5.190.252.85

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted.
Abuse Confidence Score
0% Low Risk
16 reports
13 reporters · latest 3 months ago
ISP
ICT(mokhaberat)
Usage Type
Fixed Line ISP
ASN
AS58224
Domain Name
tci.ir
Country
🇮🇷 Iran (Islamic Republic of)
City
Shiraz, Fars
Log in to view charts and search reports for this IP. Log In

No reports in the last 60 days

5.190.252.85 has been reported 16 times. The most recent report is from .

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Total reports
16 from 13 distinct reporters
First reported
Most recent report
Reporter IoA Timestamp (UTC) Comment Categories
🇫🇷 security.rdmc.fr
Port Scan Attack proto:TCP src:34605 dst:23
Port Scan
🇵🇱 mkey
Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT | PORTS=23 | HITS=2 | IPSET=ADD | FIRST=2026-08-12 15:44:59 | LAST=2026-08-12 15:45:35. Last seen 2026-08-12 15:45:35.
Port Scan
🇺🇸 MPL
tcp/52869
Port Scan
🇫🇷 Entalpi.net
Tried to hit sensible closed port commonly used in attacks
Port Scan Hacking
🇺🇸 MPL
tcp/23 (3 or more attempts)
Port Scan
Anonymous
Unauthorized access (23/tcp/telnet) Targeted IoT device:Unknown (Probability:High)
Port Scan IoT Targeted
🇺🇸 schematics.cc
Blocked by on honeypot2 [23/tcp] | SPT: 34605 | TTL: 52 | LEN: 44 | TOS: 0x00 • Reported by: abuse.terraforge.fun
Port Scan IoT Targeted
🇫🇷 vtchost.com
Port Scan
🇺🇸 MPL
tcp/23 (2 or more attempts)
Port Scan
🇩🇪 bescared
F2B - Malicious activity detected. Unauthorized connection attempt: Telnet. -8ff06ede-
Port Scan
🇧🇷 SOC Blue Team
IPs get by Hunting on SIEM
Phishing Web Spam Port Scan Hacking
🇺🇸 xmission.com
Blocked by UFW (TCP on 52869) Source port: 13180 TTL: 52 Packet length: 44 TOS: 0x00 This report (for 5.190.252.85) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇺🇸 sumnone
Port probing on unauthorized port 37215
Port Scan Hacking Exploited Host
🇨🇦 senkodev
Brute-Force SSH
🇺🇸 MPL
tcp/37215
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 204.48.19.0
🇧🇷 136.248.121.226
🇵🇰 125.62.90.19
🇮🇳 122.185.44.206
🇲🇾 113.211.133.140
🇸🇮 102.220.161.85
🇳🇬 102.88.137.80
🇹🇷 85.104.7.120
🇲🇾 47.250.171.153
🇨🇳 42.63.158.14
🇺🇸 205.188.172.119
🇨🇭 179.43.153.18
🇺🇸 172.86.89.13
🇲🇾 161.139.152.2
🇺🇸 147.185.132.195
🇰🇷 125.136.121.123
🇨🇳 124.90.215.33
🇻🇳 113.192.16.241
🇳🇱 86.38.187.135
🇷🇺 85.175.194.65
feedback