85.95.190.139

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
42% Elevated
13 reports
12 reporters · latest 2 weeks ago
ISP
Branch in Mordovian Republic
Usage Type
Fixed Line ISP
ASN
AS12389
Hostname(s)
85-95-190-139.saransk.ru
Domain Name
moris.ru
Country
🇷🇺 Russian Federation
City
Saransk, Mordoviya Republic
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
13 from 12 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇫🇷 France 3 🇺🇸 United States of America 3 🇩🇪 Germany 2
Most common categories Port Scan 6 Brute-Force 6 Hacking 3 SSH 3 IoT Targeted 2
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇮🇹 CoreTech srl
[DC: IP:151.1.252.27] ntopng alert: blacklisted_client_contact,ndpi_unsafe_protocol
Hacking
🇫🇷 security.rdmc.fr
Port Scan Attack proto:TCP src:19824 dst:23
Port Scan
🇸🇪 Tsumugi Kotobuki
Port Scan on Honeypot | Ports: 23/Telnet | Proto: TCP(1) | Flags: all SYN | TTL: 52 | Len: 60B | Win: 65535(1) | rDNS: 85-95-190-139.saransk.ru | F2B/ufw-honeypot@2026-10-26T14:03:48Z
Port Scan Hacking
🇺🇸 knock
Knock-Knock honeypot brute-force: Telnet (6 total hits)
Brute-Force
🇩🇪 FDC
Malicious activity from 85.95.190.139 detected by FDC honeypots. Categories: 14,15,18,22. 14 events in last 24h.
Port Scan Hacking Brute-Force SSH
🇫🇷 security.rdmc.fr
Port Scan Attack proto:TCP src:15944 dst:23
Port Scan
🇺🇸 Phil Schuyler
Telnet login followed by shell commands. Captured by a Cowrie honeypot.
Brute-Force IoT Targeted
🇳🇱 soverin
Network scan on port 23
Email Spam
🇫🇷 jonahtebaa
SSH tarpit capture
Port Scan Brute-Force SSH
🇩🇪 Admins@FBN
FW-PortScan: Traffic Blocked srcport=22514 dstport=23
Port Scan
🇳🇱 PixelSlimepup
Cowrie Honeypot: Unauthorised SSH/Telnet login attempt with user "admin" at 2026-10-20T23:49:24Z
Brute-Force SSH
🇺🇸 drewf.ink
[19:00] Attempted telnet login with credentials admin:ve************23
Brute-Force IoT Targeted
🇺🇸 kosada.com
Web bot: DDoS
DDoS Attack Bad Web Bot

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇱 186.175.188.156
🇺🇸 162.216.149.181
🇭🇰 154.92.2.59
🇺🇸 144.126.133.155
🇸🇱 129.224.205.27
🇮🇩 103.97.141.42
🇧🇩 103.91.129.0
🇩🇪 94.26.41.42
🇺🇸 134.209.219.17
🇩🇪 109.160.32.106
🇫🇷 84.17.60.236
🇧🇬 78.128.113.46
🇨🇳 59.50.185.150
🇦🇷 190.50.173.139
🇫🇷 169.40.142.132
🇯🇵 140.238.60.130
feedback