Is 85.24.209.239 malicious?

IP reputation report for 85.24.209.239: blocklist detections, geolocation, ASN, WHOIS and security posture, aggregated from 100+ threat intelligence sources.

85.24.209.239 is listed on 44 threat intelligence sources

Detected by 44 threat intelligence sources in the isMalicious dataset — review before trusting this IP.

Threat verdict

VerdictListed on blocklists

Appears on threat intelligence blocklists — treat with caution.

Blocklist detections44 sources
Categoriesattack, abuse, malware, phishing, suspicious, bruteforce, attacks, botnet, malicious
Confidence score100/100

Aggregated confidence across the sources reporting this indicator.

First seen2026-06-12
Last updated2026-06-12

Network & location

LocationTumba, Stockholm County, Sweden
ISPBahnhof AB
ASNAS8473 — Bahnhof AB
Network85.24.128.0/17
CompanyDynamic private network
InfrastructureDatacenter, Proxy

Security posture

Open ports9800

Detections

  • Duggytuxy - Blacklist Ips For Fortinet Firewall Aa.txt
  • FireHOL - Blocklist Deattack
  • FireHOL - Blocklist De Sshattack
  • FireHOL - Blocklist Net Uaabuse
  • FireHOL - Bruteforceblockerattack
  • FireHOL - Et Compromisedattack
  • FireHOL - Firehol Level2attack
  • FireHOL - Firehol Level3attack
  • FireHOL - Firehol Level4attack
  • Opendbl Net - Etknown.listmalware
  • Opendbl Net - Bruteforce.listmalware
  • Opendbl Net - Blocklistde All.listmalware
  • Opendbl Net - Ipsum.listmalware
  • Romain Marcoux - Malicious Outgoing IPsphishing
  • Romain Marcoux - Malicious IPsphishing
  • Blocklist - All SSH attacks (48h)attack
  • Blocklist - All Attacks (48h)attack
  • Emerging Threats Compromised IPsmalware
  • CyberCure Blocked URL Feedmalware
  • CyberCure Hash Feedmalware
  • CyberCure IP Feedmalware
  • IPsum Level 2suspicious
  • IPsum Level 3suspicious
  • IPsum Level 6suspicious

+20 more sources in the full report.

Threat categories

Related malicious IPs on nearby networks