189.165.125.93

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
45 reports
32 reporters · latest 7 hours ago
ISP
Gestión de direccionamiento UniNet
Usage Type
Fixed Line ISP
ASN
AS8151
Domain Name
uninet.net.mx
Country
🇲🇽 Mexico
City
San Martin Texmelucan de Labastida, Puebla
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
45 from 32 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 10 🇦🇹 Austria 8 🇩🇪 Germany 5
Most common categories Port Scan 27 Brute-Force 17 Hacking 14 SSH 13 Web App Attack 9
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇦🇹 urnilxfgbez
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
Port Scan
🇧🇬 Ilcheff
SSH tarpit hit: connection from dsl-93-125-165-189-dynamic.prod-infinitum.com.mx [MX/Mexico, AS8151] to SSH accepted.
Port Scan Brute-Force SSH
🇪🇸 Linux Fertxo
Unauthorized connection attempts: 3 hits @ port(s) 22, protocol(s) tcp
Port Scan Hacking
Anonymous
Bot / scanning and/or hacking attempts: POST /wp-login.php HTTP/2.0, [2/2] done, [0/0] init, GET /wp-login.php HTTP/2.0
Hacking Web App Attack
🇫🇷 mailox
Unauthorized SSH connection on tarpit ...
SSH
🇷🇴 SpamStopper
Fail2Ban - WP Spoofing
Port Scan Brute-Force Web App Attack
🇧🇾 sashan
2026-11-11T04:23:14.483331+03:00 gate kernel: nftables: JAIL-SSH IN=wan OUT= MAC= SRC=189.165.125.93 DST=xxx.xxx.xxx.xxx LEN=60 TOS=0x00 PREC=0x00 TTL=48 ID=44221 DF PROTO=TCP SPT=50124 DPT=22 WINDOW=65535 RES=0x00 SYN URGP=0 ...
Port Scan
🇦🇹 urnilxfgbez
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
Port Scan
🇫🇷 security.rdmc.fr
Activity from blacklisted IP
Hacking
🇮🇩 helouism
Fail2Ban: Blocked by UFW for port scanning.
Port Scan DDoS Attack
🇧🇷 noconex
Wazuh Alert | Rule ID: 100199 | Desc: Suricata: (ET SCAN Potential SSH Scan) de 189.165.125.93 [TCP]
Port Scan
🇦🇹 urnilxfgbez
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
Port Scan
🇧🇾 StatsMe
Date: 2026-11-09T15:16:28.000+00:00 | Action: deny | Port: 22 | Log: Connection Failed
Brute-Force SSH Port Scan
🇳🇱 EGP Abuse Dept
Unauthorized connection to SSH port 22
Port Scan Hacking SSH
🇦🇹 urnilxfgbez
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇩🇪 194.187.176.249
🇳🇱 193.176.31.206
🇳🇱 185.223.235.56
🇳🇱 185.223.235.45
🇳🇱 185.223.235.43
🇸🇪 171.25.193.82
🇺🇸 91.230.168.21
🇳🇱 89.21.67.187
🇺🇸 70.184.126.53
🇮🇳 45.82.223.225
🇻🇪 38.248.175.15
🇧🇷 205.210.31.183
🇺🇦 195.64.239.203
🇳🇱 193.176.31.243
🇳🇱 193.176.31.150
🇦🇷 190.55.31.63
🇳🇱 185.223.235.60
🇮🇳 117.220.196.139
🇳🇱 109.160.32.171
🇳🇱 89.21.67.179
feedback