JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 185.213.164.127

185.213.164.127 was found in our database!

This IP was reported 492 times. Confidence of Abuse is 0%: ?

ISP	Green Web Samaneh Novin PJSC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS61173
Hostname(s)	static.127.164.213.185.clients.irandns.com
Domain Name	greenweb.ir
Country	🇮🇷 Iran (Islamic Republic of)
City	Tehran, Tehran

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 185.213.164.127

Whois 185.213.164.127

IP Abuse Reports for 185.213.164.127:

This IP address has been reported a total of 492 times from 239 distinct sources. 185.213.164.127 was first reported on August 4th 2025, and the most recent report was 9 months ago.

Old Reports: The most recent abuse report for this IP address is from 9 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 rtbh.com.tr	2025-09-09 20:08:43 (9 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇨🇳 ThreatBook.io	2025-09-08 23:06:29 (9 months ago)	ThreatBook Intelligence: Spam more details on http://threatbook.io/ip/185.213.164.127	SSH
🇹🇷 rtbh.com.tr	2025-09-08 20:08:41 (9 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇺🇸 bigscoots.com	2025-09-08 09:45:13 (9 months ago)	185.213.164.127 (IR/Iran/static.127.164.213.185.clients.irandns.com), 5 distributed sshd attacks on ... show more 185.213.164.127 (IR/Iran/static.127.164.213.185.clients.irandns.com), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Sep 8 09:42:56 23718 sshd[23960]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.98.191.214 user=root Sep 8 09:42:58 23718 sshd[23960]: Failed password for root from 191.98.191.214 port 42580 ssh2 Sep 8 09:45:03 23718 sshd[24188]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.180.193.224 user=root Sep 8 09:42:10 23718 sshd[23940]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.213.164.127 user=root Sep 8 09:42:12 23718 sshd[23940]: Failed password for root from 185.213.164.127 port 43874 ssh2 IP Addresses Blocked: 191.98.191.214 (PE/Peru/-) 111.180.193.224 (CN/China/-) show less	Brute-Force SSH
🇳🇱 bontekoe.technology	2025-09-08 09:31:22 (9 months ago)	185.213.164.127 banned on rtr - Threshold reached: 3 failures	SSH
Anonymous	2025-09-08 09:17:21 (9 months ago)	2025-09-08T09:08:23.232492+00:00 scw-871879 sshd[3684826]: Invalid user webapp from 185.213.164.127 ... show more 2025-09-08T09:08:23.232492+00:00 scw-871879 sshd[3684826]: Invalid user webapp from 185.213.164.127 port 40282 2025-09-08T09:09:31.710494+00:00 scw-871879 sshd[3685045]: Invalid user azureuser from 185.213.164.127 port 38586 2025-09-08T09:10:40.904212+00:00 scw-871879 sshd[3685228]: User redis from 185.213.164.127 not allowed because none of user's groups are listed in AllowGroups 2025-09-08T09:12:50.784578+00:00 scw-871879 sshd[3685616]: Invalid user ftpuser from 185.213.164.127 port 37338 2025-09-08T09:17:19.942861+00:00 scw-871879 sshd[3686086]: Invalid user nexus from 185.213.164.127 port 42660 ... show less	Brute-Force SSH
Anonymous	2025-09-08 08:57:22 (9 months ago)	2025-09-08T08:48:42.464575+00:00 scw-871879 sshd[3683024]: Invalid user grid from 185.213.164.127 po ... show more 2025-09-08T08:48:42.464575+00:00 scw-871879 sshd[3683024]: Invalid user grid from 185.213.164.127 port 48178 2025-09-08T08:52:53.396014+00:00 scw-871879 sshd[3683170]: Invalid user tester from 185.213.164.127 port 50134 2025-09-08T08:53:58.657509+00:00 scw-871879 sshd[3683226]: Invalid user deploy from 185.213.164.127 port 59348 2025-09-08T08:55:07.440269+00:00 scw-871879 sshd[3683302]: Invalid user fish from 185.213.164.127 port 55250 2025-09-08T08:57:21.076962+00:00 scw-871879 sshd[3683752]: Invalid user informix from 185.213.164.127 port 44896 ... show less	Brute-Force SSH
🇵🇱 v-lo.krakow.pl	2025-09-08 08:55:39 (9 months ago)	SSH BruteForce attack	Brute-Force SSH
🇺🇸 bigscoots.com	2025-09-08 08:54:09 (9 months ago)	(sshd) Failed SSH login from 185.213.164.127 (IR/Iran/static.127.164.213.185.clients.irandns.com): 5 ... show more (sshd) Failed SSH login from 185.213.164.127 (IR/Iran/static.127.164.213.185.clients.irandns.com): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Sep 8 03:49:17 15442 sshd[7052]: Invalid user grid from 185.213.164.127 port 48440 Sep 8 03:49:19 15442 sshd[7052]: Failed password for invalid user grid from 185.213.164.127 port 48440 ssh2 Sep 8 03:53:02 15442 sshd[7627]: Invalid user tester from 185.213.164.127 port 47718 Sep 8 03:53:04 15442 sshd[7627]: Failed password for invalid user tester from 185.213.164.127 port 47718 ssh2 Sep 8 03:54:06 15442 sshd[7794]: Invalid user deploy from 185.213.164.127 port 57694 show less	Brute-Force SSH
🇳🇱 SchorelWeb	2025-09-08 08:52:17 (9 months ago)	Cluster member (Omitted) (US/United States/-) said, DENY 185.213.164.127, Reason:[(sshd) Failed SSH ... show more Cluster member (Omitted) (US/United States/-) said, DENY 185.213.164.127, Reason:[(sshd) Failed SSH login from 185.213.164.127 (IR/Iran/static.127.164.213.185.clients.irandns.com): 3 in the last 3600 secs] show less	Brute-Force SSH
🇵🇱 Nevex	2025-09-08 08:44:48 (9 months ago)	Fail2Ban automatic report	Brute-Force SSH
🇷🇺 unitrq	2025-09-07 23:54:22 (9 months ago)	2025-09-07T23:47:22.687592+00:00 nordgron.com sshd-session[79366]: Invalid user lenovo from 185.213. ... show more 2025-09-07T23:47:22.687592+00:00 nordgron.com sshd-session[79366]: Invalid user lenovo from 185.213.164.127 port 47106 2025-09-07T23:48:25.601793+00:00 nordgron.com sshd-session[79382]: Invalid user fish from 185.213.164.127 port 36552 2025-09-07T23:50:32.617741+00:00 nordgron.com sshd-session[79459]: Invalid user white from 185.213.164.127 port 35110 2025-09-07T23:52:35.304913+00:00 nordgron.com sshd-session[79551]: Invalid user mysql from 185.213.164.127 port 55338 2025-09-07T23:54:34.908391+00:00 nordgron.com sshd-session[79615]: Invalid user local from 185.213.164.127 port 47062 ... show less	Brute-Force SSH
🇩🇪 Hyper Tech⚡	2025-09-07 23:37:16 (9 months ago)	Automatically reported by the Fail2Ban security system due to suspicious activity	Brute-Force SSH
🇷🇺 unitrq	2025-09-07 23:36:50 (9 months ago)	2025-09-07T23:31:08.763608+00:00 nordgron.com sshd-session[78849]: Invalid user z from 185.213.164.1 ... show more 2025-09-07T23:31:08.763608+00:00 nordgron.com sshd-session[78849]: Invalid user z from 185.213.164.127 port 41442 2025-09-07T23:33:47.777546+00:00 nordgron.com sshd-session[78947]: Invalid user administrator from 185.213.164.127 port 53496 2025-09-07T23:34:54.300631+00:00 nordgron.com sshd-session[78988]: Invalid user webmaster from 185.213.164.127 port 49134 2025-09-07T23:35:58.724106+00:00 nordgron.com sshd-session[79018]: Invalid user portal from 185.213.164.127 port 52216 2025-09-07T23:37:03.837630+00:00 nordgron.com sshd-session[79061]: Invalid user front from 185.213.164.127 port 43384 ... show less	Brute-Force SSH
🇺🇸 Snow Dev	2025-09-07 23:34:37 (9 months ago)	2025-09-07T20:30:39.858447-03:00 watermelon sshd[664123]: Invalid user z from 185.213.164.127 port 5 ... show more 2025-09-07T20:30:39.858447-03:00 watermelon sshd[664123]: Invalid user z from 185.213.164.127 port 57830 2025-09-07T20:33:30.956817-03:00 watermelon sshd[664169]: Invalid user administrator from 185.213.164.127 port 47824 2025-09-07T20:34:37.238479-03:00 watermelon sshd[664191]: Invalid user webmaster from 185.213.164.127 port 55668 ... show less	Brute-Force

Showing 1 to 15 of 492 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇬 88.204.46.206

🇺🇸 2604:a940:300:5b6:0:2b::

🇧🇪 198.235.24.133

🇳🇱 192.109.200.78

🇧🇬 185.253.160.7

🇺🇸 172.182.225.194

🇯🇵 116.81.63.46

🇮🇳 103.91.246.101

🇷🇺 95.27.81.175

🇵🇹 82.140.183.100

🇺🇸 65.49.1.84

🇪🇸 46.222.54.240

🇳🇱 45.156.87.93

🇻🇳 14.225.253.26

🇺🇸 3.148.102.244

🇬🇧 188.122.39.33

🇫🇷 185.177.72.10

🇺🇸 147.185.132.255

🇧🇷 144.22.238.238

🇷🇴 141.98.83.240