94.243.11.27
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- MTS PJSC
- Usage Type
- Fixed Line ISP
- ASN
- AS8359
- Domain Name
- mts.ru
- Country
- 🇷🇺 Russian Federation
- City
- Tyumen, Tyumen Oblast
Abuse Reports
Total reports
18 from
13 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| Anonymous |
Port Scanner
|
Port Scan | |
| 🇳🇱 Tsumugi Kotobuki |
Port Scan on Honeypot | Ports: 80/HTTP | Proto: TCP(1) | Flags: all SYN | TTL: 53 | Len: 60B | Win: 5808(1) | rDNS: subscriber-94-243-11-27.mts-chita.ru | F2B/ufw-honeypot@2026-09-19T08:57:15Z
|
Port Scan Hacking | |
| Anonymous |
denied Telnet access attempt. destination port 23.
|
Port Scan Brute-Force | |
| 🇺🇸 IndigoRidge |
Knock-Knock TNET honeypot activity; time=2026-08-13 23:05:43; username=mother
|
Brute-Force | |
| 🇺🇸 RAP |
2026-08-13 18:18:24 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 23)
Source port: 5652
TTL: 51
Packet length: 40
TOS: 0x00
This report (for 94.243.11.27) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan Hacking Brute-Force | |
| 🇨🇭 pingusurmars |
Blocked by UFW on ampereone [2323/tcp]
Source port: 5652
TTL: 50
Packet length: 40
TOS: 0x00
This report was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇺🇸 MPL |
tcp/2323 (2 or more attempts)
|
Port Scan | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 23)
Source port: 4106
TTL: 49
Packet length: 40
TOS: 0x00
This report (for 94.243.11.27) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan Hacking Brute-Force | |
| 🇩🇪 Admins@FBN |
FW-PortScan: Traffic Blocked srcport=8582 dstport=23
|
Port Scan | |
| 🇺🇸 RAP |
2026-08-04 02:48:40 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | |
| Anonymous |
denied Telnet access attempt. destination port 23.
|
Port Scan Brute-Force | |
| 🇺🇸 LSPCCU |
TSEC Honeypot Network report. Threat score: 92/100. Categories: Hacking, Exploited Host. Honeypot: cowrie, ssh-telnet. Context: 94.243.11.27 classified as malware delivery infrastructure dropping payloads on compromised hosts (high confidence).
|
Hacking Exploited Host | |
| Anonymous |
Unauthorized connection attempt on Port 23
|
Port Scan Hacking Exploited Host | |
| 🇬🇧 PeravixGroup |
Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: MEDIUM. Aaran.cloud
|
IoT Targeted Brute-Force |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown