This IP address has been reported a total of
26,226
times from
602 distinct
sources.
85.217.140.13 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
[hp-100] 25 unsolicited packets to honeypot ports 10796,3631,54453,47094,54647,49325 (OCI DShield se ...
show more[hp-100] 25 unsolicited packets to honeypot ports 10796,3631,54453,47094,54647,49325 (OCI DShield sensor)
show less
Blocked by UFW on ampereone [8084/tcp]
Source port: 38077
TTL: 53
Packet length: 52
TOS: 0x00
This ...
show moreBlocked by UFW on ampereone [8084/tcp]
Source port: 38077
TTL: 53
Packet length: 52
TOS: 0x00
This report was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
85.217.140.13 was recorded 5 times by 3 hosts attempting to connect to 4 unique ports. Incident coun ...
show more85.217.140.13 was recorded 5 times by 3 hosts attempting to connect to 4 unique ports. Incident counter (4h, 24h, all-time): 5, 28, 2090
show less
firewall port scanning detected. 2 or more observation(s) from 2026-09-11T11:39:03.000Z through 2026 ...
show morefirewall port scanning detected. 2 or more observation(s) from 2026-09-11T11:39:03.000Z through 2026-09-11T11:39:03.000Z. firewall port scanning detected. 2 or more observation(s) from 2026-09-11T12:39:08.000Z through 2026-09-11T12:39:08.000Z. firewall port scanning detected. 2 or more observation(s) from 2026-09-11T12:51:49.000Z through 2026-09-11T12:51:49.000Z. firewall port scanning detected. 2 or more observation(s) from 2026-09-11T12:57:20.000Z through 2026-09-11T12:57:20.000Z. firewall port scanning detected. 2 or more observation(s) from 2026-09-11T13:45:33.000Z through 2026-09-11T13:45:33.000Z. firewall port scanning detected. 2 or more observation(s) from 2026-09-11T13:51:10.000Z through 2026-09-11T13:51:10.000Z.
show less
Blocked by UFW [5985/tcp]
Source port: 37159
TTL: 47
Packet length: 52
TOS: 0x00
This report was ge ...
show moreBlocked by UFW [5985/tcp]
Source port: 37159
TTL: 47
Packet length: 52
TOS: 0x00
This report was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Attempt on port 143 (IMAP) - potential mail server attack attempt. Blocked by firewall (unsolicited ...
show moreAttempt on port 143 (IMAP) - potential mail server attack attempt. Blocked by firewall (unsolicited inbound, no prior outbound connection). 3 attempts observed within the last 24h. Ports targeted: 107, 143, 850.
show less
Wazuh Alert | Rule ID: 100199 | Desc: Suricata: (ET SCAN Rapid IMAP Connections - Possible Brute For ...
show moreWazuh Alert | Rule ID: 100199 | Desc: Suricata: (ET SCAN Rapid IMAP Connections - Possible Brute Force Attack) detectado de 85.217.140.13
show less
monitor: on ser162528253480 | port: 5462 | ttl: 127 script: github.com/sefinek/UFW-AbuseIPDB-Report ...
show moremonitor: on ser162528253480 | port: 5462 | ttl: 127 script: github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
Anonymous
Detected by router-side syslog over 72h. 118 inbound firewall DROPs (118 TCP) across 118 distinct de ...
show moreDetected by router-side syslog over 72h. 118 inbound firewall DROPs (118 TCP) across 118 distinct destination port(s). Top targets: TCP/1043=1, TCP/107=1, TCP/10796=1. First seen 2026-09-08T14:48Z, last seen 2026-09-11T12:56Z. Categories: Port Scan.
show less
Port Scan
Showing 1 to
15
of 26226 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩