JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 85.99.242.105

85.99.242.105 was found in our database!

This IP was reported 23 times. Confidence of Abuse is 82%: ?

82%

ISP	Turk Telekomunikasyon Anonim Sirketi
Usage Type	Mobile ISP
ASN	AS9121
Hostname(s)	85.99.242.105.static.ttnet.com.tr
Domain Name	turktelekom.com.tr
Country	🇹🇷 Turkey
City	Izmir, Izmir Province

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 85.99.242.105

Whois 85.99.242.105

IP Abuse Reports for 85.99.242.105:

This IP address has been reported a total of 23 times from 16 distinct sources. 85.99.242.105 was first reported on June 6th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 wlt-blocker	2026-06-24 10:25:21 (1 hour ago)	Unauthorized access to webpage admin	Web App Attack
🇺🇸 lostswordfish.com	2026-06-24 08:26:03 (3 hours ago)	Wordfence waf block on fairregistry	Web App Attack
🇺🇸 TPI-Abuse	2026-06-23 14:06:14 (21 hours ago)	(mod_security) mod_security (id:225170) triggered by 85.99.242.105 (85.99.242.105.static.ttnet.com.t ... show more (mod_security) mod_security (id:225170) triggered by 85.99.242.105 (85.99.242.105.static.ttnet.com.tr): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 10:06:08.417482 2026] [security2:error] [pid 21113:tid 21113] [client 85.99.242.105:62591] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|grabagame.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "grabagame.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajqS0G_QIu57sTCSe093CwAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-23 05:56:23 (1 day ago)	(mod_security) mod_security (id:225170) triggered by 85.99.242.105 (85.99.242.105.static.ttnet.com.t ... show more (mod_security) mod_security (id:225170) triggered by 85.99.242.105 (85.99.242.105.static.ttnet.com.tr): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 01:56:19.055113 2026] [security2:error] [pid 23848:tid 23973] [client 85.99.242.105:49996] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|reghay.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "reghay.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajogA12IDsqrf29m2ccvVgAAAgE"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 4server	2026-06-20 08:55:38 (4 days ago)	[SatJun2010:55:33.1449142026][security2:error][pid2406920:tid2407015][client85.99.242.105:0]ModSecur ... show more [SatJun2010:55:33.1449142026][security2:error][pid2406920:tid2407015][client85.99.242.105:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"artisteer-italia.org\"][uri\"/xmlrpc.php\"][unique_id\"ajZVhUl4uVbVV4E6Z8Ov1wAAAMk\"] show less	Port Scan Brute-Force Web App Attack
🇳🇿 Tripwire	2026-06-20 08:55:36 (4 days ago)	Probing for Wordpress - /xmlrpc.php	Brute-Force Web App Attack
🇫🇮 6kilowatti	2026-06-20 07:50:48 (4 days ago)	85.99.242.105 - - [20/Jun/2026:10:50:47 +0300] "POST /xmlrpc.php HTTP/1.1" 404 27 "-" "Mozilla/5.0 ( ... show more 85.99.242.105 - - [20/Jun/2026:10:50:47 +0300] "POST /xmlrpc.php HTTP/1.1" 404 27 "-" "Mozilla/5.0 (Windows NT 10.0; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/86.0.0.0 Safari/537.36" ... show less	Web App Attack
🇨🇦 zXero	2026-06-18 21:21:02 (5 days ago)	Fail2Ban automatic report - jail: no-wordpress	Brute-Force SSH DDoS Attack
Anonymous	2026-06-18 14:46:11 (5 days ago)	(wordpress) Failed wordpress login from 85.99.242.105 (TR/Türkiye/İzmir Province/Bornova/85.99.242.1 ... show more (wordpress) Failed wordpress login from 85.99.242.105 (TR/Türkiye/İzmir Province/Bornova/85.99.242.105.static.ttnet.com.tr/[redacted]) show less	Brute-Force
🇳🇱 Site.eu	2026-06-17 15:06:40 (6 days ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇬🇧 consul.to	2026-06-17 12:01:13 (6 days ago)	Web attack/malicious scanning detected	Web App Attack
🇩🇪 YF	2026-06-16 06:10:10 (1 week ago)	xmlrpc.php Potential DDoS or brute force	DDoS Attack Brute-Force
🇳🇱 wlt-blocker	2026-06-13 11:08:37 (1 week ago)	Unauthorized access to webpage admin	Web App Attack
🇨🇭 4server	2026-06-12 12:06:20 (1 week ago)	[FriJun1214:06:14.0634972026][security2:error][pid54291:tid54769][client85.99.242.105:0]ModSecurity: ... show more [FriJun1214:06:14.0634972026][security2:error][pid54291:tid54769][client85.99.242.105:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"367\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"privilege-service.ch\"][uri\"/xmlrpc.php\"][unique_id\"aiv2NghVV7MtSRDqbQj03AAAAQE\"] show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-06-11 08:23:48 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 85.99.242.105 (85.99.242.105.static.ttnet.com.t ... show more (mod_security) mod_security (id:225170) triggered by 85.99.242.105 (85.99.242.105.static.ttnet.com.tr): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 04:23:44.844243 2026] [security2:error] [pid 1785:tid 1785] [client 85.99.242.105:49419] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|drdot.xyz\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "drdot.xyz"] [uri "/wp-json/wp/v2/users"] [unique_id "aipwkCJ9U0JWhgN5S5r8pgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 23 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 107.155.88.70

🇩🇪 213.209.159.227

🇬🇧 195.140.214.19

🇭🇰 165.154.6.75

🇷🇴 141.98.83.240

🇺🇸 69.74.29.21

🇺🇸 3.131.220.121

🇷🇴 2.57.121.112

🇮🇩 2406:da19:776:6e01:d3f9:d13:5690:2a27

🇧🇪 198.235.24.129

🇹🇭 118.194.251.101

🇨🇳 113.56.35.44

🇦🇹 109.70.100.8

🇨🇦 85.217.149.42

🇱🇹 62.60.130.169

🇭🇰 20.24.219.233

🇺🇸 8.228.103.71

🇺🇸 195.184.76.92

🇳🇱 176.65.139.181

🇦🇷 170.210.136.58