Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: İzmir

Region: Izmir

Country: Turkey

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
85.105.138.213 attack
Unauthorized connection attempt detected from IP address 85.105.138.213 to port 23 [J]
2020-02-23 19:08:01
85.105.138.34 attackspam
Honeypot attack, port: 445, PTR: 85.105.138.34.static.ttnet.com.tr.
2020-02-08 00:57:42
85.105.138.224 attackspam
unauthorized connection attempt
2020-01-19 14:51:27
85.105.138.34 attack
unauthorized connection attempt
2020-01-12 20:51:02
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 85.105.138.70
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 52259
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;85.105.138.70.			IN	A

;; AUTHORITY SECTION:
.			29	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025022600 1800 900 604800 86400

;; Query time: 12 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 26 14:03:58 CST 2025
;; MSG SIZE  rcvd: 106
Host info
70.138.105.85.in-addr.arpa domain name pointer 85.105.138.70.static.ttnet.com.tr.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
70.138.105.85.in-addr.arpa	name = 85.105.138.70.static.ttnet.com.tr.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
167.71.179.209 attackbotsspam
" "
2019-08-15 23:06:40
186.139.225.186 attackspambots
Automatic report - Port Scan Attack
2019-08-15 22:21:52
128.199.194.9 attack
Aug 15 04:37:24 sachi sshd\[10240\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.194.9  user=root
Aug 15 04:37:26 sachi sshd\[10240\]: Failed password for root from 128.199.194.9 port 17072 ssh2
Aug 15 04:42:55 sachi sshd\[10809\]: Invalid user blower from 128.199.194.9
Aug 15 04:42:55 sachi sshd\[10809\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.194.9
Aug 15 04:42:57 sachi sshd\[10809\]: Failed password for invalid user blower from 128.199.194.9 port 12959 ssh2
2019-08-15 22:48:11
152.136.207.121 attackbotsspam
2019-08-15T09:58:39.472054abusebot-7.cloudsearch.cf sshd\[13520\]: Invalid user wuhao from 152.136.207.121 port 51394
2019-08-15 22:43:55
142.93.203.108 attackbots
Aug 15 17:35:52 areeb-Workstation sshd\[5879\]: Invalid user raluca from 142.93.203.108
Aug 15 17:35:52 areeb-Workstation sshd\[5879\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.203.108
Aug 15 17:35:55 areeb-Workstation sshd\[5879\]: Failed password for invalid user raluca from 142.93.203.108 port 33366 ssh2
...
2019-08-15 22:37:37
82.79.251.51 attackbotsspam
Automatic report - Port Scan Attack
2019-08-15 22:34:19
54.37.157.229 attackbotsspam
Reported by AbuseIPDB proxy server.
2019-08-15 22:07:58
167.114.47.81 attackspambots
2019-08-15T13:34:09.392031abusebot-3.cloudsearch.cf sshd\[7265\]: Invalid user eugene from 167.114.47.81 port 55447
2019-08-15 23:19:47
40.86.177.139 attackspambots
Aug 15 04:23:30 aiointranet sshd\[25535\]: Invalid user visitor from 40.86.177.139
Aug 15 04:23:30 aiointranet sshd\[25535\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.86.177.139
Aug 15 04:23:32 aiointranet sshd\[25535\]: Failed password for invalid user visitor from 40.86.177.139 port 13440 ssh2
Aug 15 04:28:44 aiointranet sshd\[26028\]: Invalid user iitkgp from 40.86.177.139
Aug 15 04:28:44 aiointranet sshd\[26028\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.86.177.139
2019-08-15 22:42:17
192.126.162.235 attackbotsspam
192.126.162.235 - - [15/Aug/2019:04:52:19 -0400] "GET /?page=products&action=../../../../../etc/passwd&linkID=15892 HTTP/1.1" 200 16855 "https://www.newportbrassfaucets.com/?page=products&action=../../../../../etc/passwd&linkID=15892" "Mozilla/5.0 (Windows NT 10.0; WOW64; Rv:50.0) Gecko/20100101 Firefox/50.0"
...
2019-08-15 22:59:52
150.223.2.39 attackspambots
Aug 15 13:50:51 MK-Soft-VM6 sshd\[20865\]: Invalid user ricarda from 150.223.2.39 port 58301
Aug 15 13:50:51 MK-Soft-VM6 sshd\[20865\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.223.2.39
Aug 15 13:50:53 MK-Soft-VM6 sshd\[20865\]: Failed password for invalid user ricarda from 150.223.2.39 port 58301 ssh2
...
2019-08-15 23:09:50
106.12.103.98 attack
Aug 15 15:29:50 pornomens sshd\[4014\]: Invalid user wen from 106.12.103.98 port 38374
Aug 15 15:29:50 pornomens sshd\[4014\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.103.98
Aug 15 15:29:53 pornomens sshd\[4014\]: Failed password for invalid user wen from 106.12.103.98 port 38374 ssh2
...
2019-08-15 22:23:52
77.1.14.243 attackbotsspam
SSH-bruteforce attempts
2019-08-15 23:01:47
77.247.110.216 attack
Portscan or hack attempt detected by psad/fwsnort
2019-08-15 23:17:51
167.86.119.191 attack
Splunk® : port scan detected:
Aug 15 09:11:23 testbed kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=82:c6:52:d1:6e:53:c0:42:d0:39:2c:30:08:00 SRC=167.86.119.191 DST=104.248.11.191 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=8878 PROTO=TCP SPT=32767 DPT=8545 WINDOW=1024 RES=0x00 SYN URGP=0
2019-08-15 22:12:52

Recently Reported IPs

168.151.202.103 241.143.163.5 198.148.33.159 122.252.239.250
198.112.137.34 51.105.66.61 157.142.141.213 27.164.255.167
181.14.39.85 108.236.111.214 152.19.218.125 69.59.47.32
12.235.193.116 229.34.194.62 47.65.68.244 223.195.247.211
210.144.2.220 198.247.160.195 150.6.23.107 128.124.90.68