JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

94.243.12.39

Activity Trending Down

Abuse Confidence Score

25% Elevated

46 reports

24 reporters · latest 2 weeks ago

ISP: MTS PJSC
Usage Type: Fixed Line ISP
ASN: AS8359
Domain Name: mts.ru
Country: 🇷🇺 Russian Federation
City: Tyumen, Tyumen Oblast

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

46 from 24 distinct reporters

First reported

November 26th 2025

Most recent report

2 weeks ago

Last 60 days

Top reporter locations 🇸🇬 Singapore 3 🇺🇸 United States of America 2 🇦🇺 Australia 1

Most common categories Brute-Force 5 IoT Targeted 4 Port Scan 3 Hacking 2 DDoS Attack 1

Old reports The most recent abuse report for this IP address is from 2 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-10-26 22:48:54 UTC · (2 weeks ago)	MikroTik Enterprise Honeypot	Port Scan
🇫🇮 mikkopal88	2026-10-21 03:15:26 UTC · (3 weeks ago)	TCP SYN port scan to Telnet 23-2323	Port Scan IoT Targeted
🇦🇺 FEWA	2026-10-21 03:08:45 UTC · (3 weeks ago)	Fail2Ban Ban Triggered	Hacking Brute-Force
🇸🇬 ksi_digital	2026-10-21 00:03:00 UTC · (3 weeks ago)	Cowrie honeypot (telnet/23), 2026-10-21 00:03 UTC: 10 successful login(s) (user: CUAdmin,admin,mother), then 103 command(s), e.g.: config terminal ;; >/var/run/.x&&cd /var/run;>/mnt/.x&&cd /mnt;>/usr/.x&&cd /usr;>/dev/.x&&cd /dev;>/dev/shm/.x&&cd /de ... show more Cowrie honeypot (telnet/23), 2026-10-21 00:03 UTC: 10 successful login(s) (user: CUAdmin,admin,mother), then 103 command(s), e.g.: config terminal ;; >/var/run/.x&&cd /var/run;>/mnt/.x&&cd /mnt;>/usr/.x&&cd /usr;>/dev/.x&&cd /dev;>/dev/shm/.x&&cd /dev/shm;>/tm ;; /bin/busybox wget;/bin/busybox echo -ne '\x55\x5a\x56\x49\x4d\x44'. Attempted payload fetch: http://90.224.208.190:36646/i. Automated bot behaviour; payloads (if any) quarantined, never executed. show less	Brute-Force IoT Targeted
🇸🇬 ksi_digital	2026-10-20 00:11:00 UTC · (3 weeks ago)	Cowrie honeypot (telnet/23), 2026-10-20 00:11 UTC: 5 successful login(s) (user: !!Huawei,root), then 51 command(s), e.g.: config terminal ;; >/var/run/.x&&cd /var/run;>/mnt/.x&&cd /mnt;>/usr/.x&&cd /usr;>/dev/.x&&cd /dev;>/dev/shm/.x&&cd /dev/shm;>/t ... show more Cowrie honeypot (telnet/23), 2026-10-20 00:11 UTC: 5 successful login(s) (user: !!Huawei,root), then 51 command(s), e.g.: config terminal ;; >/var/run/.x&&cd /var/run;>/mnt/.x&&cd /mnt;>/usr/.x&&cd /usr;>/dev/.x&&cd /dev;>/dev/shm/.x&&cd /dev/shm;>/tm ;; /bin/busybox wget;/bin/busybox echo -ne '\x55\x5a\x56\x49\x4d\x44'. Attempted payload fetch: http://90.224.208.190:36646/i. Automated bot behaviour; payloads (if any) quarantined, never executed. show less	Brute-Force IoT Targeted
🇺🇸 xmission.com	2026-10-19 18:53:30 UTC · (3 weeks ago)	Blocked by UFW (TCP on 23) Source port: 2439 TTL: 45 Packet length: 40 TOS: 0x00 This report (for 94.243.12.39) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan Hacking Brute-Force
🇸🇬 ksi_digital	2026-10-19 17:08:00 UTC · (3 weeks ago)	Cowrie honeypot (telnet/23), 2026-10-19 17:08 UTC: 9 successful login(s) (user: 8ehomeasb,admin,root), then 92 command(s), e.g.: config terminal ;; >/var/run/.x&&cd /var/run;>/mnt/.x&&cd /mnt;>/usr/.x&&cd /usr;>/dev/.x&&cd /dev;>/dev/shm/.x&&cd /dev/ ... show more Cowrie honeypot (telnet/23), 2026-10-19 17:08 UTC: 9 successful login(s) (user: 8ehomeasb,admin,root), then 92 command(s), e.g.: config terminal ;; >/var/run/.x&&cd /var/run;>/mnt/.x&&cd /mnt;>/usr/.x&&cd /usr;>/dev/.x&&cd /dev;>/dev/shm/.x&&cd /dev/shm;>/tm ;; /bin/busybox wget;/bin/busybox echo -ne '\x55\x5a\x56\x49\x4d\x44'. Attempted payload fetch: http://90.224.208.190:36646/i. Automated bot behaviour; payloads (if any) quarantined, never executed. show less	Brute-Force IoT Targeted
🇺🇸 kosada.com	2026-09-29 03:53:47 UTC · (1 month ago)	Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B0%5D=46&topics%5B1%5D=40&topics%5B2%5D=68&topics%5B3%5D=42 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 ... show more Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B0%5D=46&topics%5B1%5D=40&topics%5B2%5D=68&topics%5B3%5D=42 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36") show less	DDoS Attack Bad Web Bot
🇩🇪 RazorLabs.dev	2026-09-12 01:13:21 UTC · (2 months ago)	Automated report from fail2ban: unsolicited TCP connection attempt to port 23/2323 (telnet) on a host running no telnet service, dropped by host firewall.	Port Scan Brute-Force IoT Targeted
🇧🇾 stroytrest	2026-09-09 15:02:03 UTC · (2 months ago)	2026-09-09T18:02:03.150352+03:00 gate kernel: [727298.492577] nftables: JAIL-TELNET IN=wan OUT= MAC= SRC=94.243.12.39 DST=xxx.xxx.xxx.xxx LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=58385 PROTO=TCP SPT=3013 DPT=23 WINDOW=26935 RES=0x00 SYN URGP=0 ...	Port Scan
Anonymous	2026-09-09 09:30:22 UTC · (2 months ago)	denied Telnet access attempt. destination port 23.	Port Scan Brute-Force
Anonymous	2026-09-09 01:52:07 UTC · (2 months ago)	denied traffic to a honeypot network. destination port 23.	Port Scan Hacking
🇰🇷 windykc	2026-09-08 00:30:11 UTC · (2 months ago)	Honeypot first-observation (no prior AbuseIPDB reports). Telnet: 22 sessions, 220 commands. Geo/ISP: RU/MTS PJSC. Last seen: 2026-09-07T21:40:10Z.	Brute-Force IoT Targeted
🇹🇷 rtbh.com.tr	2026-03-23 16:12:12 UTC · (7 months ago)	list.rtbh.com.tr report: tcp/23	Brute-Force
🇦🇺 aglenday	2026-03-22 05:09:38 UTC · (7 months ago)	Honeypot hit: Unauthorized connection attempt detected on 23/TELNET	Hacking Port Scan

Showing 1 to 15 of 46 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 45.148.10.152

🇩🇪 4.182.219.135

🇵🇱 194.116.155.2

🇧🇷 186.219.234.138

🇮🇳 103.248.120.6

🇮🇩 103.3.222.235

🇩🇪 84.145.0.246

🇺🇸 66.234.159.194

🇧🇪 35.210.122.180

🇺🇸 23.234.110.77

🇺🇸 23.234.109.251

🇺🇸 23.234.107.43

🇺🇸 23.234.103.196

🇺🇸 23.159.216.68

🇸🇪 16.171.230.239

🇺🇸 3.101.130.250

🇰🇷 222.118.59.16

🇧🇷 187.119.226.127

🇸🇪 171.25.193.37

🇺🇸 155.2.191.26