This IP address has been reported a total of
622
times from
280 distinct
sources.
85.239.249.222 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
[AUTORAVALT][[15/06/2026 - 04:11:30 -03:00 UTC]
Attack from [85.239.249.222][vmi3334587.contaboserve ...
show more[AUTORAVALT][[15/06/2026 - 04:11:30 -03:00 UTC]
Attack from [85.239.249.222][vmi3334587.contaboserver.net]
Action: BLocKed
FTP Brute-Force -> Running brute force credentials on the FTP server.
Brute-Force -> Credential brute-force attacks on webpage logins and services like SSH, FTP, SIP, SMTP, RDP, etc.
]
...
show less
[AUTORAVALT][[15/06/2026 - 03:19:11 -03:00 UTC]
Attack from [85.239.249.222][vmi3334587.contaboserve ...
show more[AUTORAVALT][[15/06/2026 - 03:19:11 -03:00 UTC]
Attack from [85.239.249.222][vmi3334587.contaboserver.net]
Action: BLocKed
FTP Brute-Force -> Running brute force credentials on the FTP server.
Brute-Force -> Credential brute-force attacks on webpage logins and services like SSH, FTP, SIP, SMTP, RDP, etc.
]
...
show less
(sshd) Failed SSH login from 85.239.249.222 (US/United States/vmi3334587.contaboserver.net): 5 in th ...
show more(sshd) Failed SSH login from 85.239.249.222 (US/United States/vmi3334587.contaboserver.net): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jun 14 03:37:22 13979 sshd[23329]: Invalid user admin from 85.239.249.222 port 34714
Jun 14 03:37:24 13979 sshd[23329]: Failed password for invalid user admin from 85.239.249.222 port 34714 ssh2
Jun 14 03:37:55 13979 sshd[23533]: Invalid user orangepi from 85.239.249.222 port 55820
Jun 14 03:37:56 13979 sshd[23533]: Failed password for invalid user orangepi from 85.239.249.222 port 55820 ssh2
Jun 14 03:38:27 13979 sshd[23905]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.239.249.222 user=root
show less
2026-06-14T10:30:43.847834+02:00 janus sshd[350119]: Invalid user orangepi from 85.239.249.222 port ...
show more2026-06-14T10:30:43.847834+02:00 janus sshd[350119]: Invalid user orangepi from 85.239.249.222 port 47030
2026-06-14T10:30:43.858920+02:00 janus sshd[350119]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.239.249.222
2026-06-14T10:30:45.595182+02:00 janus sshd[350119]: Failed password for invalid user orangepi from 85.239.249.222 port 47030 ssh2
2026-06-14T10:31:22.408320+02:00 janus sshd[350175]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.239.249.222 user=root
2026-06-14T10:31:24.164967+02:00 janus sshd[350175]: Failed password for root from 85.239.249.222 port 45910 ssh2
...
show less
Attack detected by Fortinet - apache: Apache.HTTP.Server.cgi-bin.Path.Traversal - 2026-06-13 19:59:3 ...
show moreAttack detected by Fortinet - apache: Apache.HTTP.Server.cgi-bin.Path.Traversal - 2026-06-13 19:59:38 - Source Port 58436
show less
2026-06-14T08:10:57.689599+02:00 coffeelake sshd[3793097]: Invalid user rollyvpn from 85.239.249.222 ...
show more2026-06-14T08:10:57.689599+02:00 coffeelake sshd[3793097]: Invalid user rollyvpn from 85.239.249.222 port 56546
2026-06-14T08:11:28.906215+02:00 coffeelake sshd[3794293]: Invalid user rohan from 85.239.249.222 port 36654
2026-06-14T08:12:00.034394+02:00 coffeelake sshd[3795354]: Invalid user rocco from 85.239.249.222 port 34308
2026-06-14T08:12:30.921043+02:00 coffeelake sshd[3796569]: Invalid user roberto from 85.239.249.222 port 37388
2026-06-14T08:13:02.022226+02:00 coffeelake sshd[3797459]: Invalid user ricardo from 85.239.249.222 port 50888
...
show less
(sshd) Failed SSH login from 85.239.249.222 (US/United States/vmi3334587.contaboserver.net): 5 in th ...
show more(sshd) Failed SSH login from 85.239.249.222 (US/United States/vmi3334587.contaboserver.net): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jun 14 00:47:35 15845 sshd[19416]: Invalid user admin from 85.239.249.222 port 34288
Jun 14 00:47:37 15845 sshd[19416]: Failed password for invalid user admin from 85.239.249.222 port 34288 ssh2
Jun 14 00:48:08 15845 sshd[19803]: Invalid user orangepi from 85.239.249.222 port 39900
Jun 14 00:48:09 15845 sshd[19803]: Failed password for invalid user orangepi from 85.239.249.222 port 39900 ssh2
Jun 14 00:48:40 15845 sshd[19968]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.239.249.222 user=root
show less
Brute-Force
SSH
Showing 1 to
15
of 622 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩