JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 85.133.185.28

85.133.185.28 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 69%: ?

69%

ISP	Sepanta Communication Development Co. Ltd
Usage Type	Commercial
ASN	AS39074
Hostname(s)	85.133.185.28.pos-1-0.7tir.sepanta.net
Domain Name	sepanta.com
Country	🇮🇷 Iran (Islamic Republic of)
City	Tehran, Tehran

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 85.133.185.28

Whois 85.133.185.28

IP Abuse Reports for 85.133.185.28:

This IP address has been reported a total of 11 times from 11 distinct sources. 85.133.185.28 was first reported on June 28th 2026, and the most recent report was 16 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Justin F. \| AS204464	2026-06-30 10:34:35 (16 hours ago)	Honeypot [nx-infrastructure]: Empty payload (likely service probe); 22222 [1] TCP Reported by: Justi ... show more Honeypot [nx-infrastructure]: Empty payload (likely service probe); 22222 [1] TCP Reported by: Justin F. show less	Port Scan
🇸🇬 sh97	2026-06-30 10:00:04 (16 hours ago)	singapore-datacenter.serverpoint.com: SSH Brute Force from 85.133.185.28 at 2026-06-30 15:30:03 IST	Brute-Force SSH
🇧🇬 MazenHost	2026-06-30 08:29:37 (18 hours ago)	1782808176 - 06/30/2026 11:29:36 Host: 85.133.185.28/85.133.185.28 Port: 2000 TCP Blocked ...	Port Scan
🇨🇦 senkodev	2026-06-30 03:16:45 (23 hours ago)	2026-06-30T03:16:44.566940Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 85.133.185.28:3553 ... show more 2026-06-30T03:16:44.566940Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 85.133.185.28:35536 (158.69.22.11:2222) [session: 23ab37876588] 2026-06-30T03:16:44.916099Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 85.133.185.28:35548 (158.69.22.11:2222) [session: ff3ca73890b7] ... show less	Brute-Force SSH
🇧🇬 OHOST.BG	2026-06-29 16:05:52 (1 day ago)	2026-06-29T19:05:45.141207+03:00 tigerplex sshd[3739244]: Failed password for root from 85.133.185.2 ... show more 2026-06-29T19:05:45.141207+03:00 tigerplex sshd[3739244]: Failed password for root from 85.133.185.28 port 42586 ssh2 2026-06-29T19:05:46.553466+03:00 tigerplex sshd[3739253]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.133.185.28 user=root 2026-06-29T19:05:48.407358+03:00 tigerplex sshd[3739253]: Failed password for root from 85.133.185.28 port 42596 ssh2 2026-06-29T19:05:49.743402+03:00 tigerplex sshd[3739263]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.133.185.28 user=root 2026-06-29T19:05:52.009835+03:00 tigerplex sshd[3739263]: Failed password for root from 85.133.185.28 port 42608 ssh2 ... show less	Brute-Force SSH
🇺🇸 nasset	2026-06-29 12:56:41 (1 day ago)	2026-06-29T05:56:35.242149-07:00 ftp-green sshd[2943481]: pam_unix(sshd:auth): authentication failur ... show more 2026-06-29T05:56:35.242149-07:00 ftp-green sshd[2943481]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.133.185.28 user=root 2026-06-29T05:56:37.470575-07:00 ftp-green sshd[2943481]: Failed password for root from 85.133.185.28 port 50354 ssh2 2026-06-29T05:56:38.420055-07:00 ftp-green sshd[2943481]: Connection closed by authenticating user root 85.133.185.28 port 50354 [preauth] 2026-06-29T05:56:39.319217-07:00 ftp-green sshd[2943483]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.133.185.28 user=root 2026-06-29T05:56:41.096432-07:00 ftp-green sshd[2943483]: Failed password for root from 85.133.185.28 port 50370 ssh2 ... show less	Brute-Force SSH
🇹🇼 taiwanfrp.me	2026-06-29 10:47:48 (1 day ago)	taiwanfrp NewUserConn auto-ban: reason=ip_over_target_scan_limit_60s1, conn10s=1, targets10m=1, targ ... show more taiwanfrp NewUserConn auto-ban: reason=ip_over_target_scan_limit_60s1, conn10s=1, targets10m=1, target=proxy:kiwicanary.MinecraftJava5fisdfsfeefedfsfds\|port:- show less	Port Scan Hacking
🇬🇧 Mendip_Defender	2026-06-29 06:20:47 (1 day ago)	Jun 29 07:20:33 jackstringer sshd[565589]: pam_unix(sshd:auth): authentication failure; logname= uid ... show more Jun 29 07:20:33 jackstringer sshd[565589]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.133.185.28 user=root Jun 29 07:20:35 jackstringer sshd[565589]: Failed password for root from 85.133.185.28 port 44580 ssh2 Jun 29 07:20:37 jackstringer sshd[565591]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.133.185.28 user=root Jun 29 07:20:39 jackstringer sshd[565591]: Failed password for root from 85.133.185.28 port 49822 ssh2 ... show less	Brute-Force SSH
🇩🇪 Silly Development	2026-06-29 03:59:02 (1 day ago)	Jun 29 03:58:58 mail sshd[2457353]: Failed password for root from 85.133.185.28 port 46410 ssh2 Jun ... show more Jun 29 03:58:58 mail sshd[2457353]: Failed password for root from 85.133.185.28 port 46410 ssh2 Jun 29 03:58:59 mail sshd[2457356]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.133.185.28 user=root Jun 29 03:59:01 mail sshd[2457356]: Failed password for root from 85.133.185.28 port 46424 ssh2 ... show less	Brute-Force SSH
🇫🇷 ZO3N	2026-06-28 23:46:45 (2 days ago)	SSH brute force — 3 tentatives, user: root 2026-06-29T01:46:27.706444+02:00 vps-de5e3fcc sshd-sessio ... show more SSH brute force — 3 tentatives, user: root 2026-06-29T01:46:27.706444+02:00 vps-de5e3fcc sshd-session[542352]: Failed password for root from 85.133.185.28 port 59282 ssh2 2026-06-29T01:46:29.347060+02:00 vps-de5e3fcc sshd-session[542355]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.133.185.28 user=root 2026-06-29T01:46:30.902210+02:00 vps-de5e3fcc sshd-session[542355]: Failed password for root from 85.133.185.28 port 59292 ssh2 show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-06-28 07:29:08 (2 days ago)	85.133.185.28 (IR/Iran/85.133.185.28.pos-1-0.7tir.sepanta.net), 5 distributed sshd attacks on accoun ... show more 85.133.185.28 (IR/Iran/85.133.185.28.pos-1-0.7tir.sepanta.net), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jun 28 01:35:06 14240 sshd[27200]: Failed password for root from 14.117.226.129 port 37342 ssh2 Jun 28 01:35:08 14240 sshd[27210]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.117.226.129 user=root Jun 28 01:35:10 14240 sshd[27210]: Failed password for root from 14.117.226.129 port 37352 ssh2 Jun 28 02:28:46 14240 sshd[23484]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.133.185.28 user=root Jun 28 01:35:04 14240 sshd[27200]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.117.226.129 user=root IP Addresses Blocked: 14.117.226.129 (CN/China/-) show less	Brute-Force SSH

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 204.8.15.61

🇳🇱 185.223.235.37

🇳🇵 157.10.100.12

🇻🇳 116.110.23.159

🇺🇸 75.191.88.124

🇺🇸 2607:f8b0:4001:c6a::124

🇰🇷 218.149.228.178

🇺🇸 208.67.219.94

🇺🇸 198.46.211.159

🇺🇸 172.253.2.30

🇺🇸 172.71.153.10

🇺🇸 162.158.165.154

🇮🇪 162.158.49.211

🇸🇬 119.13.103.179

🇩🇪 104.248.132.49

🇺🇸 104.22.22.18

🇫🇷 91.231.89.226

🇫🇷 91.231.89.111

🇫🇷 91.231.89.76

🇧🇷 45.167.142.180