JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 212.156.98.254

212.156.98.254 was found in our database!

This IP was reported 130 times. Confidence of Abuse is 33%: ?

33%

ISP	Turk Telekom TTnet national backbone
Usage Type	Fixed Line ISP
ASN	AS9121
Hostname(s)	212.156.98.254.static.turktelekom.com.tr
Domain Name	turktelekom.com.tr
Country	🇹🇷 Turkey
City	Amasya, Amasya

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 212.156.98.254

Whois 212.156.98.254

IP Abuse Reports for 212.156.98.254:

This IP address has been reported a total of 130 times from 51 distinct sources. 212.156.98.254 was first reported on April 6th 2021, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 ghostwarriors	2026-06-09 03:20:32 (3 days ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
🇨🇿 tjiricek	2026-06-08 21:16:20 (3 days ago)	2026-06-08T22:08:58.036717+01:00 raspberrypi sshd[161046]: Failed password for root from 212.156.98. ... show more 2026-06-08T22:08:58.036717+01:00 raspberrypi sshd[161046]: Failed password for root from 212.156.98.254 port 48255 ssh2 2026-06-08T22:16:19.821246+01:00 raspberrypi sshd[161401]: Invalid user telegraf from 212.156.98.254 port 53254 ... show less	Brute-Force SSH
🇬🇧 maiconburn	2026-05-23 17:59:19 (2 weeks ago)	InnerWarden auto-block: Local Warden decided block_ip with confidence 1.000. Markers: abuseipdb=25, ... show more InnerWarden auto-block: Local Warden decided block_ip with confidence 1.000. Markers: abuseipdb=25, country=TR, related_incidents=4, incident_tags=[auth,ssh,distributed]. Alternatives: dismiss (0.00), ignore (0.00), monitor (0.00). [correlated: distributed_ssh, proto_anomaly] (confidence 100%) show less	Hacking
🇩🇪 marxog	2026-05-23 17:42:10 (2 weeks ago)	2026-05-23T17:41:21.339550+00:00 marco-giehmann.de sshd-session[1238030]: Invalid user gitbucket fro ... show more 2026-05-23T17:41:21.339550+00:00 marco-giehmann.de sshd-session[1238030]: Invalid user gitbucket from 212.156.98.254 port 59290 2026-05-23T17:41:53.203538+00:00 marco-giehmann.de sshd-session[1238090]: Invalid user qbittorrent from 212.156.98.254 port 60190 2026-05-23T17:42:09.854258+00:00 marco-giehmann.de sshd-session[1238105]: Invalid user krb5 from 212.156.98.254 port 32860 ... show less	Brute-Force SSH
🇨🇦 FredoJF	2026-05-23 16:50:34 (2 weeks ago)	2026-05-23T12:49:30.431379-04:00 wise0wl sshd[3365964]: Invalid user pi from 212.156.98.254 port 499 ... show more 2026-05-23T12:49:30.431379-04:00 wise0wl sshd[3365964]: Invalid user pi from 212.156.98.254 port 49966 2026-05-23T12:49:51.623358-04:00 wise0wl sshd[3366510]: Invalid user mariadb from 212.156.98.254 port 50866 2026-05-23T12:50:34.211132-04:00 wise0wl sshd[3367677]: Invalid user wazuh from 212.156.98.254 port 52666 ... show less	Brute-Force SSH
🇨🇦 FredoJF	2026-05-23 16:34:25 (2 weeks ago)	2026-05-23T12:33:25.879357-04:00 wise0wl sshd[3338255]: Invalid user qbittorrent from 212.156.98.254 ... show more 2026-05-23T12:33:25.879357-04:00 wise0wl sshd[3338255]: Invalid user qbittorrent from 212.156.98.254 port 46686 2026-05-23T12:34:01.234410-04:00 wise0wl sshd[3339355]: Invalid user krb5 from 212.156.98.254 port 47588 2026-05-23T12:34:24.952984-04:00 wise0wl sshd[3339978]: Invalid user yubikey from 212.156.98.254 port 48488 ... show less	Brute-Force SSH
🇩🇪 Ano_Nym	2026-05-23 16:34:12 (2 weeks ago)	CrowdSec IDS alert on VPS 217.154.115.19 (DE). Scenario: crowdsecurity/ssh-bf	Brute-Force SSH
🇩🇪 marxog	2026-05-23 14:03:45 (2 weeks ago)	2026-05-23T14:02:35.311766+00:00 marco-giehmann.de sshd-session[1212991]: Invalid user ubuntu from 2 ... show more 2026-05-23T14:02:35.311766+00:00 marco-giehmann.de sshd-session[1212991]: Invalid user ubuntu from 212.156.98.254 port 43258 2026-05-23T14:03:43.662392+00:00 marco-giehmann.de sshd-session[1213082]: User mysql not allowed because account is locked 2026-05-23T14:03:43.734091+00:00 marco-giehmann.de sshd-session[1213082]: Received disconnect from 212.156.98.254 port 45958:11: Normal Shutdown, Thank you for playing [preauth] ... show less	Brute-Force SSH
🇩🇪 Tlgadmin	2026-05-03 18:10:20 (1 month ago)	2026-05-03T19:09:55.619934+01:00 tobiprox sshd[3790396]: Failed password for root from 212.156.98.25 ... show more 2026-05-03T19:09:55.619934+01:00 tobiprox sshd[3790396]: Failed password for root from 212.156.98.254 port 52872 ssh2 2026-05-03T19:09:56.749161+01:00 tobiprox sshd[3790396]: Disconnected from authenticating user root 212.156.98.254 port 52872 [preauth] 2026-05-03T19:10:19.772439+01:00 tobiprox sshd[3790662]: Invalid user kevin from 212.156.98.254 port 53813 ... show less	Port Scan Brute-Force SSH
🇫🇷 krys-abuseip	2025-11-04 11:45:02 (7 months ago)	Nov 4 12:43:36 srv.tld sshd[15082]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eui ... show more Nov 4 12:43:36 srv.tld sshd[15082]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.156.98.254 Nov 4 12:43:38 srv.tld sshd[15082]: Failed password for invalid user rodrigo from 212.156.98.254 port 53536 ssh2 Nov 4 12:44:11 srv.tld sshd[15084]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.156.98.254 user=root Nov 4 12:44:13 srv.tld sshd[15084]: Failed password for invalid user root from 212.156.98.254 port 54436 ssh2 Nov 4 12:44:45 srv.tld sshd[15086]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.156.98.254 user=root Nov 4 12:44:47 srv.tld sshd[15086]: Failed password for invalid user root from 212.156.98.254 port 55336 ssh2 show less	Brute-Force SSH
🇨🇭 ScanThe.Net	2025-11-04 11:05:44 (7 months ago)	ID: 6380983824 \| PORT: 11022 \| https://212-156-98-254.scanthe.net	Port Scan
🇨🇭 ScanThe.Net	2025-11-04 04:32:43 (7 months ago)	ID: 6372502283 \| PORT: 18722 \| https://212-156-98-254.scanthe.net	Port Scan
🇨🇭 ScanThe.Net	2025-11-03 02:53:02 (7 months ago)	ID: 6339458941 \| PORT: 18922 \| https://212-156-98-254.scanthe.net	Port Scan
🇨🇭 ScanThe.Net	2025-11-02 13:50:17 (7 months ago)	ID: 6321197294 \| PORT: 16422 \| https://212-156-98-254.scanthe.net	Port Scan
🇨🇭 ScanThe.Net	2025-11-02 13:03:04 (7 months ago)	ID: 6320113417 \| PORT: 17922 \| https://212-156-98-254.scanthe.net	Port Scan

Showing 1 to 15 of 130 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 165.154.6.75

🇫🇷 91.196.152.32

🇱🇹 81.30.98.225

🇹🇷 78.186.116.90

🇧🇬 78.128.112.30

🇮🇳 2409:40e4:1235:3231:74df:800c:6a20:162d

🇺🇾 190.135.120.108

🇮🇩 182.253.156.173

🇺🇸 152.32.150.26

🇸🇬 118.26.111.107

🇨🇦 104.255.152.29

🇷🇴 80.94.92.177

🇵🇱 77.65.194.212

🇯🇵 43.167.236.228

🇮🇳 4.213.160.153

🇷🇴 2.57.122.238

🇹🇷 2a09:bac5:58bc:2682::3d6:49

🇳🇱 204.76.203.206

🇩🇪 192.109.200.101

🇱🇹 91.224.92.147