JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 85.121.183.194

85.121.183.194 was found in our database!

This IP was reported 44 times. Confidence of Abuse is 100%: ?

100%

ISP	AlexHost SRL
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200019
Domain Name	alexhost.com
Country	🇷🇴 Romania
City	Bucharest, Bucharest

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 85.121.183.194

Whois 85.121.183.194

IP Abuse Reports for 85.121.183.194:

This IP address has been reported a total of 44 times from 34 distinct sources. 85.121.183.194 was first reported on May 16th 2026, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇳 ThreatBook.io	2026-05-18 22:32:30 (2 weeks ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/85.121.183.194	SSH
🇺🇸 sumnone	2026-05-18 11:02:14 (2 weeks ago)	Port probing on unauthorized port 23	Port Scan Hacking Exploited Host
🇲🇿 delsio	2026-05-18 01:59:36 (2 weeks ago)	AS37697 ntopng observed inbound attack; alert=Live Flow Malicious Fingerprint; source=85.121.183.194 ... show more AS37697 ntopng observed inbound attack; alert=Live Flow Malicious Fingerprint; source=85.121.183.194; destination=160.119.118.110; destination_port=23; score=120; action=bgp_blackhole_and_flowspec_discard; block_duration=18000s; reason=high-confidence alert=Live Flow Malicious Fingerprint dst=160.119.118.110 port=23 show less	Port Scan Hacking
🇦🇹 urnilxfgbez	2026-05-17 22:45:00 (2 weeks ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇬🇧 PeravixGroup	2026-05-17 21:55:11 (2 weeks ago)	Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: ME ... show more Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: MEDIUM. Aaran.cloud show less	IoT Targeted Brute-Force
🇳🇱 oisecnet	2026-05-17 21:01:16 (2 weeks ago)	Automated report: Unauthorized vulnerability scanning detected on 2026-05-17. 1 requests from this I ... show more Automated report: Unauthorized vulnerability scanning detected on 2026-05-17. 1 requests from this IP. show less	Brute-Force Web App Attack SSH
🇺🇸 xmission.com	2026-05-17 16:19:23 (2 weeks ago)	Blocked by UFW (TCP on 7547) Source port: 46530 TTL: 55 Packet length: 40 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 7547) Source port: 46530 TTL: 55 Packet length: 40 TOS: 0x00 This report (for 85.121.183.194) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇹🇭 Sawasdee	2026-05-17 12:09:28 (2 weeks ago)	Port Scan ...	Port Scan
🇺🇸 xmission.com	2026-05-17 10:51:15 (2 weeks ago)	Blocked by UFW (TCP on 8081) Source port: 42946 TTL: 44 Packet length: 40 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 8081) Source port: 42946 TTL: 44 Packet length: 40 TOS: 0x08 This report (for 85.121.183.194) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 MPL	2026-05-17 06:09:06 (2 weeks ago)	tcp/23 (55 or more attempts)	Port Scan
🇺🇸 RAP	2026-05-17 04:17:29 (2 weeks ago)	2026-05-17 04:17:29 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇫🇷 security.rdmc.fr	2026-05-17 04:07:36 (2 weeks ago)	Port Scan Attack proto:TCP src:43458 dst:23	Port Scan
🇩🇰 SaltySoftworks	2026-05-17 02:26:51 (2 weeks ago)	2026-05-17T02:24:54.126776+00:00 kernel: TCP Attack: SRC=85.121.183.194 DST=[Masked] LEN=40 TOS=0x0 ... show more 2026-05-17T02:24:54.126776+00:00 kernel: TCP Attack: SRC=85.121.183.194 DST=[Masked] LEN=40 TOS=0x00 PREC=0x00 TTL=55 PROTO=TCP SPT=43458 DPT=23 WINDOW=34026 RES=0x00 SYN URGP=0 show less	Hacking Bad Web Bot Web App Attack
🇨🇭 GAS	2026-05-17 02:05:29 (2 weeks ago)	SSH Honeypot attack. {"duser":"","level":"info","msg":"Telnet login attempt","password":"","src":"85 ... show more SSH Honeypot attack. {"duser":"","level":"info","msg":"Telnet login attempt","password":"","src":"85.121.183.194","time":"2026-05-17T02:03:58.289425449Z"} {"duser":"","level":"info","msg":"Telnet login attempt","password":"","src":"85.121.183.194","time":"2026-05-17T02:04:01.045922036Z"} {"duser":"","level":"info","msg":"Telnet login attempt","password":"","src":"85.121.183.194","time":"2026-05-17T02:04:04.169564712Z"} {"duser":"","level":"info","msg":"Telnet login attempt","password":"","src":"85.121.183.194","time":"2026-05-17T02:04:15.960907226Z"} {"duser":"","level":"info","msg":"Telnet login attempt","password":"","src":"85.121.183.194","time":"2026-05-17T02:04:16.063929676Z"} {"duser":"","level":"info","msg":"Telnet login attempt","password":"","src":"85.121.183.194","time":"2026-05-17T02:04:22.245322453Z"} {"duser":"","level":"info","msg":"Telnet login attempt","password":"","src":"85.121.183.194","time":"2026-05-17T02:04:23.110281892Z"} {"duser":"","level":"info","msg":"Telnet login attempt","pass ... show less	Brute-Force SSH
🇮🇹 abuseiphack	2026-05-17 01:52:02 (2 weeks ago)	Automatic report for brute force attack	Web App Attack

Showing 1 to 15 of 44 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 106.13.167.239

🇪🇸 213.165.74.84

🇬🇧 188.240.59.31

🇳🇱 176.65.139.236

🇺🇸 165.154.162.204

🇨🇮 154.0.30.137

🇷🇴 92.118.39.62

🇱🇹 62.60.130.14

🇳🇱 45.148.10.152

🇸🇬 43.134.41.39

🇸🇬 156.245.145.111

🇻🇳 116.99.169.49

🇧🇪 109.128.66.24

🇩🇪 109.91.4.177

🇧🇬 79.124.40.174

🇧🇷 45.205.1.246

🇹🇼 198.235.24.70

🇿🇼 197.221.251.221

🇮🇷 193.151.140.91

🇺🇸 156.239.253.250