109.254.71.213
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- ENERGO-TELECOM LLC
- Usage Type
- Fixed Line ISP
- ASN
- AS20590
- Domain Name
- energotele.net
- Country
- 🇺🇦 Ukraine
- City
- Donetsk, Donetsk
Abuse Reports
Total reports
26 from
21 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇸🇪 warriors |
Telnet honeypot observed a Mirai-style BusyBox shell-validation probe against TCP/23. sessions=2. username=admin. Commands: sh, shell, enable, system, ping, busybox hisilicon, busybox cat, cat.
|
Hacking Brute-Force Exploited Host IoT Targeted | |
| 🇸🇪 warriors |
Telnet honeypot observed a Mirai-style BusyBox shell-validation probe against TCP/23. sessions=3. username=admin. Commands: sh, shell, enable, system, ping, busybox hisilicon, busybox cat, cat.
|
Hacking Brute-Force Exploited Host IoT Targeted | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 23)
Source port: 41811
TTL: 50
Packet length: 40
TOS: 0x00
This report (for 109.254.71.213) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan Hacking Brute-Force | |
| 🇳🇱 Tsumugi Kotobuki |
Telnet Brute-Force | Events: 2 | Ports: 23/Telnet | Auth: password(2x) | F2B/telnet-honeypot-bruteforce@2026-10-26T13:30:54Z
|
Brute-Force | |
| 🇺🇸 mibbsdevs |
CoffeePot: Connection attempt detected on closed service bait ports (21/22/23/3306/3389/5432).
|
Port Scan | |
| 🇺🇸 mutebot.net |
SRC=109.254.71.213, PROTO=TCP, SPT=26389, DPT=23
|
Port Scan | |
| Anonymous |
unsolicited connect TCP dport 23 (sport 37029)
|
Hacking | |
| 🇩🇪 guldkage |
Unauthorized connection attempt detected from IP address 109.254.71.213 to port 23 (ger-03) [t]
|
Brute-Force Exploited Host | |
| 🇫🇷 uthul |
T-Pot honeypot: 2 hits on ports [23] (automated)
|
Port Scan Brute-Force SSH | |
| 🇳🇱 VMHeaven.io |
Blocked by UFW [23/tcp]
Source port: 1291
TTL: 56
Packet length: 40
|
Port Scan Hacking Brute-Force | |
| Anonymous |
2026-10-23 12:58:46 warning[7878585]: host unknown[109.254.71.213]: unauthorized telnet access attempted: tcp/23
|
Port Scan Brute-Force | |
| 🇺🇸 RAP |
2026-10-23 11:54:07 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | |
| 🇳🇱 Tsumugi Kotobuki |
Port Scan on Honeypot | Ports: 23/Telnet | Proto: TCP(1) | Flags: all SYN | TTL: 57 | Len: 44B | Win: 49383(1) | F2B/ufw-honeypot@2026-10-23T11:11:32Z
|
Port Scan Hacking | |
| 🇩🇪 FDC |
Malicious activity from 109.254.71.213 detected by FDC honeypots. Categories: 14,15,22. 6 events in last 24h.
|
Port Scan Hacking SSH | |
| 🇺🇸 OceanTreasure |
tcp/23; Legacy Telnet remote access probe @ 2026-10-23T09:40:51Z
|
IoT Targeted Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown