JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 85.185.112.6

85.185.112.6 was found in our database!

This IP was reported 410 times. Confidence of Abuse is 18%: ?

18%

ISP	university payamnoor of semnan
Usage Type	Fixed Line ISP
ASN	AS58224
Domain Name	ito.gov.ir
Country	🇮🇷 Iran (Islamic Republic of)
City	Semnan, Semnan

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 85.185.112.6

Whois 85.185.112.6

IP Abuse Reports for 85.185.112.6:

This IP address has been reported a total of 410 times from 47 distinct sources. 85.185.112.6 was first reported on May 31st 2022, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 smick	2026-09-17 01:18:38 (5 hours ago)	Brute-force attack.	Brute-Force
🇩🇪 Jochen Pretli	2026-09-15 13:37:02 (1 day ago)	connection to honeypot	Email Spam Port Scan
🇦🇺 dyln	2026-07-20 08:12:02 (1 month ago)	Dyls honeypot brute-force: SMB (5031 total hits)	Brute-Force
🇩🇪 phil2k	2026-06-24 18:34:26 (2 months ago)	Firewall: Within 2026-06-23 18:26:32 - 2026-06-24 06:59:27 CEST(+0200) identified: unallowed access ... show more Firewall: Within 2026-06-23 18:26:32 - 2026-06-24 06:59:27 CEST(+0200) identified: unallowed access from 85.185.112.6 on port 445(microsoft-ds) (1 trial) Fail2ban: Within 2026-06-23 18:26:32 - 2026-06-24 06:59:27 CEST(+0200) banned: 8 times by fail2ban[firewall]; 8 times by fail2ban[recidive] show less	Port Scan Brute-Force
🇩🇪 phil2k	2026-06-23 16:26:35 (2 months ago)	fail2ban:firewall:2026-06-23T18:26:32.931169+02:00 <SRV> firewall: filter IN=<ANONYMIZED_INTERFACE> ... show more fail2ban:firewall:2026-06-23T18:26:32.931169+02:00 <SRV> firewall: filter IN=<ANONYMIZED_INTERFACE> OUT= MAC=<ANONYMIZED_MAC> SRC=85.185.112.6 DST=<ANONYMIZED_IP> LEN=52 TOS=0x00 PREC=0x00 TTL=115 ID=10480 DF PROTO=TCP SPT=49660 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 2026-06-23T18:26:33.506863+02:00 <SRV> firewall: filter IN=<ANONYMIZED_INTERFACE> OUT= MAC=<ANONYMIZED_MAC> SRC=85.185.112.6 DST=<ANONYMIZED_IP> LEN=52 TOS=0x00 PREC=0x00 TTL=115 ID=10522 DF PROTO=TCP SPT=49660 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 show less	DDoS Attack Port Scan Brute-Force
🇺🇸 drewf.ink	2026-06-11 23:03:50 (3 months ago)	[23:03] Triggered SMB honeypot on port 445. Type: NetBIOS + SMB1. Dialect(s): NT LM 0.12, SMB 2.002, ... show more [23:03] Triggered SMB honeypot on port 445. Type: NetBIOS + SMB1. Dialect(s): NT LM 0.12, SMB 2.002, SMB 2.??? show less	Hacking Exploited Host
🇺🇸 drewf.ink	2026-06-11 02:05:24 (3 months ago)	[02:05] Triggered SMB honeypot on port 445. Type: NetBIOS + SMB1. Dialect(s): NT LM 0.12, SMB 2.002, ... show more [02:05] Triggered SMB honeypot on port 445. Type: NetBIOS + SMB1. Dialect(s): NT LM 0.12, SMB 2.002, SMB 2.??? show less	Hacking Exploited Host
🇺🇸 drewf.ink	2026-06-11 01:01:04 (3 months ago)	[01:01] Triggered SMB honeypot on port 445. Type: NetBIOS + SMB1. Dialect(s): NT LM 0.12, SMB 2.002, ... show more [01:01] Triggered SMB honeypot on port 445. Type: NetBIOS + SMB1. Dialect(s): NT LM 0.12, SMB 2.002, SMB 2.??? show less	Hacking Exploited Host
🇩🇪 Nerdscave Hosting	2026-06-09 06:24:43 (3 months ago)	[SMB Honeypot Report] Timestamp: 2026-06-09 06:24:13 UTC Port: 54576 Attempted credentials (Base64): ... show more [SMB Honeypot Report] Timestamp: 2026-06-09 06:24:13 UTC Port: 54576 Attempted credentials (Base64): RVNNQnJ8GAF8InwCTlQgTE0gMC4xMnwCU01CIDIuMDAyfAJTTUIgMi4/Pz8= Attack Type: Unauthorized SMB connection attempt show less	Brute-Force Port Scan Hacking
🇩🇪 Nerdscave Hosting	2026-06-09 05:54:41 (3 months ago)	[SMB Honeypot Report] Timestamp: 2026-06-09 05:54:10 UTC Port: 54748 Attempted credentials (Base64): ... show more [SMB Honeypot Report] Timestamp: 2026-06-09 05:54:10 UTC Port: 54748 Attempted credentials (Base64): RVNNQnJ8GAF8InwCTlQgTE0gMC4xMnwCU01CIDIuMDAyfAJTTUIgMi4/Pz8= Attack Type: Unauthorized SMB connection attempt show less	Brute-Force Port Scan Hacking
🇩🇪 Nerdscave Hosting	2026-06-09 05:24:29 (3 months ago)	[SMB Honeypot Report] Timestamp: 2026-06-09 05:23:59 UTC Port: 53215 Attempted credentials (Base64): ... show more [SMB Honeypot Report] Timestamp: 2026-06-09 05:23:59 UTC Port: 53215 Attempted credentials (Base64): RVNNQnJ8GAF8InwCTlQgTE0gMC4xMnwCU01CIDIuMDAyfAJTTUIgMi4/Pz8= Attack Type: Unauthorized SMB connection attempt show less	Brute-Force Port Scan Hacking
🇩🇪 Nerdscave Hosting	2026-06-09 04:54:25 (3 months ago)	[SMB Honeypot Report] Timestamp: 2026-06-09 04:53:54 UTC Port: 54536 Attempted credentials (Base64): ... show more [SMB Honeypot Report] Timestamp: 2026-06-09 04:53:54 UTC Port: 54536 Attempted credentials (Base64): RVNNQnJ8GAF8InwCTlQgTE0gMC4xMnwCU01CIDIuMDAyfAJTTUIgMi4/Pz8= Attack Type: Unauthorized SMB connection attempt show less	Brute-Force Port Scan Hacking
🇩🇪 Nerdscave Hosting	2026-06-09 04:24:19 (3 months ago)	[SMB Honeypot Report] Timestamp: 2026-06-09 04:23:49 UTC Port: 62231 Attempted credentials (Base64): ... show more [SMB Honeypot Report] Timestamp: 2026-06-09 04:23:49 UTC Port: 62231 Attempted credentials (Base64): RVNNQnJ8GAF8InwCTlQgTE0gMC4xMnwCU01CIDIuMDAyfAJTTUIgMi4/Pz8= Attack Type: Unauthorized SMB connection attempt show less	Brute-Force Port Scan Hacking
🇩🇪 Nerdscave Hosting	2026-06-09 03:54:16 (3 months ago)	[SMB Honeypot Report] Timestamp: 2026-06-09 03:53:46 UTC Port: 59593 Attempted credentials (Base64): ... show more [SMB Honeypot Report] Timestamp: 2026-06-09 03:53:46 UTC Port: 59593 Attempted credentials (Base64): RVNNQnJ8GAF8InwCTlQgTE0gMC4xMnwCU01CIDIuMDAyfAJTTUIgMi4/Pz8= Attack Type: Unauthorized SMB connection attempt show less	Brute-Force Port Scan Hacking
🇩🇪 Nerdscave Hosting	2026-06-09 03:24:15 (3 months ago)	[SMB Honeypot Report] Timestamp: 2026-06-09 03:23:45 UTC Port: 63116 Attempted credentials (Base64): ... show more [SMB Honeypot Report] Timestamp: 2026-06-09 03:23:45 UTC Port: 63116 Attempted credentials (Base64): RVNNQnJ8GAF8InwCTlQgTE0gMC4xMnwCU01CIDIuMDAyfAJTTUIgMi4/Pz8= Attack Type: Unauthorized SMB connection attempt show less	Brute-Force Port Scan Hacking

Showing 1 to 15 of 410 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 198.235.24.118

🇷🇴 193.32.162.148

🇲🇦 105.69.173.167

🇳🇱 193.47.62.69

🇰🇿 178.91.181.53

🇺🇸 165.232.139.253

🇺🇸 162.216.149.237

🇮🇷 152.89.12.101

🇺🇸 143.110.229.27

🇫🇷 138.195.128.132

🇩🇪 130.12.180.117

🇷🇺 78.138.168.46

🇺🇸 52.165.92.192

🇮🇪 52.101.65.73

🇺🇸 45.156.129.96

🇷🇺 31.23.229.176

🇫🇷 212.47.75.199

🇧🇪 198.235.24.185

🇨🇳 171.8.138.131

🇮🇳 165.101.250.169