85.99.223.13 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Turkey

Internet Service Provider: Turk Telekomunikasyon Anonim Sirketi

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	Automatic report - Port Scan Attack	2020-01-04 15:53:55

Comments on same subnet:

IP	Type	Details	Datetime
85.99.223.152	attackspam	Automatic report - Port Scan Attack	2020-05-04 01:47:19
85.99.223.152	attack	Unauthorized connection attempt detected from IP address 85.99.223.152 to port 23	2020-05-03 03:52:36

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 85.99.223.13
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 37584
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;85.99.223.13.			IN	A

;; AUTHORITY SECTION:
.			443	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020010400 1800 900 604800 86400

;; Query time: 104 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Jan 04 15:53:49 CST 2020
;; MSG SIZE  rcvd: 116

Host info

13.223.99.85.in-addr.arpa domain name pointer 85.99.223.13.static.ttnet.com.tr.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
13.223.99.85.in-addr.arpa	name = 85.99.223.13.static.ttnet.com.tr.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
80.82.78.39	attackspambots	ET CINS Active Threat Intelligence Poor Reputation IP group 65 - port: 8089 proto: tcp cat: Misc Attackbytes: 60	2020-08-27 02:39:11
45.129.33.11	attackspam	ET DROP Dshield Block Listed Source group 1 - port: 36559 proto: tcp cat: Misc Attackbytes: 60	2020-08-27 02:44:29
92.118.160.49	attack	TCP (SYN) 92.118.160.49:50594 -> port 118, len 44	2020-08-27 02:36:21
212.129.32.152	attackbotsspam	fulda-media.de 212.129.32.152 [26/Aug/2020:20:05:00 +0200] "POST /wp-login.php HTTP/1.1" 200 6765 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" fulda-media.de 212.129.32.152 [26/Aug/2020:20:05:00 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4079 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-08-27 02:47:15
45.14.150.133	attackspam	Port Scan detected from 45.14.150.133 (RO/Romania/Bucure?ti/Bucharest/-). 4 hits in the last 180 seconds	2020-08-27 03:01:58
107.170.204.148	attack	TCP (SYN) 107.170.204.148:50847 -> port 11338, len 44	2020-08-27 02:33:43
129.204.181.118	attack	Aug 26 13:47:33 rush sshd[1398]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.181.118 Aug 26 13:47:35 rush sshd[1398]: Failed password for invalid user hunter from 129.204.181.118 port 52240 ssh2 Aug 26 13:53:09 rush sshd[1574]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.181.118 ...	2020-08-27 03:08:44
45.88.104.99	attackspam	ET CINS Active Threat Intelligence Poor Reputation IP group 25 - port: 8595 proto: tcp cat: Misc Attackbytes: 60	2020-08-27 02:44:59
106.12.209.81	attackbots	ET CINS Active Threat Intelligence Poor Reputation IP group 92 - port: 22700 proto: tcp cat: Misc Attackbytes: 60	2020-08-27 02:34:13
45.14.150.130	attackbots	Aug 26 17:40:09 l02a sshd[12069]: Invalid user dalila from 45.14.150.130 Aug 26 17:40:09 l02a sshd[12069]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.150.130 Aug 26 17:40:09 l02a sshd[12069]: Invalid user dalila from 45.14.150.130 Aug 26 17:40:11 l02a sshd[12069]: Failed password for invalid user dalila from 45.14.150.130 port 38692 ssh2	2020-08-27 02:45:27
104.248.80.221	attackbots	[N10.H2.VM2] Port Scanner Detected Blocked by UFW	2020-08-27 02:34:38
180.163.220.43	attackbotsspam	CF RAY ID: 5c8ce35c0f2104d4 IP Class: noRecord URI: /	2020-08-27 02:48:29
45.129.33.41	attackspambots	Port scan: Attack repeated for 24 hours	2020-08-27 02:43:32
45.129.33.50	attackspam	ET DROP Dshield Block Listed Source group 1 - port: 13469 proto: tcp cat: Misc Attackbytes: 60	2020-08-27 02:51:00
109.48.97.80	attackbotsspam	Aug 26 14:34:29 server postfix/smtpd[26653]: NOQUEUE: reject: RCPT from a109-48-97-80.cpe.netcabo.pt[109.48.97.80]: 554 5.7.1 Service unavailable; Client host [109.48.97.80] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/109.48.97.80; from= to= proto=ESMTP helo=	2020-08-27 03:09:31

Recently Reported IPs

182.230.155.104	200.52.88.171	189.26.61.197	163.72.3.30
175.45.16.86	118.69.66.174	43.164.130.151	94.30.1.188
113.176.82.140	153.179.98.71	96.165.92.207	223.29.61.183
58.212.108.146	175.45.16.53	1.56.217.177	59.93.80.16
58.205.129.55	36.65.112.219	103.133.109.143	69.56.234.33