94.28.148.195
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- OJSC Rostelecom, Tula branch
- Usage Type
- Fixed Line ISP
- ASN
- AS12389
- Domain Name
- rt.ru
- Country
- 🇷🇺 Russian Federation
- City
- Shchekino, Tula Oblast
Abuse Reports
Total reports
17 from
11 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇳🇱 EGP Abuse Dept |
Unauthorized connection to Telnet port 23
|
Port Scan Hacking | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 23)
Source port: 39254
TTL: 49
Packet length: 60
TOS: 0x00
This report (for 94.28.148.195) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan Hacking Brute-Force | |
| 🇰🇷 2048 |
Telnet credential brute-force observed by honeypot.
Source IP: 94.28.148.195
Targeted device: Ubuntu server
First seen: 02 Oct 2026 18:17:03 UTC
Last seen: 02 Oct 2026 18:17:03 UTC
Attempts: 1
Sample credentials: vstarcam2015:20150602
|
Brute-Force | |
| 🇧🇾 stroytrest |
2026-10-02T08:02:08.593682+03:00 gate kernel: [864594.759068] nftables: JAIL-TELNET IN=wan OUT= MAC= SRC=94.28.148.195 DST=xxx.xxx.xxx.xxx LEN=60 TOS=0x00 PREC=0x00 TTL=55 ID=50715 DF PROTO=TCP SPT=54612 DPT=23 WINDOW=65535 RES=0x00 SYN URGP=0
...
|
Port Scan | |
| 🇺🇸 drewf.ink |
[02:33] Attempted telnet login with credentials root:F******s
|
Brute-Force IoT Targeted | |
| 🇵🇱 bart@ |
Automated scan detection against redacted protected targets. Hits=1; port 23 proto 6 detection honeypot_tcp
|
Port Scan | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 23)
Source port: 57902
TTL: 48
Packet length: 60
TOS: 0x00
This report (for 94.28.148.195) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan Hacking Brute-Force | |
| 🇫🇷 security.rdmc.fr |
Port Scan Attack proto:TCP src:53300 dst:23
|
Port Scan | |
| 🇺🇸 RAP |
2026-09-30 18:50:05 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | |
| 🇨🇦 design2web.ca |
|
Port Scan | |
| 🇳🇱 EGP Abuse Dept |
Unauthorized connection to Telnet port 23
|
Port Scan Hacking | |
| 🇺🇸 RAP |
2026-09-30 03:43:37 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | |
| Anonymous |
denied traffic to a honeypot network. destination port 23.
|
Port Scan Hacking | |
| 🇺🇸 sumnone |
Port probing on unauthorized port 23
|
Port Scan Hacking Exploited Host | |
| 🇰🇷 2048 |
Telnet credential brute-force observed by honeypot.
Source IP: 94.28.148.195
Targeted device: Ubuntu server
First seen: 29 Sep 2026 19:19:40 UTC
Last seen: 29 Sep 2026 19:19:45 UTC
Attempts: 2
Sample credentials: root:Pon521, admin:12345
|
Brute-Force |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown