85.99.104.249 - IPInfo

Basic Info

City: Istanbul

Region: Istanbul

Country: Turkey

Internet Service Provider: Turk Telekomunikasyon Anonim Sirketi

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	Unauthorized connection attempt detected from IP address 85.99.104.249 to port 8080	2019-12-29 03:51:54

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 85.99.104.249
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 17337
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;85.99.104.249.			IN	A

;; AUTHORITY SECTION:
.			326	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019122800 1800 900 604800 86400

;; Query time: 109 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Dec 29 03:51:51 CST 2019
;; MSG SIZE  rcvd: 117

Host info

249.104.99.85.in-addr.arpa domain name pointer 85.99.104.249.static.ttnet.com.tr.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
249.104.99.85.in-addr.arpa	name = 85.99.104.249.static.ttnet.com.tr.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
123.16.229.105	attackspam	[SMTP/25/465/587 Probe] in SpamCop:"listed" in sorbs:"listed [spam]" in Unsubscore:"listed" *(06301539)	2019-07-01 06:47:43
206.189.72.217	attack	Jun 30 22:53:56 MK-Soft-VM5 sshd\[27527\]: Invalid user siverko from 206.189.72.217 port 35282 Jun 30 22:53:56 MK-Soft-VM5 sshd\[27527\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.72.217 Jun 30 22:53:58 MK-Soft-VM5 sshd\[27527\]: Failed password for invalid user siverko from 206.189.72.217 port 35282 ssh2 ...	2019-07-01 07:00:00
202.55.180.203	attack	[connect count:4 time(s)][SMTP/25/465/587 Probe] in blocklist.de:"listed [mail]" in projecthoneypot:"listed" [Suspicious] in sorbs:"listed [spam]" in Unsubscore:"listed" *(06301539)	2019-07-01 06:32:36
209.242.218.158	attackspam	1,19-05/05 concatform PostRequest-Spammer scoring: Lusaka01	2019-07-01 07:12:03
201.150.88.203	attackbots	Brute force attack stopped by firewall	2019-07-01 07:05:03
177.92.245.161	attackbotsspam	SASL PLAIN auth failed: ruser=...	2019-07-01 06:42:21
113.160.198.90	attackspambots	@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-06-30 22:34:10,933 INFO [amun_request_handler] PortScan Detected on Port: 445 (113.160.198.90)	2019-07-01 07:13:01
168.195.46.113	attackspambots	Brute force attack stopped by firewall	2019-07-01 07:16:28
113.141.70.204	attack	\[2019-06-30 18:53:52\] NOTICE\[5148\] chan_sip.c: Registration from '"543" \' failed for '113.141.70.204:5095' - Wrong password \[2019-06-30 18:53:52\] SECURITY\[5156\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-06-30T18:53:52.163-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="543",SessionID="0x7f13a848e258",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/113.141.70.204/5095",Challenge="00df1626",ReceivedChallenge="00df1626",ReceivedHash="c00f1b009ff828120f5c8323286085b1" \[2019-06-30 18:53:52\] NOTICE\[5148\] chan_sip.c: Registration from '"543" \' failed for '113.141.70.204:5095' - Wrong password \[2019-06-30 18:53:52\] SECURITY\[5156\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-06-30T18:53:52.421-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="543",SessionID="0x7f13a848f738",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/1	2019-07-01 07:09:55
182.52.224.33	attackbotsspam	Invalid user test from 182.52.224.33 port 54502	2019-07-01 06:52:49
152.136.72.17	attackspam	Jun 30 17:53:46 db sshd\[7852\]: Invalid user jzapata from 152.136.72.17 Jun 30 17:53:46 db sshd\[7852\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.72.17 Jun 30 17:53:49 db sshd\[7852\]: Failed password for invalid user jzapata from 152.136.72.17 port 49664 ssh2 Jun 30 17:58:03 db sshd\[7938\]: Invalid user tomberli from 152.136.72.17 Jun 30 17:58:03 db sshd\[7938\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.72.17 ...	2019-07-01 06:40:28
115.79.222.197	attack	[connect count:4 time(s)][SMTP/25/465/587 Probe] in SpamCop:"listed" in Unsubscore:"listed" *(06301539)	2019-07-01 06:44:40
82.154.186.108	attack	@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-06-30 22:35:25,912 INFO [amun_request_handler] PortScan Detected on Port: 445 (82.154.186.108)	2019-07-01 07:04:34
177.74.182.63	attackbots	Brute force attack stopped by firewall	2019-07-01 06:58:48
177.75.77.190	attackbotsspam	Many RDP login attempts detected by IDS script	2019-07-01 07:04:05

Recently Reported IPs

32.128.202.207	60.2.226.180	195.224.158.98	134.47.14.237
54.219.142.15	54.193.74.74	187.11.196.35	177.123.126.253
54.187.98.174	189.14.244.108	54.153.43.31	52.53.251.54
49.173.120.14	163.238.233.146	97.57.149.250	175.170.91.50
51.37.166.146	60.76.178.199	118.251.4.214	46.24.185.114