128.201.158.225
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- SOFIA NET
- Usage Type
- Fixed Line ISP
- ASN
- AS266635
- Domain Name
- sofianet.com.br
- Country
- 🇧🇷 Brazil
- City
- Sao Lourenco da Mata, Pernambuco
Abuse Reports
Total reports
15 from
12 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| Anonymous |
denied traffic to a honeypot network. destination port 39068.
|
Port Scan Hacking | |
| 🇳🇮 elfita |
Blocked by nftables on AmneziaWG gateway (Ports: 41427)
|
Port Scan Brute-Force Exploited Host | |
| 🇭🇰 CyberFox |
52975/udp (1 or more attempts)
|
Port Scan | |
| Anonymous |
denied traffic to a honeypot network. destination port 23398.
|
Port Scan Hacking | |
| Anonymous |
denied traffic to a honeypot network. destination port 59935.
|
Port Scan Hacking | |
| 🇺🇸 鬼影233 |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0
|
Bad Web Bot | |
| Anonymous |
denied traffic to a honeypot network. destination port 56614.
|
Port Scan Hacking | |
| 🇺🇸 kosada.com |
Web bot: denial-of-service flood
|
DDoS Attack Bad Web Bot | |
| 🇩🇪 SMARTNET |
Aisuru(Mirai variant) DDoS | Incident ID: 8969aafa-3f20-493f-8883-3bda65a2b909
|
DDoS Attack | |
| 🇦🇺 LiftUp Hosting |
Honeypot hit: Unauthorized connection attempt detected on 23/TELNET
|
Hacking Port Scan | |
| 🇦🇺 trentwiles.com |
Unauthorized connection attempt detected from IP address 128.201.158.225 to port 23 [SYD]
|
Port Scan | |
| 🇵🇱 mkey |
Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT | PORTS=23 | HITS=2 | IPSET=ADD | FIRST=2026-05-03 01:29:50 | LAST=2026-05-03 01:29:51. Last seen 2026-05-03 01:29:51.
|
Port Scan | |
| 🇩🇪 genokrad |
Unauthorized connection attempt on TCP/23 (Telnet)
|
Port Scan | |
| 🇺🇸 quilla |
Botnet infected device observed in honeypot (Vector: TCP HANDSHAKE ATTACK)
|
DDoS Attack | |
| 🇲🇾 syokadmin |
(cpanel) Failed cPanel login from 128.201.158.225 (BR/Brazil/-): 1 in the last 3600 secs
|
Brute-Force Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown