AbuseIPDB » 85.133.202.38
85.133.202.38
This IP was reported 11 times. Confidence of
Abuse
is 55% : ?
ISP
Sepanta Communication Development Co. Ltd
Usage Type
Data Center/Web Hosting/Transit
ASN
AS214922
Domain Name
sepanta.com
Country
🇮🇷
Iran (Islamic Republic of)
City
Tehran, Tehran
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 85.133.202.38 :
This IP address has been reported a total of
11
times from
9 distinct
sources.
85.133.202.38 was first reported on
June 3rd 2026 , and the most recent report was
5 hours ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇮🇹
Fusty
2026-06-05 12:24:54
(5 hours ago)
Unauthorized attempt on (TCP on port 5959).
Source port: 61234
TTL: 241
Packet length: 44
Timestamp: ...
show more
Unauthorized attempt on (TCP on port 5959).
Source port: 61234
TTL: 241
Packet length: 44
Timestamp: 2026-06-05 14:24:54
show less
Port Scan
🇩🇪
Yachiyo Runami
2026-06-05 11:49:09
(5 hours ago)
Port Scan on Honeypot | Ports: 5900/VNC | Proto: TCP(1) | Flags: all SYN | TTL: 241 | Len: 44B | Win ...
show more
Port Scan on Honeypot | Ports: 5900/VNC | Proto: TCP(1) | Flags: all SYN | TTL: 241 | Len: 44B | Win: 1025(1) | F2B/ufw-honeypot@2026-06-05T11:49:09Z
show less
Port Scan
Hacking
🇩🇪
phil2k
2026-06-05 01:10:08
(16 hours ago)
fail2ban:firewall:2026-06-05T03:09:47.633343+02:00 <SRV> firewall: filter IN=<ANONYMIZED_INTERFACE> ...
show more
fail2ban:firewall:2026-06-05T03:09:47.633343+02:00 <SRV> firewall: filter IN=<ANONYMIZED_INTERFACE> OUT= MAC=<ANONYMIZED_MAC> SRC=85.133.202.38 DST=<ANONYMIZED_IP> LEN=44 TOS=0x00 PREC=0x00 TTL=241 ID=36987 PROTO=TCP SPT=61234 DPT=5921 WINDOW=1025 RES=0x00 SYN URGP=0
2026-06-05T03:10:05.625337+02:00 <SRV> firewall: filter IN=<ANONYMIZED_INTERFACE> OUT= MAC=<ANONYMIZED_MAC> SRC=85.133.202.38 DST=<ANONYMIZED_IP> LEN=44 TOS=0x00 PREC=0x00 TTL=243 ID=2954 PROTO=TCP SPT=61234 DPT=5954 WINDOW=1025 RES=0x00 SYN URGP=0
show less
DDoS Attack
Port Scan
🇳🇱
DrLex0
2026-06-04 16:59:32
(1 day ago)
2026-06-04T16:33:25.314409+00:00 [host] portsentry[703]: attackalert: TCP SYN/Normal scan from host: ...
show more
2026-06-04T16:33:25.314409+00:00 [host] portsentry[703]: attackalert: TCP SYN/Normal scan from host: 85.133.202.38/85.133.202.38 to TCP port: 6000
2026-06-04T16:37:20.333899+00:00 [host] portsentry[703]: attackalert: TCP SYN/Normal scan from host: 85.133.202.38/85.133.202.38 to TCP port: 5986
2026-06-04T16:59:32.613347+00:00 [host] portsentry[703]: attackalert: TCP SYN/Normal scan from host: 85.133.202.38/85.133.202.38 to TCP port: 5985
show less
Port Scan
🇫🇮
Maxetow
2026-06-04 16:07:20
(1 day ago)
Scan port: 5969 | 4 total | size=44B
Port Scan
🇫🇮
Maxetow
2026-06-04 15:29:43
(1 day ago)
Scan port: 5972 | 2 total | size=44B
Port Scan
🇫🇮
Ticlem
2026-06-04 15:17:16
(1 day ago)
2026-06-04T16:40:30.365297+02:00 clement-turlure kernel: [1590201.351508] [UFW BLOCK] IN=enp0s31f6 O ...
show more
2026-06-04T16:40:30.365297+02:00 clement-turlure kernel: [1590201.351508] [UFW BLOCK] IN=enp0s31f6 OUT= MAC=90:1b:0e:f7:16:fb:d0:07:ca:8d:22:75:08:00 SRC=85.133.202.38 DST=95.216.21.136 LEN=44 TOS=0x00 PREC=0x00 TTL=244 ID=61978 PROTO=TCP SPT=61234 DPT=5995 WINDOW=1025 RES=0x00 SYN URGP=0
2026-06-04T17:08:36.094468+02:00 clement-turlure kernel: [1591887.094689] [UFW BLOCK] IN=enp0s31f6 OUT= MAC=90:1b:0e:f7:16:fb:d0:07:ca:8d:22:75:08:00 SRC=85.133.202.38 DST=95.216.21.136 LEN=44 TOS=0x00 PREC=0x00 TTL=244 ID=34136 PROTO=TCP SPT=61234 DPT=5901 WINDOW=1025 RES=0x00 SYN URGP=0
2026-06-04T17:17:16.602601+02:00 clement-turlure kernel: [1592407.607145] [UFW BLOCK] IN=enp0s31f6 OUT= MAC=90:1b:0e:f7:16:fb:d0:07:ca:8d:22:75:08:00 SRC=85.133.202.38 DST=95.216.21.136 LEN=44 TOS=0x00 PREC=0x00 TTL=244 ID=14116 PROTO=TCP SPT=61234 DPT=5975 WINDOW=1025 RES=0x00 SYN URGP=0
...
show less
Port Scan
🇫🇮
Maxetow
2026-06-04 15:00:40
(1 day ago)
Scan port: 5979 | 1 total | size=44B
Port Scan
🇹🇷
Threat.live
2026-06-04 14:40:04
(1 day ago)
Suspicious Connection Attempts
Brute-Force
2026-06-04 13:07:00
(1 day ago)
85.133.202.38 detected on srv02
Port Scan
2026-06-03 21:48:06
(1 day ago)
2026-06-03 21:48:05 warning[3217798]: host unknown[85.133.202.38]: unauthorized access att ...
show more
2026-06-03 21:48:05 warning[3217798]: host unknown[85.133.202.38]: unauthorized access attempted: tcp/5994
show less
Port Scan
Brute-Force
Showing 1 to
11
of 11 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: