JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

81.213.157.39

Neutral Activity

Abuse confidence score ?

0% Low Risk

71 reports

43 reporters · latest 3 years ago

ISP	Turk Telekomunikasyon Anonim Sirketi
Usage Type	Fixed Line ISP
ASN	AS9121
Hostname(s)	81.213.157.39.dynamic.ttnet.com.tr
Domain Name	turktelekom.com.tr
Country	🇹🇷 Turkey
City	Ankara, Ankara

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

81.213.157.39 has been reported 71 times. The most recent report is from 3 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 81.213.157.39

Export CSV

This IP address has been reported a total of 71 times from 43 distinct sources. 81.213.157.39 was first reported on April 4th 2022, and the most recent report was 3 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2023-03-09 16:35:41 (3 years ago)	Host header is a numeric IP address detected by ModSecurity 2023-03-09 19:35:41	Hacking Bad Web Bot Web App Attack
🇨🇿 lp	2023-02-22 10:40:30 (3 years ago)	Port scanning: 81.213.157.39 was recorded 773 times by 773 hosts attempting to connect to 1 unique p ... show more Port scanning: 81.213.157.39 was recorded 773 times by 773 hosts attempting to connect to 1 unique port (8000/tcp) show less	Port Scan
🇱🇺 Tha_14	2023-02-09 07:19:15 (3 years ago)	Incoming TCP Connection from 81.213.157.39 to port: 8080. Honeypot was triggered at 2/9/2023 08:19:0 ... show more Incoming TCP Connection from 81.213.157.39 to port: 8080. Honeypot was triggered at 2/9/2023 08:19:08 AM. show less	Port Scan
🇱🇺 speedhost.se	2023-02-09 07:13:18 (3 years ago)	Unauthorized connection attempt detected from IP address 81.213.157.39 to port 8080 (BILLING) [K]	Brute-Force Exploited Host
Anonymous	2023-01-23 18:05:44 (3 years ago)		Brute-Force SSH
🇩🇪 www.blocklist.de	2023-01-23 13:42:11 (3 years ago)	Lines containing failures of 81.213.157.39 (max 1000) Jan 23 12:40:15 nbi-636 sshd[665499]: AD user ... show more Lines containing failures of 81.213.157.39 (max 1000) Jan 23 12:40:15 nbi-636 sshd[665499]: AD user officina from 81.213.157.39 port 54471 Jan 23 12:40:15 nbi-636 sshd[665499]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.213.157.39 Jan 23 12:40:17 nbi-636 sshd[665499]: Failed password for AD user officina from 81.213.157.39 port 54471 ssh2 Jan 23 12:40:19 nbi-636 sshd[665499]: Connection closed by AD user officina 81.213.157.39 port 54471 [preauth] Jan 23 12:40:28 nbi-636 sshd[665577]: User r.r from 81.213.157.39 not allowed because not listed in AllowUsers Jan 23 12:40:28 nbi-636 sshd[665577]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.213.157.39 user=r.r Jan 23 12:40:31 nbi-636 sshd[665577]: Failed password for AD user r.r from 81.213.157.39 port 54477 ssh2 Jan 23 12:40:36 nbi-636 sshd[665577]: Failed password for AD user r.r from 81.213.157.39 port 54477 ssh2 Jan 23 12:40:........ ------------------------------ show less	FTP Brute-Force Hacking
🇩🇪 www.blocklist.de	2023-01-23 11:42:10 (3 years ago)	Lines containing failures of 81.213.157.39 (max 1000) Jan 23 12:40:15 nbi-636 sshd[665499]: AD user ... show more Lines containing failures of 81.213.157.39 (max 1000) Jan 23 12:40:15 nbi-636 sshd[665499]: AD user officina from 81.213.157.39 port 54471 Jan 23 12:40:15 nbi-636 sshd[665499]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.213.157.39 Jan 23 12:40:17 nbi-636 sshd[665499]: Failed password for AD user officina from 81.213.157.39 port 54471 ssh2 Jan 23 12:40:19 nbi-636 sshd[665499]: Connection closed by AD user officina 81.213.157.39 port 54471 [preauth] Jan 23 12:40:28 nbi-636 sshd[665577]: User r.r from 81.213.157.39 not allowed because not listed in AllowUsers Jan 23 12:40:28 nbi-636 sshd[665577]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.213.157.39 user=r.r Jan 23 12:40:31 nbi-636 sshd[665577]: Failed password for AD user r.r from 81.213.157.39 port 54477 ssh2 Jan 23 12:40:36 nbi-636 sshd[665577]: Failed password for AD user r.r from 81.213.157.39 port 54477 ssh2 Jan 23 12:40:........ ------------------------------ show less	FTP Brute-Force Hacking
🇧🇬 MazenHost	2023-01-23 05:54:52 (3 years ago)	Jan 23 06:54:21 tutorial sshd[3377798]: Invalid user nagios from 81.213.157.39 port 50414 Jan 23 06: ... show more Jan 23 06:54:21 tutorial sshd[3377798]: Invalid user nagios from 81.213.157.39 port 50414 Jan 23 06:54:22 tutorial sshd[3377798]: Failed password for invalid user nagios from 81.213.157.39 port 50414 ssh2 Jan 23 06:54:28 tutorial sshd[3377798]: Failed password for invalid user nagios from 81.213.157.39 port 50414 ssh2 Jan 23 06:54:40 tutorial sshd[3377798]: Failed password for invalid user nagios from 81.213.157.39 port 50414 ssh2 ... show less	Brute-Force SSH
🇸🇪 HyperSpeed	2023-01-23 00:50:04 (3 years ago)	Jan 23 00:50:04 SE1 sshd[399433]: Invalid user postgres from 81.213.157.39 port 40325 ...	Brute-Force SSH
🇺🇸 MPL	2023-01-19 01:53:15 (3 years ago)	tcp/22	Port Scan
🇺🇸 MPL	2023-01-18 22:53:00 (3 years ago)	tcp/22	Port Scan
🇭🇺 HoneyPotEu	2023-01-18 20:34:04 (3 years ago)	Jan 18 21:34:00 vps sshd[1575612]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid= ... show more Jan 18 21:34:00 vps sshd[1575612]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.213.157.39 Jan 18 21:34:02 vps sshd[1575612]: Failed password for invalid user dnsekakf2$$ from 81.213.157.39 port 58493 ssh2 ... show less	Brute-Force SSH
🇹🇭 Sawasdee	2023-01-18 14:51:08 (3 years ago)	SSH break in attempt ...	SSH
🇳🇱 beljoost	2023-01-13 14:35:13 (3 years ago)	Jan 13 15:14:33 (UTC+1) unsolicited connection attempt to TCP/443.	Port Scan
🇯🇵 HeliJP	2023-01-13 02:01:06 (3 years ago)	2023-01-12 15:37:29 - Unauthorized SFTP/SSH access attempts from IP address 81.213.157.39 on port 22 ... show more 2023-01-12 15:37:29 - Unauthorized SFTP/SSH access attempts from IP address 81.213.157.39 on port 22 (1 daily hits). show less	FTP Brute-Force

Showing 1 to 15 of 71 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇩 178.248.73.109

🇫🇷 85.217.140.40

🇧🇪 34.140.112.171

🇺🇸 34.86.243.82

🇻🇳 14.232.208.138

🇨🇳 14.103.117.85

🇧🇷 2804:28c8:a21b:5600:91d3:5ab5:5747:3c27

🇷🇺 195.2.71.225

🇮🇩 180.252.224.192

🇺🇸 172.96.9.202

🇭🇰 156.239.236.204

🇺🇸 147.185.132.198

🇨🇳 49.80.67.198

🇭🇰 47.86.40.9

🇳🇱 34.178.192.104

🇺🇸 216.25.89.73

🇹🇷 213.250.150.240

🇮🇳 187.127.190.132

🇺🇸 185.180.141.105

🇨🇳 123.14.126.251