session[2776419]: Connection closed by invalid user admin 85.239.149.72 port 35542 [preauth]
2026-08-17T13:45:13.692354-05:00 lab.bjmgeek.science sshd-session[2776425]: Invalid user orangepi from 85.239.149.72 port 43768
...
show less
Automated SSH brute-force attack detected. The IP repeatedly attempted to authenticate to port 22 us ...
show moreAutomated SSH brute-force attack detected. The IP repeatedly attempted to authenticate to port 22 using multiple usernames and password guesses within a short timeframe.
show less
2026-08-17T20:14:50.914788+02:00 vlinux sshd-session[1124831]: Invalid user admin from 85.239.149.72 ...
show more2026-08-17T20:14:50.914788+02:00 vlinux sshd-session[1124831]: Invalid user admin from 85.239.149.72 port 47744
2026-08-17T20:15:20.978790+02:00 vlinux sshd-session[1124930]: Invalid user orangepi from 85.239.149.72 port 41214
2026-08-17T20:19:17.284330+02:00 vlinux sshd-session[1125625]: Invalid user test from 85.239.149.72 port 40724
...
show less