85.105.28.222
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Turk Telekomunikasyon Anonim Sirketi
- Usage Type
- Fixed Line ISP
- ASN
- AS9121
- Hostname(s)
- 85.105.28.222.static.ttnet.com.tr
- Domain Name
- turktelekom.com.tr
- Country
- 🇹🇷 Turkey
- City
- Izmir, Izmir Province
Abuse Reports
Total reports
98 from
51 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇰🇷 ian ian |
Unsolicited TCP SYN to closed port(s) 23 (1 attempt(s)) on a host that serves no such service; first seen 2026-11-15T08:04:13Z UTC, blocked by firewall.
|
Brute-Force Port Scan | |
| 🇫🇷 security.rdmc.fr |
Activity from blacklisted IP
|
Hacking | |
| 🇫🇷 uthul |
T-Pot honeypot: 3 hits on ports [23] (automated)
|
Port Scan Brute-Force SSH | |
| 🇪🇸 raiolanetworks.com |
Honeypot detection: SSH/Telnet brute-force. 2 events observed. Reported automatically from a honeypot sensor.
|
Brute-Force SSH | |
| 🇸🇬 ksi_digital |
Cowrie honeypot (telnet/23), 2026-11-14 23:08 UTC: 1 successful login(s) (user: admin), then 2 command(s), e.g.: cd /proc && cat self/cmdline. Automated bot behaviour; payloads (if any) quarantined, never executed.
|
Brute-Force IoT Targeted | |
| 🇧🇷 radardatelecom |
Blocked by Radar da Telecom firewall — abuseipdb
|
Bad Web Bot Web App Attack | |
| 🇺🇸 xclmp |
Unauthorized connection attempts consistent with that of port probing and scanning from 85.105.28.222 were detected at 2026-11-14 16:35:26 UTC. Learn More: https://fia.project-furina.com/report/26727
|
Port Scan | |
| 🇷🇺 genokrad |
Unauthorized connection try on TCP/23 (Telnet)
|
Port Scan | |
| 🇺🇸 RAP |
2026-11-14 10:59:06 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | |
| 🇩🇪 guldkage |
Unauthorized connection attempt detected from IP address 85.105.28.222 to port 23 (ger-01) [TELNET]
|
Exploited Host | |
| 🇮🇹 CoreTech srl |
[DC: IP:151.1.252.27] ntopng alert: blacklisted_client_contact,ndpi_unsafe_protocol
|
Hacking | |
| 🇵🇱 mkey |
Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT | PORTS=23 | HITS=2 | IPSET=ADD | FIRST=2026-11-13 23:54:50 | LAST=2026-11-13 23:54:51. Last seen 2026-11-13 23:54:51.
|
Port Scan | |
| 🇺🇸 RAP |
2026-11-13 05:59:23 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | |
| 🇺🇸 scharsey |
Honeypot: 2 TELNET events incl. login attempts
|
Brute-Force IoT Targeted | |
| 🇨🇭 lumi |
Cowrie Honeypot: Unauthorised SSH/Telnet login attempt with user "admin" at 2026-11-12T22:10:50Z
|
Brute-Force SSH |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown