95.133.167.25
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- FlokiNET ehf
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS200651
- Domain Name
- flokinet.is
- Country
- 🇷🇴 Romania
- City
- Bucharest, Bucharest
Abuse Reports
Total reports
146 from
93 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇺🇸 HamSammich |
Automated sensor: 2 port 5432 connection/probe attempts over the last 24h (latest 2026-11-15T10:28Z).
|
Port Scan | |
| 🇺🇸 sandra361 |
Port scan detected: 47 packets across 1 port (5432). | Evidence: REAPER_TARPIT: IN=enp1s0 SRC=95.133.167.25 LEN=81 TOS=0x00 PREC=0x00 TTL=55 ID=6823 DF PROTO=TCP SPT=11070 DPT=5432 WINDOW=64240 RES=0x00 ACK PSH URGP=0
|
Port Scan | |
| Anonymous |
Blocked by UFW [5432/tcp] | SPT: 56534 | TTL: 245 | LEN: 40 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇫🇷 security.rdmc.fr |
Activity from blacklisted IP
|
Hacking | |
| 🇬🇧 rworobel |
Firewall detected 6 blocked connection attempts from this IP during the last 24 hours.
|
Port Scan | |
| 🇫🇷 Kejult |
Honeypot Finding: active Redis command abuse captured on TCP/6379; 9 high-risk command event(s). Commands: CONFIG GET dir, CONFIG GET enable-module-command, MODULE LIST.
|
Hacking | |
| 🇫🇷 uthul |
T-Pot honeypot: 74 hits on ports [1433, 2376, 2379, 3000, 4505, 5038, 5984, 6789, 7077, 8010] (automated)
|
Port Scan Hacking | |
| 🇫🇷 uthul |
T-Pot honeypot: 59 hits on ports [1433, 2379, 3000, 4505, 5038, 5984, 6789, 7077, 8010, 8081] (automated)
|
Port Scan Hacking | |
| 🇫🇷 Stara |
Port scan detected - multiple connection attempts to various ports
|
Port Scan Brute-Force SSH | |
| Anonymous |
ykoCloud Beveiliging: port_scan
|
Port Scan | |
| 🇫🇷 noi |
honeypot proto=TCP dpt=1433 flags=SYN hits=1 window=1h
|
Port Scan | |
| 🇫🇷 vtchost.com |
portscan on honeypot system
...
|
Port Scan | |
| Anonymous |
Triggered: repeated knocking on closed ports.
|
Port Scan | |
| 🇩🇪 cloudmax |
Cloudmax IPS Block - Suspicious activity. Possible port scanning, service reconnaissance, or vulnerability probing
|
Port Scan | |
| 🇫🇷 JohnAtlas |
Honeypot: connection attempt to unused port(s) 8008/tcp on a server where these services do not exist. Automated firewall trap.
|
Port Scan Hacking |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown