195.20.125.25
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Firm Delta PE
- Usage Type
- Fixed Line ISP
- ASN
- AS25403
- Domain Name
- khust.net
- Country
- 🇺🇦 Ukraine
- City
- Khust, Zakarpattia
Abuse Reports
Total reports
74 from
53 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇺🇸 Wootroot |
Honeypot (telnet): 3 login attempts
|
Brute-Force IoT Targeted | |
| 🇩🇪 ger-stg-sifi1 |
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
|
Web App Attack | |
| 🇳🇱 venix |
Unauthorized connection attempt detected from IP address 195.20.125.25 to port 23 (web01.amsterdam)
|
Brute-Force Exploited Host | |
| 🇦🇹 urnilxfgbez |
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
|
Port Scan | |
| 🇩🇪 Hazzard |
(wordpress) Failed wordpress login from 195.20.125.25 (UA/Ukraine/Zakarpattia Oblast/Khust/-/[redacted]): (CF_ENABLE)
|
Brute-Force | |
| 🇳🇱 Tsumugi Kotobuki |
Telnet Brute-Force | Events: 1 | Ports: 23/Telnet | Auth: password(1x) | F2B/telnet-honeypot-bruteforce@2026-11-11T11:37:09Z
|
Brute-Force | |
| 🇺🇸 donarev419 |
Port scan detected on port 23 (connection without data transfer)
|
Port Scan | |
| 🇺🇸 RAP |
2026-11-11 06:48:37 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | |
| 🇺🇸 RAP |
2026-11-10 19:26:27 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | |
| 🇹🇷 Jova |
WordPress user enumeration: 5 requests.
|
Web App Attack | |
| Anonymous |
IP & Port Scan.
|
SSH Port Scan Brute-Force | |
| 🇲🇹 Malta |
195.20.125.25 - - [10/Nov/2026:04:50:17 +0100] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/155.0.0.0 Safari/537.36"
Brute-force password attempt
|
Hacking Web App Attack Brute-Force | |
| 🇩🇪 Hazzard |
(wordpress) Failed wordpress login from 195.20.125.25 (UA/Ukraine/Zakarpattia Oblast/Khust/-/[redacted]): (CF_ENABLE)
|
Brute-Force | |
| 🇺🇸 MPL |
tcp/23 (2 or more attempts)
|
Port Scan | |
| 🇺🇸 dtorrer |
Brute-force general attack.
|
Brute-Force |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown