Back to the database

ip

85.133.217.136

Medium · 472 reports
IRIran

Instant verdict

SUSPICIOUS

47/100

Community risk score

85.133.217.136 is an IP address with 2 abuse reports from 2 distinct reporters, submitted between 10/26/2026 and 10/27/2026. The AbuseTrack community rates it as Medium risk, with a score of 47/100. The most frequently reported threat categories are Brute Force.

2

Reports

2

Reporters

10/26/2026

First seen

10/27/2026

Last seen

Threat type

Is this your address and is it listed wrongly? Request removal →

Intelligence

IR

Country

Iran (IR)

WHOIS (RDAP)

Country
Iran
Location
Tehran, Tehran

Report history (2)

Brute Force10/27/2026, 09:55 AM · Enjyn Gruppe

fail2ban: SSH (sshd) brute-force — 3 failed attempts (jail: sshd)

Brute Force10/26/2026, 06:15 PM · NextServ Group

2026-10-26T18:10:59.203489+00:00 IPAM sshd-session[69278]: Invalid user user from 85.133.217.136 port 53092 2026-10-26T18:10:59.204837+00:00 IPAM sshd-session[69278]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.133.217.136 2026-10-26T18:11:01.247267+00:00 IPAM sshd-session[69278]: Failed password for invalid user user from 85.133.217.136 port 53092 ssh2 2026-10-26T18:15:05.225929+00:00 IPAM sshd-session[69290]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.133.217.136 user=root 2026-10-26T18:15:07.235178+00:00 IPAM sshd-session[69290]: Failed password for root from 85.133.217.136 port 39782 ssh2