195.238.115.125

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse confidence score ?
75% Critical
48 reports
21 reporters ยท latest 4 days ago
ISP Saturn LLC
Usage Type Fixed Line ISP
ASN AS35273
Domain Name net.ru
Country ๐Ÿ‡ท๐Ÿ‡บ Russian Federation
City Moscow, Moscow

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Log in to view charts and search reports for this IP. Log In

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview
Account required for the enhanced features Log in Sign up

IP Abuse Reports for 195.238.115.125

This IP address has been reported a total of 48 times from 21 distinct sources. 195.238.115.125 was first reported on , and the most recent report was . In the last 60 days, the top reporter locations were: United States of America with 17 reports; Germany with 12 reports; France with 6 reports. Over the same time period, 195.238.115.125 has changed country of origin 2 times. The most common categories in these recent reports were: Port Scan 41 times; Hacking 13 times; Brute-Force 8 times; IoT Targeted 2 times; Exploited Host 2 times.

Reporter IoA Timestamp (UTC) Comment Categories
๐Ÿ‡ณ๐Ÿ‡ฑ EGP Abuse Dept
Unauthorized connection to Telnet port 23
Port Scan Hacking
๐Ÿ‡ฉ๐Ÿ‡ช Da_tschek
Port scanning
Port Scan Hacking
Anonymous
denied traffic to a honeypot network. destination port 23.
Port Scan Hacking
๐Ÿ‡บ๐Ÿ‡ธ thororen
Port Scan Hacking Brute-Force
๐Ÿ‡ฉ๐Ÿ‡ช reznekcs
Blocked by UFW firewall
Brute-Force
๐Ÿ‡บ๐Ÿ‡ธ RAP
2026-09-28 02:12:25 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
๐Ÿ‡ฉ๐Ÿ‡ช bescared
F2B - Malicious activity detected. Unauthorized connection attempt: Telnet. -8ff06ede-
Port Scan
๐Ÿ‡ณ๐Ÿ‡ฑ EGP Abuse Dept
Unauthorized connection to Telnet port 23
Port Scan Hacking
๐Ÿ‡บ๐Ÿ‡ธ RAP
2026-09-27 12:33:56 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
๐Ÿ‡ฉ๐Ÿ‡ช bancix
Heimdallr NIDS: Automatic ban triggered. Reason: TRAP_PORT_HIT (porta 23)
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ MPL
tcp/23 (2 or more attempts)
Port Scan
๐Ÿ‡ซ๐Ÿ‡ท security.rdmc.fr
Port Scan Attack proto:TCP src:57000 dst:23
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ MPL
tcp/23 (4 or more attempts)
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ RAP
2026-09-21 23:38:00 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
๐Ÿ‡ฆ๐Ÿ‡บ dyln
Dyls honeypot brute-force: Telnet (14 total hits)
Brute-Force

Showing 1 to 15 of 48 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown ๐Ÿšฉ

Recently Reported IPs:

๐Ÿ‡บ๐Ÿ‡ธ 216.73.160.58
๐Ÿ‡ฎ๐Ÿ‡ฉ 202.169.231.90
๐Ÿ‡บ๐Ÿ‡ธ 195.184.76.175
๐Ÿ‡บ๐Ÿ‡ธ 162.216.149.159
๐Ÿ‡ฎ๐Ÿ‡ฉ 152.32.154.106
๐Ÿ‡ธ๐Ÿ‡ฌ 109.123.239.235
๐Ÿ‡ฉ๐Ÿ‡ช 94.26.36.159
๐Ÿ‡ซ๐Ÿ‡ท 90.125.252.242
๐Ÿ‡ฐ๐Ÿ‡ฟ 89.218.244.222
๐Ÿ‡บ๐Ÿ‡ธ 66.132.186.239
๐Ÿ‡บ๐Ÿ‡ธ 66.132.172.127
๐Ÿ‡ฉ๐Ÿ‡ช 64.226.110.44
๐Ÿ‡ง๐Ÿ‡ช 35.233.45.92
๐Ÿ‡ง๐Ÿ‡ท 205.210.31.208
๐Ÿ‡ต๐Ÿ‡ฐ 203.128.10.144
๐Ÿ‡ป๐Ÿ‡ช 200.71.154.140
๐Ÿ‡บ๐Ÿ‡ธ 195.184.76.170
๐Ÿ‡ง๐Ÿ‡ท 177.159.150.111
๐Ÿ‡บ๐Ÿ‡ธ 154.217.234.54
๐Ÿ‡ณ๐Ÿ‡ฑ 109.160.32.133