94.28.236.153
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- OJSC Rostelecom, Tula branch
- Usage Type
- Fixed Line ISP
- ASN
- AS12389
- Domain Name
- rt.ru
- Country
- 🇷🇺 Russian Federation
- City
- Tula, Tula Oblast
Abuse Reports
Total reports
21 from
19 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇵🇱 pshost.pl |
2026-10-27T01:28:09.881Z, an unauthorized SSH access attempt was detected from source IP address 94.28.236.153 by our NetFlow-based intrusion detection.
|
Port Scan Brute-Force SSH | |
| 🇳🇱 EGP Abuse Dept |
Unauthorized connection to SSH port 22
|
Port Scan Hacking SSH | |
| 🇦🇹 urnilxfgbez |
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
|
Port Scan | |
| 🇷🇺 basil s |
Unauthorized access attempt: automated SSH credential brute-force probe on TCP/22; dropped and source blocked. Observed 2026-10-26 22:27:22 UTC; blocked for 24h.
|
Brute-Force SSH | |
| 🇩🇪 KPS |
PortscanT
|
Port Scan | |
| 🇦🇷 Bruno |
Port Scanner: 94.28.236.153
|
Port Scan | |
| 🇺🇸 RAP |
2026-10-26 06:11:37 UTC Unauthorized activity to TCP port 22. SSH
|
SSH | |
| 🇫🇷 security.rdmc.fr |
Port Scan Attack proto:TCP src:36722 dst:23
|
Port Scan | |
| 🇺🇸 Phil Schuyler |
Repeated probing against public honeypot services: 4 observed events targeting SSH/TELNET/2223.
|
Port Scan | |
| Anonymous |
[Firewall] Blacklisted: manual | ISP: PJSC Rostelecom | Origin: Tula, Russia | Prior AbuseIPDB score: 59% (11 reports) | Blocked at: 2026-10-24 10:16:39
|
Brute-Force | |
| Anonymous |
|
Port Scan Brute-Force | |
| 🇫🇷 security.rdmc.fr |
Port Scan Attack proto:TCP src:48600 dst:23
|
Port Scan | |
| 🇺🇸 sumnone |
Port probing on unauthorized port 23
|
Port Scan Hacking Exploited Host | |
| 🇫🇷 Kejult |
Honeypot Finding: verified TCP multi-port scan/probing; 3 application-level events across 2 target ports and 3 source port(s). Ports: 22/SSH, 23/Telnet. Sensors: Cowrie.
|
Port Scan | |
| 🇳🇱 StopAbuse |
tcp/22 tcp/23
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown