JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 85.111.68.99

85.111.68.99 was found in our database!

This IP was reported 3,448 times. Confidence of Abuse is 100%: ?

100%

ISP	Turk Telekomunikasyon Anonim Sirketi
Usage Type	Fixed Line ISP
ASN	AS9121
Hostname(s)	85.111.68.99.dynamic.ttnet.com.tr
Domain Name	turktelekom.com.tr
Country	🇹🇷 Turkey
City	Istanbul, Istanbul

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 85.111.68.99

Whois 85.111.68.99

IP Abuse Reports for 85.111.68.99:

This IP address has been reported a total of 3,448 times from 697 distinct sources. 85.111.68.99 was first reported on February 11th 2026, and the most recent report was 37 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇿 plzenskypruvodce.cz	2026-05-30 21:23:07 (4 days ago)	2026-05-30T23:17:46.959129+02:00 proxy sshd[2538437]: Invalid user ubuntu from 85.111.68.99 port 385 ... show more 2026-05-30T23:17:46.959129+02:00 proxy sshd[2538437]: Invalid user ubuntu from 85.111.68.99 port 38500 2026-05-30T23:23:06.638666+02:00 proxy sshd[2538800]: Invalid user ts3server from 85.111.68.99 port 46120 ... show less	Web App Attack
🇨🇿 plzenskypruvodce.cz	2026-05-30 21:01:31 (4 days ago)	2026-05-30T22:55:56.594487+02:00 proxy sshd[2537004]: Invalid user client from 85.111.68.99 port 368 ... show more 2026-05-30T22:55:56.594487+02:00 proxy sshd[2537004]: Invalid user client from 85.111.68.99 port 36890 2026-05-30T23:01:31.196858+02:00 proxy sshd[2537367]: Invalid user asterisk from 85.111.68.99 port 45468 ... show less	Web App Attack
🇨🇿 plzenskypruvodce.cz	2026-05-30 20:39:30 (4 days ago)	2026-05-30T22:33:42.669935+02:00 proxy sshd[2534851]: Invalid user michael from 85.111.68.99 port 47 ... show more 2026-05-30T22:33:42.669935+02:00 proxy sshd[2534851]: Invalid user michael from 85.111.68.99 port 47222 2026-05-30T22:39:29.707609+02:00 proxy sshd[2535235]: Invalid user k from 85.111.68.99 port 52618 ... show less	Web App Attack
🇩🇪 defkev	2026-05-30 20:27:55 (4 days ago)		Brute-Force SSH
🇪🇸 tg_de	2026-05-30 20:18:10 (4 days ago)	462 attempts since 29.05.2026 02:46:10 UTC - last one: 2026-05-30T22:18:10.264047+02:00 beta sshd-se ... show more 462 attempts since 29.05.2026 02:46:10 UTC - last one: 2026-05-30T22:18:10.264047+02:00 beta sshd-session[365377]: Connection closed by authenticating user root 85.111.68.99 port 44454 [preauth] show less	Brute-Force SSH
🇺🇸 itsnixk	2026-05-30 20:03:57 (4 days ago)	(mod_security) mod_security (id:920350) triggered by 85.111.68.99 (TR/Turkey/85.111.68.99.dynamic.tt ... show more (mod_security) mod_security (id:920350) triggered by 85.111.68.99 (TR/Turkey/85.111.68.99.dynamic.ttnet.com.tr): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sat May 30 16:03:55.931092 2026] [security2:error] [pid 1102339:tid 1102731] [client 85.111.68.99:55816] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+\|\\\\[[\\\\da-f:]+\\\\]\|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "774"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.25.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh"] [unique_id "ahtCq--baZlILPXFiZWIlAAAAQ0"] show less	Port Scan
🇩🇪 nidaren	2026-05-30 20:02:41 (4 days ago)	85.111.68.99 - - [30/May/2026:22:02:40 +0200] "GET /index.php?s=/index/\x5Cthink\x5Capp/invokefuncti ... show more 85.111.68.99 - - [30/May/2026:22:02:40 +0200] "GET /index.php?s=/index/\x5Cthink\x5Capp/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=Hello HTTP/1.1" 404 27 "-" "libredtail-http" ... show less	Bad Web Bot Web App Attack
🇪🇸 tg_de	2026-05-30 18:32:13 (4 days ago)	443 attempts since 29.05.2026 02:46:10 UTC - last one: 2026-05-30T20:32:13.102599+02:00 beta sshd-se ... show more 443 attempts since 29.05.2026 02:46:10 UTC - last one: 2026-05-30T20:32:13.102599+02:00 beta sshd-session[363804]: Connection closed by authenticating user root 85.111.68.99 port 34058 [preauth] show less	Brute-Force SSH
🇺🇸 RAP	2026-05-30 16:50:36 (4 days ago)	2026-05-30 16:50:36 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇦🇺 LiftUp Hosting	2026-05-30 16:08:04 (4 days ago)	Honeypot hit: Brute-force attack detected on 23/TELNET • Credential used: admin:admin • Number of lo ... show more Honeypot hit: Brute-force attack detected on 23/TELNET • Credential used: admin:admin • Number of login attempts: 1 show less	Hacking
🇺🇸 CBJ	2026-05-30 15:48:16 (4 days ago)	fail2ban: apache-filepath-recon ...	Web App Attack
🇪🇸 tg_de	2026-05-30 15:32:03 (4 days ago)	411 attempts since 29.05.2026 02:46:10 UTC - last one: 2026-05-30T17:32:03.501105+02:00 beta sshd-se ... show more 411 attempts since 29.05.2026 02:46:10 UTC - last one: 2026-05-30T17:32:03.501105+02:00 beta sshd-session[361806]: Connection closed by authenticating user root 85.111.68.99 port 43748 [preauth] show less	Brute-Force SSH
🇫🇮 pr0vieh	2026-05-30 14:59:40 (4 days ago)	2026-05-30T14:37:21.024083+00:00 Linux15 sshd-session[2107176]: pam_unix(sshd:auth): authentication ... show more 2026-05-30T14:37:21.024083+00:00 Linux15 sshd-session[2107176]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.111.68.99 user=root 2026-05-30T14:37:22.803064+00:00 Linux15 sshd-session[2107176]: Failed password for root from 85.111.68.99 port 42934 ssh2 2026-05-30T14:43:02.355582+00:00 Linux15 sshd-session[2124182]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.111.68.99 user=root 2026-05-30T14:43:04.025027+00:00 Linux15 sshd-session[2124182]: Failed password for root from 85.111.68.99 port 56688 ssh2 2026-05-30T14:48:35.860017+00:00 Linux15 sshd-session[2146857]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.111.68.99 user=root 2026-05-30T14:48:38.003146+00:00 Linux15 sshd-session[2146857]: Failed password for root from 85.111.68.99 port 50588 ssh2 2026-05-30T14:54:08.146747+00:00 Linux15 sshd-session[2169140]: pam_unix(sshd:auth): authentication fai ... show less	Brute-Force SSH
🇺🇸 MPL	2026-05-30 14:52:05 (4 days ago)	tcp/2375	Port Scan
🇨🇿 plzenskypruvodce.cz	2026-05-30 14:40:19 (4 days ago)	2026-05-30T16:34:34.252837+02:00 proxy sshd[2509053]: Invalid user ubuntu from 85.111.68.99 port 411 ... show more 2026-05-30T16:34:34.252837+02:00 proxy sshd[2509053]: Invalid user ubuntu from 85.111.68.99 port 41110 2026-05-30T16:40:18.784294+02:00 proxy sshd[2509442]: Invalid user service from 85.111.68.99 port 52404 ... show less	Web App Attack

Showing 121 to 135 of 3448 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 203.242.185.211

🇬🇧 188.240.59.23

🇳🇱 176.65.148.147

🇳🇱 176.65.131.192

🇸🇳 154.125.0.153

🇿🇦 105.233.67.36

🇺🇸 104.194.10.248

🇬🇧 35.203.211.188

🇲🇦 196.75.166.160

🇩🇪 195.63.20.56

🇰🇷 169.211.232.182

🇩🇪 167.94.146.62

🇺🇸 147.185.132.114

🇺🇸 135.237.122.43

🇺🇸 108.181.22.199

🇸🇬 101.47.8.188

🇫🇷 91.196.152.126

🇫🇷 91.196.152.36

🇳🇱 91.92.42.162

🇷🇴 80.94.92.187