91.239.95.23
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- FOP Lukyanenko Aleksandr Ivanovich
- Usage Type
- Fixed Line ISP
- ASN
- AS58162
- Domain Name
- svessa.net.ua
- Country
- 🇺🇦 Ukraine
- City
- Yampil', Sumy
Abuse Reports
Total reports
126 from
80 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| Anonymous |
MikroTik Enterprise Honeypot
|
Port Scan | |
| 🇺🇸 genjikai666 |
Automated honeypot & gateway log: Coordinated port scan and brute-force targeting both SSH (22) and Honeypot sensors. Detected on honeypot/firewall sensors.
|
Port Scan Brute-Force SSH | |
| 🇦🇹 urnilxfgbez |
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
|
Port Scan | |
| 🇺🇸 rscott.us |
Brute force SSH login attempts.
|
Brute-Force SSH | |
| 🇺🇸 RAP |
2026-11-12 19:33:22 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | |
| 🇫🇷 security.rdmc.fr |
Activity from blacklisted IP
|
Hacking | |
| 🇫🇷 thecocasio |
PortSentry honeypot: unsolicited TCP connection to closed decoy port 23 (Telnet) on a host running no such service. Automated port-scan detection at 2026-11-12T05:17:00Z.
|
Port Scan | |
| 🇦🇹 urnilxfgbez |
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
|
Port Scan | |
| 🇬🇧 KTSTechnology |
Repeated connection attempts to firewalled ports, detected by our ISP firewall Interconnect WL
|
Port Scan | |
| 🇩🇪 Tsumugi Kotobuki |
Port Scan on Honeypot | Ports: 23/Telnet | Proto: TCP(1) | Flags: all SYN | TTL: 52 | Len: 60B | Win: 65535(1) | F2B/ufw-honeypot@2026-11-11T12:23:49Z
|
Port Scan Hacking | |
| 🇺🇸 benjensen |
SSH honeypot — automated credential stuffing and scanning detected by Cowrie honeypot
|
Brute-Force SSH | |
| 🇨🇦 Tanados |
Blocked by UFW [23/tcp]
Source port: 23500
TTL: 48
Packet length: 60
TOS: 0x00
This report was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan IoT Targeted | |
| 🇦🇹 urnilxfgbez |
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
|
Port Scan | |
| 🇳🇵 radheykrishna.com.np |
Nov 9 16:34:30 kernel: [3126597.047339] [UFW BLOCK] IN=ens160 OUT= SRC=91.239.95.23 LEN=60 TOS=0x00 PREC=0x00 TTL=50 ID=38210 DF PROTO=TCP SPT=65207 DPT=23 WINDOW=65535 RES=0x00 SYN URGP=0
...
|
Port Scan | |
| 🇦🇹 urnilxfgbez |
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown