95.141.209.72
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- Al mouakhah lil khadamat al logesteih wa al itisalat
- Usage Type
- Fixed Line ISP
- ASN
- AS42912
- Domain Name
- zain.com
- Country
- 🇯🇴 Jordan
- City
- Amman, Amman
Abuse Reports
Total reports
20 from
18 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇹🇭 Sawasdee |
SSH break in attempt
...
|
SSH | |
| 🇷🇸 Scan |
MultiHost/MultiPort Probe, Scan, Hack -
|
Port Scan Hacking | |
| 🇫🇷 security.rdmc.fr |
Port Scan Attack proto:TCP src:5768 dst:23
|
Port Scan | |
| 🇷🇸 Scan |
MultiHost/MultiPort Probe, Scan, Hack -
|
Port Scan Hacking | |
| 🇺🇸 RAP |
2026-10-01 22:47:48 UTC Unauthorized activity to TCP port 22. SSH
|
SSH | |
| 🇺🇸 MPL |
tcp ports: 22,23 (8 or more attempts)
|
Port Scan | |
| Anonymous |
SSH tarpit (endlessh) connection from 95.141.209.72
|
Brute-Force SSH | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 22)
Source port: 2723
TTL: 48
Packet length: 60
TOS: 0x00
This report (for 95.141.209.72) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan SSH Brute-Force | |
| 🇺🇸 RAP |
2026-09-28 13:22:12 UTC Unauthorized activity to TCP port 22. SSH
|
SSH | |
| 🇺🇸 NetVexor |
Attack source identified and submitted via NetVexor BGP Blackhole Network
|
Port Scan Hacking Brute-Force | |
| 🇺🇸 LSPCCU |
TSEC Honeypot Network report. Threat score: 70/100. Categories: Port Scan, Hacking, Brute-Force, Web App Attack, SSH. Honeypot: cowrie. Context: 95.141.209.72 classified as botnet node participating in coordinated attack campaigns (high confidence).
|
Port Scan Hacking Brute-Force Web App Attack SSH | |
| 🇨🇭 blinx |
Caught by endlessh, wasted time: 11s
|
Brute-Force SSH | |
| 🇮🇹 CoreTech srl |
[DC: IP:151.1.252.27] ntopng alert: blacklisted_client_contact
|
Hacking | |
| 🇺🇸 OceanTreasure |
tcp/22; Unsolicited SYN to a dark IP that has never hosted any service (darknet, no DNS name) @ 2026-09-26T02:27:49Z
|
Port Scan | |
| 🇺🇸 sumnone |
Port probing on unauthorized port 22
|
Port Scan Hacking Exploited Host |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown