79.126.120.53
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- PJSC Rostelecom
- Usage Type
- Fixed Line ISP
- ASN
- AS12389
- Domain Name
- rt.ru
- Country
- 🇷🇺 Russian Federation
- City
- Novotroitsk, Orenburg Oblast
Abuse Reports
Total reports
17 from
12 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇩🇪 D3vNu11 |
Level: (LOW): Reputation Unknown via Cowrie IOC Country: Russia 2x -> Target Country: Germany SSH
|
Brute-Force SSH | |
| 🇩🇪 sojan |
UFW: Portscan on PROTO=TCP. Targeted ports: DPT=23 DPT=22 DPT=23
|
Port Scan | |
| 🇸🇪 Peter Gabaldon |
Fail2Ban Triggered By 79.126.120.53
|
Port Scan SSH | |
| 🇦🇹 urnilxfgbez |
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
|
Port Scan | |
| 🇺🇸 RAP |
2026-11-04 20:20:55 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | |
| Anonymous |
denied SSH access attempt. destination port 22.
|
Port Scan Brute-Force SSH | |
| 🇺🇸 RAP |
2026-11-01 15:55:20 UTC Unauthorized activity to TCP port 22. SSH
|
SSH | |
| 🇺🇸 johuang92 |
Cowrie SSH honeypot: session fc8fef680f90
|
SSH | |
| 🇺🇸 johuang92 |
Cowrie SSH honeypot: session 45f5eaf219f6
|
SSH | |
| 🇹🇷 ugurcoskun |
Auto-blocked by Seczar SecureOps — High-Risk Port Probe (admin-managed entries) — SSH (5 events in 5min) at 2026-08-21 09:53
|
Web App Attack | |
| Anonymous |
denied traffic to a honeypot network. destination port 23.
|
Port Scan Hacking | |
| 🇨🇭 flaus |
$f2bV_matches
|
Brute-Force SSH | |
| 🇫🇷 security.rdmc.fr |
Port Scan Attack proto:TCP src:14673 dst:23
|
Port Scan | |
| Anonymous |
denied Telnet access attempt. destination port 23.
|
Port Scan Brute-Force | |
| Anonymous |
denied SSH access attempt. destination port 22.
|
Port Scan Brute-Force SSH |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown