JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

85.133.199.248

Neutral Activity

Abuse Confidence Score

0% Low Risk

771 reports

305 reporters · latest 1 year ago

ISP: Sepanta Communication Development Co. Ltd
Usage Type: Data Center/Web Hosting/Transit
ASN: Unknown
Domain Name: sepanta.com
Country: 🇮🇷 Iran (Islamic Republic of)
City: Tehran, Tehran

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

85.133.199.248 has been reported 771 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

771 from 305 distinct reporters

First reported

May 2nd 2025

Most recent report

1 year ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 rtbh.com.tr	2025-09-27 20:09:02 UTC · (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇮🇳 Parth Maniar	2025-09-27 17:46:26 UTC · (1 year ago)	This IP address carried out 108 port scanning attempts on 26-09-2025. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.	Port Scan SSH
🇮🇳 Parth Maniar	2025-09-27 09:46:50 UTC · (1 year ago)	This IP address carried out 27 SSH credential attack (attempts) on 26-09-2025. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.	Brute-Force SSH
🇹🇷 rtbh.com.tr	2025-09-26 20:09:01 UTC · (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇩🇪 ghostwarriors	2025-09-26 04:50:20 UTC · (1 year ago)	Unauthorized connection attempt detected, SSH Brute-Force	Port Scan Brute-Force SSH
🇳🇱 Koen	2025-09-26 04:48:24 UTC · (1 year ago)	Auto Fail2Ban report, multiple SSH login attempts.	Brute-Force SSH
🇺🇸 gibsonplumbing.com	2025-09-26 04:48:21 UTC · (1 year ago)	Sep 26 04:37:08 gibson-app sshd[1657693]: Invalid user keycloak from 85.133.199.248 port 49502 Sep 26 04:44:50 gibson-app sshd[1658867]: Invalid user intell from 85.133.199.248 port 46642 Sep 26 04:48:20 gibson-app sshd[1659594]: Invalid user hack fr ... show more Sep 26 04:37:08 gibson-app sshd[1657693]: Invalid user keycloak from 85.133.199.248 port 49502 Sep 26 04:44:50 gibson-app sshd[1658867]: Invalid user intell from 85.133.199.248 port 46642 Sep 26 04:48:20 gibson-app sshd[1659594]: Invalid user hack from 85.133.199.248 port 57644 ... show less	Brute-Force SSH
🇺🇸 yzfdude1	2025-09-26 04:41:45 UTC · (1 year ago)	Sep 25 22:37:58 freightliner sshd[1613518]: Failed password for invalid user keycloak from 85.133.199.248 port 54726 ssh2 Sep 25 22:41:42 freightliner sshd[1613628]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rh ... show more Sep 25 22:37:58 freightliner sshd[1613518]: Failed password for invalid user keycloak from 85.133.199.248 port 54726 ssh2 Sep 25 22:41:42 freightliner sshd[1613628]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.133.199.248 user=root Sep 25 22:41:44 freightliner sshd[1613628]: Failed password for root from 85.133.199.248 port 34440 ssh2 ... show less	Brute-Force SSH
Anonymous	2025-09-26 04:40:19 UTC · (1 year ago)	Invalid SSH user keycloak from 85.133.199.248	Brute-Force SSH
🇺🇸 bigscoots.com	2025-09-26 03:29:27 UTC · (1 year ago)	(sshd) Failed SSH login from 85.133.199.248 (IR/Iran/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Sep 26 03:22:57 24025 sshd[20187]: Invalid user eugene from 85.133.199.248 port 60474 Sep 26 03:22:59 24025 sshd[20187]: ... show more (sshd) Failed SSH login from 85.133.199.248 (IR/Iran/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Sep 26 03:22:57 24025 sshd[20187]: Invalid user eugene from 85.133.199.248 port 60474 Sep 26 03:22:59 24025 sshd[20187]: Failed password for invalid user eugene from 85.133.199.248 port 60474 ssh2 Sep 26 03:27:26 24025 sshd[20612]: Invalid user elemental from 85.133.199.248 port 55542 Sep 26 03:27:28 24025 sshd[20612]: Failed password for invalid user elemental from 85.133.199.248 port 55542 ssh2 Sep 26 03:29:07 24025 sshd[20760]: Invalid user ec2-user from 85.133.199.248 port 34550 show less	Brute-Force SSH
🇺🇸 amit177	2025-09-26 02:17:15 UTC · (1 year ago)		Brute-Force SSH
🇺🇸 yzfdude1	2025-09-26 02:11:00 UTC · (1 year ago)	Sep 25 20:10:56 b146-37 sshd[1001927]: Invalid user mega from 85.133.199.248 port 46702 Sep 25 20:10:56 b146-37 sshd[1001927]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.133.199.248 Sep 25 20:10:58 b14 ... show more Sep 25 20:10:56 b146-37 sshd[1001927]: Invalid user mega from 85.133.199.248 port 46702 Sep 25 20:10:56 b146-37 sshd[1001927]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.133.199.248 Sep 25 20:10:58 b146-37 sshd[1001927]: Failed password for invalid user mega from 85.133.199.248 port 46702 ssh2 ... show less	Brute-Force SSH
🇺🇸 bigscoots.com	2025-09-26 02:08:31 UTC · (1 year ago)	85.133.199.248 (IR/Iran/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Sep 25 21:08:15 16510 sshd[11176]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid= ... show more 85.133.199.248 (IR/Iran/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Sep 25 21:08:15 16510 sshd[11176]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.43.162.73 user=root Sep 25 21:08:17 16510 sshd[11176]: Failed password for root from 196.43.162.73 port 37184 ssh2 Sep 25 21:05:29 16510 sshd[10908]: Failed password for root from 42.96.43.148 port 60240 ssh2 Sep 25 21:06:56 16510 sshd[11051]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.133.199.248 user=root Sep 25 21:06:58 16510 sshd[11051]: Failed password for root from 85.133.199.248 port 42592 ssh2 IP Addresses Blocked: 196.43.162.73 (UG/Uganda/-) 42.96.43.148 (VN/Vietnam/-) show less	Brute-Force SSH
Anonymous	2025-09-26 00:54:50 UTC · (1 year ago)	2025-09-26T02:53:06.913614+02:00 vm986549.cloud.nuxt.network sshd[7375]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.133.199.248 user=root 2025-09-26T02:53:08.447180+02:00 vm986549.cloud.nuxt.network ss ... show more 2025-09-26T02:53:06.913614+02:00 vm986549.cloud.nuxt.network sshd[7375]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.133.199.248 user=root 2025-09-26T02:53:08.447180+02:00 vm986549.cloud.nuxt.network sshd[7375]: Failed password for root from 85.133.199.248 port 50444 ssh2 2025-09-26T02:54:50.104659+02:00 vm986549.cloud.nuxt.network sshd[7380]: Invalid user llm from 85.133.199.248 port 45750 ... show less	Brute-Force SSH
🇺🇸 Tect.host	2025-09-26 00:05:56 UTC · (1 year ago)	Brute-force SSH server detected by Fail2ban	Brute-Force SSH

Showing 1 to 15 of 771 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇴🇲 161.8.126.39

🇹🇳 102.156.109.232

🇭🇰 203.198.173.137

🇵🇰 182.181.221.2

🇸🇬 167.172.93.23

🇧🇷 131.100.95.164

🇮🇳 122.161.241.83

🇨🇳 116.179.37.227

🇰🇷 111.171.127.190

🇧🇷 45.237.0.199

🇺🇸 143.110.235.80

🇲🇦 105.157.249.96

🇮🇳 103.192.65.147

🇺🇸 91.230.168.142

🇮🇳 49.206.194.29

🇧🇪 35.210.223.127

🇨🇳 221.198.117.22

🇨🇳 218.58.15.245

🇺🇸 205.210.31.60

🇧🇩 180.148.214.28