85.108.96.38

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted.
Abuse Confidence Score
0% Low Risk
40 reports
27 reporters · latest 3 months ago
ISP
Turk Telekomunikasyon Anonim Sirketi
Usage Type
Fixed Line ISP
ASN
AS9121
Domain Name
turktelekom.com.tr
Country
🇹🇷 Turkey
City
Istanbul, Istanbul
Log in to view charts and search reports for this IP. Log In

No reports in the last 60 days

85.108.96.38 has been reported 40 times. The most recent report is from .

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Total reports
40 from 27 distinct reporters
First reported
Most recent report
Reporter IoA Timestamp (UTC) Comment Categories
🇮🇳 evicky2002
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking Brute-Force SSH
🇬🇧 PeravixGroup
Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: MEDIUM. Aaran.cloud
IoT Targeted Brute-Force
🇺🇸 RAP
2026-05-22 19:30:55 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
🇩🇪 Da_tschek
Port scanning
Port Scan Hacking
🇭🇰 mutebot.net
SRC=85.108.96.38, PROTO=TCP, SPT=14754, DPT=23
Port Scan
🇩🇪 bescared
F2B - Malicious activity detected. Unauthorized connection attempt: Telnet. -8ff06ede-
Port Scan
🇩🇪 bescared
F2B - Malicious activity detected. Unauthorized connection attempt: Telnet. -c23856ef-
Port Scan
🇫🇷 security.rdmc.fr
Port Scan Attack proto:TCP src:8421 dst:23
Port Scan
🇵🇱 Kitki30.com
Entered Telnet Tarpit (endlessh). Log: 2026-05-22T12:18:07.739Z ACCEPT host=::ffff:85.108.96.38 port=46152 fd=486 n=597/1020
IoT Targeted Port Scan Brute-Force
Anonymous
Try to connect to Port_Scan_23_stealth
Port Scan
🇫🇮 iamxorum
Port Scan IoT Targeted
🇧🇷 chronos
Attempted unauthorized access to Telnet (port 23), likely brute force. | Port: 23 | Proto: TCP | Location: Türkiye, Çorlu
Hacking Exploited Host Port Scan Brute-Force
🇫🇷 Hiigara
connection attempt : 85.108.96.38 on port : tcp/23 (Telnet)
Port Scan
🇳🇱 ByeByte API
byebyte.space auth: TCP packet to port 23 (telnet) at 2026-05-22T06:04:56Z. Source port 35500. TCP flags: SYN. Packet: 40B, TTL 53, window 53577, IP id 38790. Single packet, dropped at firewall. p0f: 11 hops.
Port Scan
🇳🇱 ByeByte API
Port scan from this IP. Firewall dropped every packet. Targeted TCP ports: 23. Single burst at 2026-05-22 06:04 UTC.
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 172.203.190.135
🇵🇱 162.158.172.135
🇵🇱 162.158.172.93
🇫🇷 152.228.236.215
🇫🇷 137.74.114.131
🇨🇱 136.248.242.166
🇺🇸 130.131.220.95
🇨🇳 112.31.206.50
🇨🇳 110.249.202.228
🇭🇰 103.210.22.74
🇷🇺 79.111.188.114
🇫🇷 45.140.185.109
🇭🇰 13.94.39.162
🇮🇷 5.214.111.163
🇨🇿 194.15.113.186
🇷🇺 178.72.115.21
🇩🇪 151.243.11.105
🇺🇸 129.121.99.2
🇺🇸 129.121.97.74
🇬🇧 129.121.94.183
feedback