JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 85.95.242.138

85.95.242.138 was found in our database!

This IP was reported 81 times. Confidence of Abuse is 100%: ?

100%

ISP	Iksir Internet Hizmetleri A.S.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206991
Domain Name	ixirhost.com
Country	🇹🇷 Turkey
City	Istanbul, Istanbul

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 85.95.242.138

Whois 85.95.242.138

IP Abuse Reports for 85.95.242.138:

This IP address has been reported a total of 81 times from 65 distinct sources. 85.95.242.138 was first reported on July 23rd 2026, and the most recent report was 15 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 evicky2002	2026-07-24 06:00:00 (15 hours ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇩🇪 phil2k	2026-07-23 20:52:47 (1 day ago)	portscan on multiple TCP ports : Firewall: Within 2026-07-23 12:26:52 - 2026-07-23 21:18:06 CEST(+02 ... show more portscan on multiple TCP ports : Firewall: Within 2026-07-23 12:26:52 - 2026-07-23 21:18:06 CEST(+0200) identified: unallowed access from 85.95.242.138/32 on port 3389(ms-wbt-server) (1 trial) Fail2ban: Within 2026-07-23 12:26:52 - 2026-07-23 21:18:07 CEST(+0200) banned: 5 times by fail2ban[firewall]; 5 times by fail2ban[recidive] show less	Port Scan
🇭🇰 PingMeMaybe	2026-07-23 19:48:20 (1 day ago)	Blocked by UFW on hk [3389/tcp] Source port: 47568 TTL: 238 Packet length: 40 TOS: 0x00 This report ... show more Blocked by UFW on hk [3389/tcp] Source port: 47568 TTL: 238 Packet length: 40 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇮 6kilowatti	2026-07-23 19:22:01 (1 day ago)	2026-07-23T22:22:01.153624+03:00 koti kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:bd:29:2d:18:f ... show more 2026-07-23T22:22:01.153624+03:00 koti kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:bd:29:2d:18:fd:74:70:71:9e:08:00 SRC=85.95.242.138 DST=10.0.0.30 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=55877 PROTO=TCP SPT=47568 DPT=3389 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇩🇪 phil2k	2026-07-23 19:18:08 (1 day ago)	fail2ban:firewall:2026-07-23T19:29:48.380897+02:00 <SRV> firewall: filter IN=<ANONYMIZED_INTERFACE> ... show more fail2ban:firewall:2026-07-23T19:29:48.380897+02:00 <SRV> firewall: filter IN=<ANONYMIZED_INTERFACE> OUT= MAC=<ANONYMIZED_MAC> SRC=85.95.242.138 DST=<ANONYMIZED_IP> LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=64470 PROTO=TCP SPT=47568 DPT=3389 WINDOW=1024 RES=0x00 SYN URGP=0 2026-07-23T21:18:06.167701+02:00 <SRV> firewall: filter IN=<ANONYMIZED_INTERFACE> OUT= MAC=<ANONYMIZED_MAC> SRC=85.95.242.138 DST=<PRIVATE_IPv4> LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=47392 PROTO=TCP SPT=47568 DPT=3389 WINDOW=1024 RES=0x00 SYN URGP=0 show less	DDoS Attack Port Scan Brute-Force
🇩🇪 xserverx.ru	2026-07-23 19:16:08 (1 day ago)	[UFW SCAN!!!!] SRC=85.95.242.138 LEN=40 TOS=0x00 PREC=0x20 TTL=243 PROTO=TCP SPT=47568 DPT=3389 WIND ... show more [UFW SCAN!!!!] SRC=85.95.242.138 LEN=40 TOS=0x00 PREC=0x20 TTL=243 PROTO=TCP SPT=47568 DPT=3389 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 MPL	2026-07-23 19:04:47 (1 day ago)	tcp/3389 (10 or more attempts)	Port Scan
🇩🇪 Da_tschek	2026-07-23 19:02:33 (1 day ago)	Port scanning	Port Scan Hacking
🇩🇪 Tsumugi Kotobuki	2026-07-23 18:48:21 (1 day ago)	Port Scan on Honeypot \| Ports: 3389/RDP \| Proto: TCP(1) \| Flags: all SYN \| TTL: 243 \| Len: 44B \| Win ... show more Port Scan on Honeypot \| Ports: 3389/RDP \| Proto: TCP(1) \| Flags: all SYN \| TTL: 243 \| Len: 44B \| Win: 1024(1) \| F2B/ufw-honeypot@2026-07-23T18:48:21Z show less	Port Scan Hacking
🇩🇪 kingjan1999	2026-07-23 18:45:13 (1 day ago)	Blocked by UFW [3389/tcp] \| SPT: 47568 \| TTL: 241 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/se ... show more Blocked by UFW [3389/tcp] \| SPT: 47568 \| TTL: 241 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇮🇳 Mr.Singh	2026-07-23 18:30:49 (1 day ago)	NFT blocked 85.95.242.138 on 24-Jul-2026..	Port Scan Brute-Force
🇳🇱 rmvanderspek	2026-07-23 18:20:02 (1 day ago)	RDP (Windows Remote Desktop) Brute-force detected.	Brute-Force
Anonymous	2026-07-23 17:55:06 (1 day ago)	2026-07-23T19:55:05.030770+02:00 vps kernel: [1200161.546567] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=f ... show more 2026-07-23T19:55:05.030770+02:00 vps kernel: [1200161.546567] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=85.95.242.138 DST=54.37.14.118 LEN=40 TOS=0x00 PREC=0x00 TTL=237 ID=7400 PROTO=TCP SPT=47568 DPT=3389 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan Brute-Force
🇦🇺 FEWA	2026-07-23 17:51:14 (1 day ago)	Fail2Ban Ban Triggered	Hacking Brute-Force
🇫🇷 Duggy_Tuxy🧱	2026-07-23 17:44:04 (1 day ago)	[DS-BLKS-PROD01] Blocked by SysWarden Firewall (RDP/VNC Attack)	Brute-Force Port Scan

Showing 1 to 15 of 81 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇭 203.154.158.195

🇬🇧 198.244.242.159

🇮🇳 113.193.234.210

🇨🇦 85.217.149.48

🇹🇼 198.235.24.50

🇳🇱 176.65.132.107

🇮🇳 103.123.53.88

🇷🇴 92.118.39.49

🇨🇦 85.217.149.31

🇨🇦 85.217.149.12

🇶🇦 37.211.75.141

🇬🇧 35.203.211.36

🇺🇸 2a04:4e40:e010:0:8e8:3de3:a003:e59c

🇲🇩 194.110.247.198

🇨🇳 183.239.58.25

🇧🇷 177.126.17.212

🇫🇮 147.185.133.103

🇨🇦 138.197.164.175

🇺🇸 104.168.145.104

🇺🇸 103.203.57.3