JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 94.243.8.92

94.243.8.92 was found in our database!

This IP was reported 32 times. Confidence of Abuse is 62%: ?

62%

ISP	Mobile TeleSystems Tumen branch (b2b)
Usage Type	Fixed Line ISP
ASN	AS8359
Domain Name	mtu.ru
Country	🇷🇺 Russian Federation
City	Tyumen, Tyumen Oblast

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 94.243.8.92

Whois 94.243.8.92

IP Abuse Reports for 94.243.8.92:

This IP address has been reported a total of 32 times from 18 distinct sources. 94.243.8.92 was first reported on September 7th 2025, and the most recent report was 20 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Admins@FBN	2026-10-22 02:53:44 (20 hours ago)	FW-PortScan: Traffic Blocked srcport=3785 dstport=23	Port Scan
🇸🇪 warriors	2026-10-21 23:19:03 (1 day ago)	Telnet honeypot observed a Mirai/Gafgyt-style payload staging attempt against TCP/23. sessions=111. ... show more Telnet honeypot observed a Mirai/Gafgyt-style payload staging attempt against TCP/23. sessions=111. username=guest. Echo signature(s): SGIHGW, FQNSOLPV. Commands: start, enable, config, system, linuxshell, su, shell, sh, cd, busybox echo, busybox wget, rm, wget, curl, chmod, cp, cat, execute. show less	Hacking Brute-Force Exploited Host IoT Targeted
Anonymous	2026-10-17 14:28:45 (5 days ago)	MikroTik Enterprise Honeypot	Port Scan
🇫🇷 security.rdmc.fr	2026-10-12 08:18:31 (1 week ago)	Port Scan Attack proto:TCP src:6798 dst:23	Port Scan
🇺🇸 LotPhantom	2026-10-11 09:25:30 (1 week ago)	2026-10-11T09:25:26.533468+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1 ... show more 2026-10-11T09:25:26.533468+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:08:00 SRC=94.243.8.92 DST=157.230.217.55 LEN=60 TOS=0x00 PREC=0x00 TTL=50 ID=35489 DF PROTO=TCP SPT=4035 DPT=8080 WINDOW=5808 RES=0x00 SYN URGP=0 2026-10-11T09:25:29.531759+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:08:00 SRC=94.243.8.92 DST=157.230.217.55 LEN=60 TOS=0x00 PREC=0x00 TTL=50 ID=35490 DF PROTO=TCP SPT=4035 DPT=8080 WINDOW=5808 RES=0x00 SYN URGP=0 ... show less	Port Scan Hacking
Anonymous	2026-10-10 00:52:18 (1 week ago)	denied Telnet access attempt. destination port 23.	Port Scan Brute-Force
🇩🇪 xserverx.ru	2026-09-29 19:18:32 (3 weeks ago)	[UFW SCAN!!!!] SRC=94.243.8.92 LEN=40 TOS=0x00 PREC=0x00 TTL=46 PROTO=TCP SPT=4172 DPT=23 WINDOW=318 ... show more [UFW SCAN!!!!] SRC=94.243.8.92 LEN=40 TOS=0x00 PREC=0x00 TTL=46 PROTO=TCP SPT=4172 DPT=23 WINDOW=31801 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 HamSammich	2026-09-29 15:58:43 (3 weeks ago)	Automated sensor: 47613 telnet brute-force attempts over the last 24h (latest 2026-09-29T15:58Z). Us ... show more Automated sensor: 47613 telnet brute-force attempts over the last 24h (latest 2026-09-29T15:58Z). Usernames tried: root, admin, super, support. show less	Brute-Force IoT Targeted
🇺🇸 HamSammich	2026-09-28 14:00:19 (3 weeks ago)	Automated sensor: 52364 telnet brute-force attempts over the last 24h (latest 2026-09-28T14:00Z). Us ... show more Automated sensor: 52364 telnet brute-force attempts over the last 24h (latest 2026-09-28T14:00Z). Usernames tried: root, admin, super, guest. show less	Brute-Force IoT Targeted
🇺🇸 HamSammich	2026-09-27 13:54:53 (3 weeks ago)	Automated sensor: 48270 telnet brute-force attempts over the last 24h (latest 2026-09-27T13:54Z). Us ... show more Automated sensor: 48270 telnet brute-force attempts over the last 24h (latest 2026-09-27T13:54Z). Usernames tried: root, admin, super, support. show less	Brute-Force IoT Targeted
🇺🇸 xxkodedxx	2026-09-27 11:23:00 (3 weeks ago)	[Zorvexus edge-defense] Edge-block (probe URI / bad UA / hostile vhost) Trigger: 1× edge-block in 10 ... show more [Zorvexus edge-defense] Edge-block (probe URI / bad UA / hostile vhost) Trigger: 1× edge-block in 10m window. Origin: RU / AS8359 MTS PJSC Active: 11:22:03 UTC Volume: 1 HTTP req Probed: /GponForm/diag_Form?images/ Status mix: 444×1 Vhost fishing: 127.0.0.1 UA: "Hello, World" Auto-banned 30d. zorvexus-banner. show less	Bad Web Bot Web App Attack
🇺🇸 HamSammich	2026-09-26 12:58:03 (3 weeks ago)	Automated sensor: 36800 telnet brute-force attempts over the last 24h (latest 2026-09-26T12:58Z). Us ... show more Automated sensor: 36800 telnet brute-force attempts over the last 24h (latest 2026-09-26T12:58Z). Usernames tried: root, admin, super, support. show less	Brute-Force IoT Targeted
🇺🇸 HamSammich	2026-09-25 12:59:32 (3 weeks ago)	Automated sensor: 41375 telnet brute-force attempts over the last 24h (latest 2026-09-25T12:59Z). Us ... show more Automated sensor: 41375 telnet brute-force attempts over the last 24h (latest 2026-09-25T12:59Z). Usernames tried: root, admin, super, guest. show less	Brute-Force IoT Targeted
🇺🇸 RAP	2026-09-25 07:49:18 (3 weeks ago)	2026-09-25 07:49:18 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
Anonymous	2026-09-25 02:55:34 (3 weeks ago)	denied traffic to a honeypot network. destination port 8080.	Port Scan Hacking

Showing 1 to 15 of 32 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇩 192.42.85.90

🇨🇳 182.43.164.191

🇺🇸 45.130.83.122

🇮🇩 36.68.189.62

🇧🇪 34.52.229.253

🇬🇧 5.102.169.102

🇨🇳 121.229.191.90

🇯🇵 34.85.112.226

🇺🇸 34.44.217.60

🇦🇺 216.226.77.20

🇹🇷 88.248.250.143

🇰🇷 1.227.228.131

🇬🇧 217.42.26.37

🇳🇱 193.47.62.69

🇺🇦 193.33.189.52

🇵🇹 188.81.118.193

🇨🇳 120.237.113.139

🇺🇸 96.78.175.36

🇺🇿 89.126.211.166

🇬🇧 77.67.26.31