134.249.28.253

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
79% Critical
41 reports
28 reporters · latest 11 hours ago
ISP
Kyivstar GSM
Usage Type
Fixed Line ISP
ASN
AS15895
Hostname(s)
134-249-28-253.broadband.kyivstar.net
Domain Name
kyivstar.ua
Country
🇺🇦 Ukraine
City
Bila Tserkva, Kyiv Oblast
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
41 from 28 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 15 🇩🇪 Germany 8 🇬🇧 United Kingdom of Great Britain and Northern Ireland 3
Most common categories Port Scan 25 SSH 19 Hacking 7 Brute-Force 6 Bad Web Bot 4
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇵🇱 bart@
Automated scan detection against redacted protected targets. Hits=1; port 22 proto 6 detection dark_ip
Port Scan
🇺🇸 LockBlock
2026-11-08 09:30:06: Port scan detected from 134.249.28.253 on port 22 of racknerd-e7e1a9
Port Scan SSH
🇦🇹 urnilxfgbez
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
Port Scan
🇩🇪 bescared
F2B - Malicious activity detected. Unauthorized connection attempt: SSH. -c23856ef-
Port Scan SSH
🇺🇸 HamSammich
Automated sensor: 1 SSH connection/probe attempts over the last 24h (latest 2026-11-06T04:24Z).
Port Scan SSH
🇬🇧 BananaLlama
Unsolicited SSH (TCP/22) connection attempts blocked at edge firewall; no public SSH service is exposed.
Port Scan SSH
🇦🇹 urnilxfgbez
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
Port Scan
🇫🇷 uthul
T-Pot honeypot: 9 hits on ports [22] (automated)
Port Scan Brute-Force SSH
🇫🇷 uthul
T-Pot honeypot: 9 hits on ports [22] (automated)
Port Scan Brute-Force SSH
🇺🇸 avgsmoe
Connection to a honeypot port. Automated report (firemon).
Port Scan
🇺🇸 RAP
2026-10-28 03:01:02 UTC Unauthorized activity to TCP port 22. SSH
SSH
🇩🇪 Tsumugi Kotobuki
Port Scan on Honeypot | Ports: 22/SSH | Proto: TCP(1) | Flags: all SYN | TTL: 53 | Len: 60B | Win: 65535(1) | rDNS: 134-249-28-253.broadband.kyivstar.net | F2B/ufw-honeypot@2026-10-25T01:43:00Z
Port Scan Hacking
🇫🇮 mikkopal88
TCP SYN port scan to SSH 22
Port Scan SSH
🇷🇸 Scan
MultiHost/MultiPort Probe, Scan, Hack -
Port Scan Hacking
🇺🇸 RAP
2026-10-18 21:33:52 UTC Unauthorized activity to TCP port 22. SSH
SSH

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇭🇰 194.187.178.31
🇩🇪 193.124.20.250
🇺🇸 172.252.86.35
🇺🇸 172.252.55.164
🇺🇸 162.216.150.230
🇭🇰 152.32.192.13
🇭🇰 118.193.45.134
🇨🇳 115.190.60.76
🇩🇪 69.5.169.139
🇵🇰 39.36.78.119
🇬🇧 31.14.254.125
🇭🇰 202.146.223.164
🇺🇸 172.252.180.69
🇺🇸 172.252.169.58
🇺🇸 172.252.165.205
🇨🇳 119.249.100.46
🇺🇸 100.29.192.104
🇳🇱 85.11.167.212
🇳🇱 77.239.124.246
🇨🇳 36.33.167.165
feedback