94.243.11.103

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
46% Elevated
41 reports
24 reporters · latest 2 weeks ago
ISP
MTS PJSC
Usage Type
Fixed Line ISP
ASN
AS8359
Domain Name
mts.ru
Country
🇷🇺 Russian Federation
City
Tyumen, Tyumen Oblast
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
41 from 24 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 5 🇺🇸 United States of America 2 🇦🇹 Austria 1
Most common categories Port Scan 8 Hacking 3 Brute-Force 2 Exploited Host 1 IoT Targeted 1
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇩🇪 xserverx.ru
[UFW SCAN!!!!] SRC=94.243.11.103 LEN=40 TOS=0x00 PREC=0x00 TTL=46 PROTO=TCP SPT=1427 DPT=23 WINDOW=39200 RES=0x00 SYN URGP=0 ...
Port Scan
🇦🇹 urnilxfgbez
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
Port Scan
🇧🇷 ICS Labs
ICS Labs threat intelligence (ICS Feeds): Hacking. Last observed 2026-10-29 UTC.
Hacking
🇫🇷 security.rdmc.fr
Port Scan Attack proto:TCP src:1932 dst:23
Port Scan
🇹🇷 Domainhizmetleri.com
Source: DH Hunter (Honeypot) | Reason: Telnet Login Attempt (23/tcp)
Port Scan SSH
🇺🇸 Bankbook8585
T-Pot honeypot | Dionaea honeypot: httpd
Port Scan Hacking
Anonymous
denied Telnet access attempt. destination port 23.
Port Scan Brute-Force
🇩🇪 Admins@Storch
IPS:drop <match> dstport=23
Brute-Force Exploited Host
🇺🇸 sefinek.net
Blocked by UFW on NY01 [23/tcp] | SPT: 8121 | TTL: 43 | LEN: 40 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan IoT Targeted
🇩🇪 LRob
Calendar filter flood (L7 DDoS) | host: www.escrimeaura.fr | path: /calendrier-2/action~agenda/time_limit~1763247600/cat_ids~549,640/tag_ids~728,552,475,569,540,553,476/request_format~json/ | src_port: 3397
DDoS Attack Web App Attack
Anonymous
denied traffic to a honeypot network. destination port 23.
Port Scan Hacking
🇷🇺 Agrohim
Gate Inet blocked for categories:
DDoS Attack Ping of Death Port Scan Hacking Brute-Force
🇵🇱 nfsec.pl
Detected: TCP scan on port: 23 with flags: SYN
Port Scan
🇬🇧 PeravixGroup
Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: MEDIUM. Aaran.cloud
IoT Targeted Brute-Force
🇨🇳 ThreatBook.io
ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/94.243.11.103
SSH

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇵🇰 182.190.223.2
🇳🇱 138.226.239.25
🇺🇿 89.236.244.245
🇳🇱 89.21.67.143
🇳🇱 77.239.124.252
🇺🇸 205.210.31.41
🇺🇦 176.105.201.62
🇺🇸 165.227.195.71
🇫🇷 91.231.89.255
🇺🇸 69.242.208.180
🇬🇧 5.226.140.87
🇷🇴 193.46.255.86
🇫🇮 147.185.133.68
🇸🇬 119.28.113.219
🇺🇸 72.215.33.23
🇺🇸 67.102.176.252
🇺🇸 20.65.170.227
🇺🇸 217.145.224.72
🇷🇴 80.94.95.115
🇫🇷 194.99.26.73
feedback