131.222.253.122
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- Turk Telekomunikasyon Anonim Sirketi
- Usage Type
- Fixed Line ISP
- ASN
- AS34984
- Domain Name
- turktelekom.com.tr
- Country
- 🇹🇷 Turkey
- City
- Istanbul, Istanbul
No reports in the last 60 days
131.222.253.122 has been reported 16 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
16 from
14 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇺🇸 kosada.com |
Web bot: denial-of-service flood
|
DDoS Attack Bad Web Bot | |
| 🇺🇸 stechusa |
[Askari] | country=TR | Behavior: Outdated browser, Targeting specific pages, HTTP/1.1 over TLS, Concurrent page load during attack
|
Bad Web Bot DDoS Attack | |
| 🇺🇸 stechusa |
ELEVATED_THREAT | country=TR | ASN=High Speed For Internet Services L.L.C | 19 IPs targeting /category.html | Facet request during elevated threat (facet_ratio=0.87, unique_ips=186) | HTTP/1.1 over TLS (elevated=True)
|
Bad Web Bot DDoS Attack | |
| 🇵🇱 bmino.pl |
Autoban IP(2): 131.222.253.122 - Hostname: High Speed For Internet Services L.L.C - City: Istanbul - Region: Istanbul - Country: Türkiye - Location: 41.0725,29.0063 - Organization: Turk Telekomunikasyon Anonim Sirketi - failed attempts.
|
Web App Attack | |
| 🇱🇺 tdefise |
This IP is a top DDoS source, generating unwanted HTTPS requests on port 443 (7.15 requests/min over a 829-minute timeframe)
|
DDoS Attack | |
| 🇩🇪 LRob |
Web application probing | req: C[\x88\xF9:\xA1 | 11 distinct paths | UA: -
|
Port Scan Web App Attack | |
| Anonymous |
|
Hacking Bad Web Bot Web App Attack | |
| 🇩🇪 botreporter |
botnet ignoring robots.txt
|
Bad Web Bot | |
| 🇮🇩 zam |
131.222.253.122 - - [04/Jul/2026:08:35:53 +0000] "POST /wp-login.php HTTP/1.1" 404 81174
|
Web App Attack | |
| Anonymous |
Unauthorized connection attempt on Port 23
|
Port Scan Hacking Exploited Host | |
| 🇬🇧 PeravixGroup |
Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: MEDIUM. Aaran.cloud
|
IoT Targeted Brute-Force | |
| 🇩🇪 SMARTNET |
Aisuru(Mirai variant) DDoS | Incident ID: fd8a75e9-7ad9-4605-bec7-39ad26683952
|
DDoS Attack | |
| Anonymous |
Unauthorized connection attempt on Port 23
|
Port Scan Hacking Exploited Host | |
| 🇺🇸 RAP |
2026-05-15 11:32:58 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | |
| 🇺🇸 quilla |
Botnet infected device observed in honeypot (Vector: TCP HANDSHAKE ATTACK)
|
DDoS Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown