JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 85.239.249.207

85.239.249.207 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 74%: ?

74%

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS40021
Hostname(s)	vmi3192904.contaboserver.net
Domain Name	contabo.com
Country	🇺🇸 United States of America
City	Orangeburg, New York

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 85.239.249.207

Whois 85.239.249.207

IP Abuse Reports for 85.239.249.207:

This IP address has been reported a total of 13 times from 12 distinct sources. 85.239.249.207 was first reported on June 17th 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 Blinker73	2026-06-19 05:56:25 (2 hours ago)	2026-06-19T01:29 kernel: OUT= SRC=85.239.249.207 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=47887 PR ... show more 2026-06-19T01:29 kernel: OUT= SRC=85.239.249.207 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=47887 PROTO=TCP SPT=46687 DPT=6379 WINDOW=1024 RES=0x00 SYN URGP=0 2026-06-19T01:29 kernel: OUT= SRC=85.239.249.207 LEN=40 TOS=0x08 PREC=0x20 TTL=238 ID=5008 PROTO=TCP SPT=46551 DPT=6379 WINDOW=1024 RES=0x00 SYN URGP=0 2026-06-19T01:30 kernel: OUT= SRC=85.239.249.207 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=16645 PROTO=TCP SPT=46551 DPT=2375 WINDOW=1024 RES=0x00 SYN URGP= show less	Port Scan
🇫🇷 zulzeen	2026-06-19 05:48:33 (2 hours ago)	[incypit-web] Blocked by SysWarden Firewall [BLOCK] (Database/Cache Attack)	Hacking Brute-Force
🇩🇪 Tamsweb	2026-06-19 05:47:03 (2 hours ago)	Unauthorized connection attempt or scan from 85.239.249.207 on port 6379 ...	Port Scan
🇩🇪 iNetWorker	2026-06-19 05:41:18 (2 hours ago)	trying to access non-authorized port	Port Scan
🇩🇪 andrepcg	2026-06-19 05:33:04 (2 hours ago)	Port scanning (85.239.249.207 -> :6379)	Port Scan Brute-Force
🇺🇸 drewf.ink	2026-06-19 05:25:32 (2 hours ago)	[05:25] Port scanning. Port(s) scanned: TCP/2375	Port Scan
🇸🇬 drewf.ink	2026-06-19 04:13:24 (3 hours ago)	[04:13] Port scanning. Port(s) scanned: TCP/2375	Port Scan
Anonymous	2026-06-19 03:56:54 (4 hours ago)	2026-06-19T04:56:53.807299+01:00 vps kernel: [43581565.971754] [PORTSCAN DETECTED] IN=ens3 OUT= MAC= ... show more 2026-06-19T04:56:53.807299+01:00 vps kernel: [43581565.971754] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=85.239.249.207 DST=54.37.14.118 LEN=40 TOS=0x08 PREC=0x20 TTL=234 ID=36650 PROTO=TCP SPT=59094 DPT=2375 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan Brute-Force
🇩🇪 phil2k	2026-06-19 03:35:42 (4 hours ago)	fail2ban:firewall:2026-06-19T05:29:29.035920+02:00 <SRV> firewall: filter IN=<ANONYMIZED_INTERFACE> ... show more fail2ban:firewall:2026-06-19T05:29:29.035920+02:00 <SRV> firewall: filter IN=<ANONYMIZED_INTERFACE> OUT= MAC=<ANONYMIZED_MAC> SRC=85.239.249.207 DST=<PRIVATE_IPv4> LEN=40 TOS=0x08 PREC=0x20 TTL=244 ID=14849 PROTO=TCP SPT=59094 DPT=2375 WINDOW=1024 RES=0x00 SYN URGP=0 2026-06-19T05:35:39.851925+02:00 <SRV> firewall: filter IN=<ANONYMIZED_INTERFACE> OUT= MAC=<ANONYMIZED_MAC> SRC=85.239.249.207 DST=<PRIVATE_IPv4> LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=46729 PROTO=TCP SPT=59094 DPT=6379 WINDOW=1024 RES=0x00 SYN URGP=0 show less	DDoS Attack Port Scan Brute-Force
Anonymous	2026-06-19 03:31:43 (4 hours ago)	Try to connect to Port_Scan_6379_stealth	Port Scan
🇩🇪 ValtonTahiri	2026-06-19 03:18:20 (4 hours ago)	UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly as ... show more UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=85.239.249.207; proto=TCP; source_port=59094; target_port=6379; flags=SYN show less	Port Scan
🇨🇦 Filli Group	2026-06-19 00:55:14 (7 hours ago)	2026-06-19T02:55:08.858868+02:00 tor01-ca-pop.as202427.net sshd[1568017]: User root from 85.239.249. ... show more 2026-06-19T02:55:08.858868+02:00 tor01-ca-pop.as202427.net sshd[1568017]: User root from 85.239.249.207 not allowed because not listed in AllowUsers 2026-06-19T02:55:10.538842+02:00 tor01-ca-pop.as202427.net sshd[1568021]: User root from 85.239.249.207 not allowed because not listed in AllowUsers 2026-06-19T02:55:14.110642+02:00 tor01-ca-pop.as202427.net sshd[1568029]: User root from 85.239.249.207 not allowed because not listed in AllowUsers ... show less	Brute-Force SSH
🇺🇸 Floofie	2026-06-17 21:37:47 (1 day ago)	2026-06-17T17:37:46.797724-04:00 site sshd-session[19727]: User root from 85.239.249.207 not allowed ... show more 2026-06-17T17:37:46.797724-04:00 site sshd-session[19727]: User root from 85.239.249.207 not allowed because not listed in AllowUsers 2026-06-17T17:37:47.020054-04:00 site sshd-session[19729]: User root from 85.239.249.207 not allowed because not listed in AllowUsers 2026-06-17T17:37:47.175581-04:00 site sshd-session[19731]: User root from 85.239.249.207 not allowed because not listed in AllowUsers ... show less	SSH

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇪 168.63.79.147

🇩🇪 167.233.68.137

🇸🇬 152.42.240.74

🇿🇦 102.64.40.139

🇬🇧 89.37.172.135

🇷🇺 46.39.254.221

🇸🇬 43.159.51.254

🇬🇧 35.203.210.42

🇨🇳 27.43.206.116

🇬🇧 193.163.125.248

🇧🇷 187.93.68.178

🇷🇺 178.178.197.68

🇺🇸 147.185.132.125

🇲🇲 136.228.161.66

🇰🇷 125.240.188.136

🇫🇷 91.231.89.212

🇫🇷 85.217.140.41

🇧🇬 79.124.60.146

🇺🇸 65.49.1.112

🇨🇳 61.145.56.3