176.121.1.239
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- FOP Saiv Igor Stepanovich
- Usage Type
- Fixed Line ISP
- ASN
- AS209907
- Hostname(s)
- 239.1.121.176.in-addr.arpa
- Domain Name
- gipernet.com.ua
- Country
- 🇺🇦 Ukraine
- City
- Solotvyn, Ivano-Frankivsk
Abuse Reports
Total reports
22 from
18 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇩🇪 nyuuzyou |
Client failed challenge verification, marked as suspicious. HTTP request received over TCP on application ports 80/443. Observed 2026-11-05T10:36:23Z.
|
Bad Web Bot | |
| 🇨🇿 lp |
Unauthorized VPN login attempts: 1 attempts were recorded from 176.121.1.239
2026-11-04T11:59:29+0100 vpn Access-Reject station: 176.121.1.239
|
Brute-Force Web App Attack | |
| 🇪🇪 Tsumugi Kotobuki |
Port Scan on Honeypot | Ports: 23/Telnet | Proto: TCP(1) | Flags: all SYN | TTL: 49 | Len: 60B | Win: 65535(1) | rDNS: 239.1.121.176.in-addr.arpa | F2B/ufw-honeypot@2026-09-26T06:36:45Z
|
Port Scan Hacking | |
| 🇫🇷 honeypot222 |
|
Brute-Force Bad Web Bot IoT Targeted | |
| 🇺🇸 MPL |
tcp/23 (4 or more attempts)
|
Port Scan | |
| 🇳🇱 EGP Abuse Dept |
Unauthorized connection to Telnet port 23
|
Port Scan Hacking | |
| Anonymous |
denied Telnet access attempt. destination port 23.
|
Port Scan Brute-Force | |
| 🇵🇱 DataDream Sentinel |
|
Brute-Force SSH | |
| 🇺🇸 MPL |
tcp/23 (2 or more attempts)
|
Port Scan | |
| Anonymous |
denied SSH access attempt. destination port 22.
|
Port Scan Brute-Force SSH | |
| 🇨🇦 polycoda |
AutoBlock: 📡 Port 22 Scan (Non Decay-Based)
|
Port Scan SSH | |
| 🇩🇪 bescared |
F2B - Malicious activity detected. Unauthorized connection attempt: Telnet. -8ff06ede-
|
Port Scan | |
| 🇺🇸 kosada.com |
Web bot: denial-of-service flood
|
DDoS Attack Bad Web Bot | |
| 🇺🇸 SX Communications |
HTTP application-layer DoS / botnet traffic from 176.121.1.239: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host.
|
DDoS Attack Bad Web Bot Exploited Host | |
| 🇩🇪 LRob |
|
DDoS Attack Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown