JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

31.223.99.249

Activity Trending Down

Abuse Confidence Score

20% Elevated

5 reports

5 reporters · latest 2 weeks ago

ISP: TurkNet Iletisim Hizmetleri A.S.
Usage Type: Fixed Line ISP
ASN: AS12735
Hostname(s): 249.99.223.31.srv.turk.net
Domain Name: turk.net
Country: 🇹🇷 Turkey
City: Izmir, Izmir Province

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

5 from 5 distinct reporters

First reported

July 22nd 2024

Most recent report

2 weeks ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 2 🇧🇷 Brazil 1 🇪🇸 Spain 1

Most common categories Brute-Force 3 Web App Attack 2 Bad Web Bot 1 Fraud VoIP 1

Old reports The most recent abuse report for this IP address is from 2 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 NetGuard	2026-10-29 02:21:52 UTC · (2 weeks ago)	#honeypot #netguard247 #sentrypeer Captured by NetGuard 24/7 T-Pot honeypot (netguard24-7.com). Timestamp: 2026-10-27T00:42:56.355+00:00 Attacker IP: 31.223.99.249 \| Port: 5060 \| Country: Türkiye Honeypot: sentrypeer \| Attack: unknown Activity: 1 hit ... show more #honeypot #netguard247 #sentrypeer Captured by NetGuard 24/7 T-Pot honeypot (netguard24-7.com). Timestamp: 2026-10-27T00:42:56.355+00:00 Attacker IP: 31.223.99.249 \| Port: 5060 \| Country: Türkiye Honeypot: sentrypeer \| Attack: unknown Activity: 1 hit on port 5060 between 2026-10-27T00:42:56.355+00:00 and 2026-10-27T00:42:56.355+00:00 (6h window 2026-10-27T00:00:00.000Z) Source: NetGuard 24/7 (netguard24-7.com) \| PhantomGrid Defense show less	Web App Attack
🇧🇷 ICS Labs	2026-10-27 18:08:49 UTC · (2 weeks ago)	ICS Labs threat intelligence (ICS Feeds): Brute-Force. Last observed 2026-10-27 UTC.	Brute-Force
🇪🇸 raiolanetworks.com	2026-10-27 05:49:00 UTC · (2 weeks ago)	Honeypot detection: SIP/VoIP fraud. 6 events observed. Reported automatically from a honeypot sensor.	Fraud VoIP Brute-Force
🇺🇸 TPI-Abuse	2026-09-21 09:11:42 UTC · (1 month ago)	(mod_security) mod_security (id:210730) triggered by 31.223.99.249 (249.99.223.31.srv.turk.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 05:11:35.058831 2026] [security2:error] [pid 28613:tid 28613] [clie ... show more (mod_security) mod_security (id:210730) triggered by 31.223.99.249 (249.99.223.31.srv.turk.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 05:11:35.058831 2026] [security2:error] [pid 28613:tid 28613] [client 31.223.99.249:2019] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.ilikeabe.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.ilikeabe.com"] [uri "/michleencollins.com"] [unique_id "arD0xzAduJPyj_-kUbZW-QAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-07-22 00:37:44 UTC · (2 years ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇭 209.99.190.186

🇸🇪 31.208.21.85

🇵🇱 2400:cb00:73:1000:582a:7b6b:c8c8:abe8

🇸🇬 192.229.111.12

🇺🇸 172.56.109.73

🇺🇸 146.190.166.168

🇺🇸 136.108.165.52

🇳🇱 109.160.32.113

🇺🇸 87.86.15.157

🇲🇾 49.124.152.163

🇧🇪 34.76.33.44

🇧🇪 34.52.152.34

🇿🇦 34.35.186.242

🇮🇳 136.232.11.10

🇰🇪 102.0.2.114

🇭🇺 84.225.51.158

🇭🇰 39.109.122.90

🇨🇱 179.2.154.86

🇺🇸 172.203.251.31

🇳🇬 165.154.11.247