JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

85.239.232.221

Neutral Activity

Abuse confidence score ?

0% Low Risk

584 reports

236 reporters · latest 1 year ago

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS40021
Hostname(s)	vmi2381517.contaboserver.net
Domain Name	contabo.com
Country	🇺🇸 United States of America
City	Seattle, Washington

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

85.239.232.221 has been reported 584 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 85.239.232.221

This IP address has been reported a total of 584 times from 236 distinct sources. 85.239.232.221 was first reported on September 23rd 2024, and the most recent report was 1 year ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Brent Wadleigh	2025-01-09 17:50:46 (1 year ago)	IP attempted SSH bruteforce on port 22. Detected and banned by CrowdSec.	Brute-Force SSH
🇭🇰 小樱	2025-01-09 16:37:16 (1 year ago)	HTTP Flood	DDoS Attack
🇯🇵 zwh	2025-01-07 18:04:52 (1 year ago)	Port Scan	Port Scan
🇩🇪 benou2	2025-01-06 23:00:34 (1 year ago)	firewallservices/pf-scan-multi_ports	Port Scan Hacking
🇧🇷 diego	2025-01-06 21:39:18 (1 year ago)	Events: TCP SYN Discovery or Flooding, Seen 42 times in the last 10800 seconds	DDoS Attack
Anonymous	2025-01-06 20:30:06 (1 year ago)	Triggered: repeated knocking on closed ports.	Port Scan
🇩🇪 baltic-lab.com	2025-01-06 20:25:44 (1 year ago)	2025-01-06T21:24:25.196011+01:00 uk kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9c:74:83:ef: ... show more 2025-01-06T21:24:25.196011+01:00 uk kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9c:74:83:ef:50:98:31:08:00 SRC=85.239.232.221 DST=149.102.130.158 LEN=40 TOS=0x08 PREC=0x20 TTL=243 ID=27988 PROTO=TCP SPT=55045 DPT=60034 WINDOW=1024 RES=0x00 SYN URGP=0 2025-01-06T21:24:43.358162+01:00 uk kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9c:74:83:ef:50:98:31:08:00 SRC=85.239.232.221 DST=149.102.130.158 LEN=40 TOS=0x08 PREC=0x20 TTL=243 ID=22051 PROTO=TCP SPT=55045 DPT=60000 WINDOW=1024 RES=0x00 SYN URGP=0 2025-01-06T21:25:03.912064+01:00 uk kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9c:74:83:ef:50:98:31:08:00 SRC=85.239.232.221 DST=149.102.130.158 LEN=40 TOS=0x08 PREC=0x20 TTL=243 ID=44949 PROTO=TCP SPT=55045 DPT=60093 WINDOW=1024 RES=0x00 SYN URGP=0 2025-01-06T21:25:05.953664+01:00 uk kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9c:74:83:ef:50:98:31:08:00 SRC=85.239.232.221 DST=149.102.130.158 LEN=40 TOS=0x08 PREC=0x20 TTL=243 ID=53309 PROTO=TCP SPT=55045 DPT ... show less	Hacking Brute-Force
🇩🇪 Linux-Tech	2025-01-06 20:25:22 (1 year ago)	Jan 6 21:24:08 hidden kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:28:99:3a:4d:30:af:08: ... show more Jan 6 21:24:08 hidden kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:28:99:3a:4d:30:af:08:00 SRC=85.239.232.221 DST=173.212.244.83 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=50661 PROTO=TCP SPT=55045 DPT=60059 WINDOW=1024 RES=0x00 SYN URGP=0 Jan 6 21:24:23 hidden kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:28:99:3a:4d:30:af:08:00 SRC=85.239.232.221 DST=173.212.244.83 LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=2974 PROTO=TCP SPT=55045 DPT=60004 WINDOW=1024 RES=0x00 SYN URGP=0 Jan 6 21:24:41 hidden kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:28:99:3a:4d:30:af:08:00 SRC=85.239.232.221 DST=173.212.244.83 LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=3264 PROTO=TCP SPT=55045 DPT=60075 WINDOW=1024 RES=0x00 SYN URGP=0 Jan 6 21:25:01 hidden kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:28:99:3a:4d:30:af:08:00 SRC=85.239.232.221 DST=173.212.244.83 LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=22215 PROTO=TCP SPT=55045 DPT=60005 WINDOW=1024 RES=0x00 SYN URGP=0 Jan 6 21:25:21 *hi ... show less	Port Scan Hacking
🇩🇪 Richie	2025-01-06 20:24:19 (1 year ago)	[HOST2] Port Scan detected	Port Scan
Anonymous	2025-01-06 20:24:15 (1 year ago)	fail2ban:piguard2:14,18	Port Scan Brute-Force
🇩🇪 Hessfr	2025-01-06 19:17:13 (1 year ago)	2025-01-06T21:15:24.063360+02:00 de kernel: [12699386.564623] [UFW BLOCK] IN=enp0s31f6 OUT= MAC=90:1 ... show more 2025-01-06T21:15:24.063360+02:00 de kernel: [12699386.564623] [UFW BLOCK] IN=enp0s31f6 OUT= MAC=90:1b:0e:e1:82:93:84:c1:c1:78:9a:ea:08:00 SRC=85.239.232.221 DST=94.130.206.219 LEN=40 TOS=0x00 PREC=0x00 TTL=236 ID=22545 PROTO=TCP SPT=47028 DPT=60144 WINDOW=1024 RES=0x00 SYN URGP=0 2025-01-06T21:15:29.224019+02:00 de kernel: [12699391.725297] [UFW BLOCK] IN=enp0s31f6 OUT= MAC=90:1b:0e:e1:82:93:84:c1:c1:78:9a:ea:08:00 SRC=85.239.232.221 DST=94.130.206.219 LEN=40 TOS=0x00 PREC=0x00 TTL=236 ID=35501 PROTO=TCP SPT=47028 DPT=60685 WINDOW=1024 RES=0x00 SYN URGP=0 2025-01-06T21:15:30.048295+02:00 de kernel: [12699392.549542] [UFW BLOCK] IN=enp0s31f6 OUT= MAC=90:1b:0e:e1:82:93:84:c1:c1:78:9a:ea:08:00 SRC=85.239.232.221 DST=94.130.206.219 LEN=40 TOS=0x00 PREC=0x00 TTL=236 ID=24974 PROTO=TCP SPT=47028 DPT=60526 WINDOW=1024 RES=0x00 SYN URGP=0 2025-01-06T21:16:50.275636+02:00 de kernel: [12699472.776636] [UFW BLOCK] IN=enp0s31f6 OUT= MAC=90:1b:0e:e1:82:93:84:c1:c1:78:9a:ea:08:00 SRC=85.239.232.2 ... show less	Port Scan
🇩🇪 Hessfr	2025-01-06 18:45:23 (1 year ago)	2025-01-06T20:44:19.571604+02:00 de kernel: [12697522.078145] [UFW BLOCK] IN=enp0s31f6 OUT= MAC=90:1 ... show more 2025-01-06T20:44:19.571604+02:00 de kernel: [12697522.078145] [UFW BLOCK] IN=enp0s31f6 OUT= MAC=90:1b:0e:e1:82:93:84:c1:c1:78:9a:ea:08:00 SRC=85.239.232.221 DST=94.130.206.219 LEN=40 TOS=0x00 PREC=0x00 TTL=236 ID=6348 PROTO=TCP SPT=47028 DPT=60020 WINDOW=1024 RES=0x00 SYN URGP=0 2025-01-06T20:44:19.612129+02:00 de kernel: [12697522.118671] [UFW BLOCK] IN=enp0s31f6 OUT= MAC=90:1b:0e:e1:82:93:84:c1:c1:78:9a:ea:08:00 SRC=85.239.232.221 DST=94.130.206.219 LEN=40 TOS=0x00 PREC=0x00 TTL=236 ID=12439 PROTO=TCP SPT=47028 DPT=60178 WINDOW=1024 RES=0x00 SYN URGP=0 2025-01-06T20:44:43.151352+02:00 de kernel: [12697545.657872] [UFW BLOCK] IN=enp0s31f6 OUT= MAC=90:1b:0e:e1:82:93:84:c1:c1:78:9a:ea:08:00 SRC=85.239.232.221 DST=94.130.206.219 LEN=40 TOS=0x00 PREC=0x00 TTL=236 ID=18536 PROTO=TCP SPT=47028 DPT=60599 WINDOW=1024 RES=0x00 SYN URGP=0 2025-01-06T20:45:00.542412+02:00 de kernel: [12697563.048850] [UFW BLOCK] IN=enp0s31f6 OUT= MAC=90:1b:0e:e1:82:93:84:c1:c1:78:9a:ea:08:00 SRC=85.239.232.22 ... show less	Port Scan
🇬🇧 aorth	2025-01-06 18:36:49 (1 year ago)	Jan 06 18:35:49 Failed password for invalid user root from 85.239.232.221 port 45054	Brute-Force SSH
🇩🇪 Hessfr	2025-01-06 18:14:13 (1 year ago)	2025-01-06T20:11:08.292243+02:00 de kernel: [12695530.804223] [UFW BLOCK] IN=enp0s31f6 OUT= MAC=90:1 ... show more 2025-01-06T20:11:08.292243+02:00 de kernel: [12695530.804223] [UFW BLOCK] IN=enp0s31f6 OUT= MAC=90:1b:0e:e1:82:93:84:c1:c1:78:9a:ea:08:00 SRC=85.239.232.221 DST=94.130.206.219 LEN=40 TOS=0x00 PREC=0x00 TTL=236 ID=63710 PROTO=TCP SPT=47028 DPT=60364 WINDOW=1024 RES=0x00 SYN URGP=0 2025-01-06T20:11:27.046823+02:00 de kernel: [12695549.559070] [UFW BLOCK] IN=enp0s31f6 OUT= MAC=90:1b:0e:e1:82:93:84:c1:c1:78:9a:ea:08:00 SRC=85.239.232.221 DST=94.130.206.219 LEN=40 TOS=0x00 PREC=0x00 TTL=236 ID=2364 PROTO=TCP SPT=47028 DPT=60539 WINDOW=1024 RES=0x00 SYN URGP=0 2025-01-06T20:12:27.050118+02:00 de kernel: [12695609.562184] [UFW BLOCK] IN=enp0s31f6 OUT= MAC=90:1b:0e:e1:82:93:84:c1:c1:78:9a:ea:08:00 SRC=85.239.232.221 DST=94.130.206.219 LEN=40 TOS=0x00 PREC=0x00 TTL=236 ID=33624 PROTO=TCP SPT=47028 DPT=60983 WINDOW=1024 RES=0x00 SYN URGP=0 2025-01-06T20:13:07.388005+02:00 de kernel: [12695649.899952] [UFW BLOCK] IN=enp0s31f6 OUT= MAC=90:1b:0e:e1:82:93:84:c1:c1:78:9a:ea:08:00 SRC=85.239.232.22 ... show less	Port Scan
🇫🇮 axonhost	2025-01-06 18:12:56 (1 year ago)	Port Scan detected from 85.239.232.221 (US/United States/vmi1590133.contaboserver.net).	Port Scan

Showing 1 to 15 of 584 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 165.245.246.106

🇫🇷 91.196.152.151

🇺🇸 50.6.251.68

🇺🇸 47.88.56.38

🇭🇰 45.64.74.51

🇺🇸 44.247.127.28

🇸🇬 43.159.39.203

🇺🇸 20.106.172.169

🇬🇧 2a06:4880:2000::3e

🇧🇷 189.114.136.231

🇩🇪 172.68.192.222

🇺🇸 162.216.149.65

🇺🇸 144.172.108.80

🇺🇸 136.117.195.130

🇻🇳 123.25.97.130

🇫🇷 91.196.152.123

🇺🇸 71.6.154.144

🇨🇳 52.81.254.26

🇸🇬 47.84.111.100

🇺🇸 45.132.227.87