91.239.95.17
Classification: Malicious
91.239.95.17 is a malicious IP address in Svesa, UA. 88 sightings from 5 threat sources (Port Scanner, Bruteforce), last seen 2026-11-06.
Current activity
- Known attacker — Seen launching attacks over the Internet.
- Known scanner — Seen scanning hosts over the Internet.
- IoT threat — Seen attacking IoT devices.
- VPN node — Provides anonymization that can hide an attacker.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Port Scanner | AbuseIPDB | 2026-08-11 04:01:39 | 2026-11-06 23:45:00 | malicious-activity reconnaissance | |
| HTTP Attacker | AbuseIPDB | 2026-08-09 11:33:45 | 2026-11-06 02:07:07 | attacker malicious-activity | |
| SSH Attacker | AbuseIPDB | 2026-08-11 04:01:39 | 2026-11-06 02:07:07 | attacker malicious-activity | |
| Bruteforce | AbuseIPDB | 2026-08-11 04:01:39 | 2026-11-05 22:56:46 | attacker malicious-activity | |
| IoT Attacker | AbuseIPDB | 2026-11-05 22:15:21 | 2026-11-05 22:15:21 | iot malicious-activity | |
| Hacking | AbuseIPDB | 2026-08-09 11:33:45 | 2026-11-05 10:56:16 | attacker malicious-activity | |
| SQL Injection | AbuseIPDB | 2026-08-09 11:33:45 | 2026-11-05 10:56:16 | attacker malicious-activity | |
| VPN | AbuseIPDB | 2026-11-04 01:10:06 | 2026-11-04 01:10:06 | anonymization vpn | |
| SSH Attacker | Blocklist.de | 2026-11-01 14:00:46 | 2026-11-01 14:00:46 | attacker malicious-activity | |
| HTTP Scrapper | AbuseIPDB | 2026-08-11 05:00:14 | 2026-10-02 04:29:05 | anomalous-activity | |
| DDoS Attacker | AbuseIPDB | 2026-08-11 05:00:14 | 2026-08-26 20:50:54 | attacker malicious-activity | |
| Malicious Host | HoneyDB | 2026-08-15 00:00:00 | 2026-08-15 00:00:00 | attacker malicious-activity | |
| Malicious Host | AbuseIPDB | 2026-08-11 05:00:14 | 2026-08-11 05:00:14 | attacker compromised malicious-activity | |
| Malicious Host | CIArmy | 2026-07-24 20:02:15 | 2026-07-24 20:02:15 | attacker malicious-activity | |
| Parasite SEO | Blocklist.net.ua | 2020-03-06 00:56:53 | 2020-03-06 07:25:23 |
Tags
abuse ssh bruteforce botWhois information
- AS name
- AS58162 FOP Lukyanenko Aleksandr Ivanovich
- Registrant
- FOP Lukyanenko Aleksandr Ivanovich
- City
- Svesa
- Postal code
- 41226
- Country
- UA — Ukraine 🇺🇦
- First indexed
- 2020-03-05 22:01:02
- Last updated
- 2026-11-07 03:09:14