JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

85.100.133.74

Neutral Activity

Abuse Confidence Score

0% Low Risk

35 reports

23 reporters · latest 1 year ago

ISP: Turk Telekomunikasyon Anonim Sirketi
Usage Type: Fixed Line ISP
ASN: AS9121
Domain Name: turktelekom.com.tr
Country: 🇹🇷 Turkey
City: Istanbul, Istanbul

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

85.100.133.74 has been reported 35 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

35 from 23 distinct reporters

First reported

July 12th 2025

Most recent report

1 year ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Study Bitcoin 🤗	2025-08-21 06:30:45 UTC · (1 year ago)	Port probe to tcp/80 (http) [srv133]	Port Scan Bad Web Bot Web App Attack
🇺🇸 Gabriel Camargo	2025-08-21 05:56:49 UTC · (1 year ago)	85.100.133.74 - - [21/Aug/2025:00:56:35 -0500] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 166 "-" "-" 85.100.133.74 - - [21/Aug/2025:00:56:42 -0500] "POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%6 ... show more 85.100.133.74 - - [21/Aug/2025:00:56:35 -0500] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 166 "-" "-" 85.100.133.74 - - [21/Aug/2025:00:56:42 -0500] "POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh HTTP/1.1" 400 166 "-" "-" 85.100.133.74 - - [21/Aug/2025:00:56:48 -0500] "POST /hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1" 404 162 "-" "libredtail-http" ... show less	Brute-Force SSH
🇺🇸 MPL	2025-08-21 03:26:23 UTC · (1 year ago)	tcp/443 (3 or more attempts)	Port Scan
Anonymous	2025-08-20 23:50:44 UTC · (1 year ago)	2025-08-21T01:50:22.739002+02:00 leela sshd[4161927]: Connection from 85.100.133.74 port 60444 on 193.30.123.128 port 22 rdomain "" 2025-08-21T01:50:41.245140+02:00 leela sshd[4161927]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid ... show more 2025-08-21T01:50:22.739002+02:00 leela sshd[4161927]: Connection from 85.100.133.74 port 60444 on 193.30.123.128 port 22 rdomain "" 2025-08-21T01:50:41.245140+02:00 leela sshd[4161927]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.100.133.74 user=root 2025-08-21T01:50:43.576140+02:00 leela sshd[4161927]: Failed password for root from 85.100.133.74 port 60444 ssh2 ... show less	Brute-Force SSH
🇦🇹 urnilxfgbez	2025-08-20 22:45:00 UTC · (1 year ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇹🇷 Threat.live	2025-08-20 21:00:05 UTC · (1 year ago)	Port Scan, tcp/80	Port Scan
🇳🇱 Study Bitcoin 🤗	2025-08-20 20:08:21 UTC · (1 year ago)	Port probe to tcp/2222 (rockwell csp2) [srv124]	Port Scan SSH
🇺🇸 bigscoots.com	2025-08-20 19:34:57 UTC · (1 year ago)	(sshd) Failed SSH login from 85.100.133.74 (TR/Turkey/85.100.133.74.dynamic.ttnet.com.tr): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Aug 20 14:33:48 9146 sshd[13338]: pam_unix(sshd:auth): authentication failure; logname ... show more (sshd) Failed SSH login from 85.100.133.74 (TR/Turkey/85.100.133.74.dynamic.ttnet.com.tr): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Aug 20 14:33:48 9146 sshd[13338]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.100.133.74 user=root Aug 20 14:33:50 9146 sshd[13338]: Failed password for root from 85.100.133.74 port 34892 ssh2 Aug 20 14:34:22 9146 sshd[13374]: Invalid user jenkins from 85.100.133.74 port 56042 Aug 20 14:34:24 9146 sshd[13374]: Failed password for invalid user jenkins from 85.100.133.74 port 56042 ssh2 Aug 20 14:34:44 9146 sshd[13487]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.100.133.74 user=root show less	Brute-Force SSH
🇺🇸 MPL	2025-08-20 18:05:10 UTC · (1 year ago)	tcp/443 (2 or more attempts)	Port Scan
🇹🇭 Sawasdee	2025-08-20 15:45:05 UTC · (1 year ago)	Unwanted checking 80 or 443 port ...	Bad Web Bot
Anonymous	2025-08-20 15:38:57 UTC · (1 year ago)	2025-08-20T12:38:36.155348 host.likenet.com.br sshd[97323]: Invalid user admin from 85.100.133.74 port 52722 2025-08-20T12:38:55.431258 host.likenet.com.br sshd[97330]: Invalid user oracle from 85.100.133.74 port 34406 ...	SSH
🇺🇸 MPL	2025-08-20 14:45:04 UTC · (1 year ago)	tcp/22	Port Scan
🇺🇸 MPL	2025-08-20 14:45:04 UTC · (1 year ago)	tcp/22	Port Scan
🇹🇷 rtbh.com.tr	2025-08-18 20:08:18 UTC · (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2025-08-18 00:08:17 UTC · (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force

Showing 1 to 15 of 35 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇧🇷 177.10.237.84

🇺🇸 172.84.101.130

🇩🇪 109.160.32.45

🇺🇸 54.167.103.79

🇳🇱 45.148.10.141

🇭🇰 45.64.112.230

🇨🇳 36.33.19.48

🇩🇪 185.201.139.108

🇺🇸 146.190.175.10

🇺🇸 44.220.188.221

🇩🇪 2a01:4020:31:0:101::605

🇬🇧 2a01:4020:1:1:101::397

🇵🇾 181.94.229.51

🇫🇷 143.244.57.120

🇮🇳 122.187.250.250

🇺🇸 122.8.45.235

🇨🇳 120.48.44.93

🇹🇼 111.249.161.46

🇸🇪 90.129.205.20

🇺🇸 70.183.235.24