95.164.201.249

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
31% Elevated
9 reports
8 reporters · latest 3 days ago
ISP
ISP4Life INC
Usage Type
Data Center/Web Hosting/Transit
ASN
AS394814
Domain Name
isp4life.com
Country
🇺🇸 United States of America
City
New York City, New York
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
9 from 8 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇫🇷 France 3 🇩🇪 Germany 2 🇬🇧 United Kingdom of Great Britain and Northern Ireland 1
Most common categories Port Scan 6 Web App Attack 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇫🇷 Kejult
Honeypot Finding: verified TCP multi-port scan/probing; 5 application-level events across 5 target ports and 5 source port(s). Ports: 1040/service, 1049/service, 1087/service, 6007/service, 50003/service. Sensors: Honeytrap.
Port Scan
🇫🇷 Kejult
Honeypot Finding: verified TCP multi-port scan/probing; 3 application-level events across 3 target ports and 3 source port(s). Ports: 1074/service, 1090/service, 5080/service. Sensors: Honeytrap.
Port Scan
🇫🇷 uthul
T-Pot honeypot: 7 hits on ports [8080] (automated)
Port Scan Web App Attack
Anonymous
Blocked by firewall on hugin [8080/tcp] | Rule: UFW | SPT: 58531 | TTL: 52 | LEN: 60 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇩🇪 EinfxchFinn
Unauthorized connection attempt to port 8001 from 95.164.201.249
Port Scan
🇬🇧 Axel
Blocked by UFW on BGPGB [3001/tcp] | SPT: 44057 | TTL: 54 | LEN: 60 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇬🇧 relianoid.com
POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com
Web Spam
🇺🇸 SX Communications
HTTP application-layer DoS / botnet traffic from 95.164.201.249: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host.
DDoS Attack Bad Web Bot Exploited Host
🇵🇱 sefinek.net
Bad Web Bot

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇰🇷 221.151.251.129
🇪🇬 196.156.92.176
🇦🇷 186.23.164.7
🇨🇳 125.222.146.34
🇲🇴 125.31.2.160
🇮🇩 103.157.24.68
🇳🇱 86.38.187.52
🇬🇧 81.19.219.207
🇰🇷 221.168.170.14
🇨🇴 181.56.174.63
🇺🇸 172.191.90.28
🇳🇱 138.226.239.233
🇺🇸 138.197.195.90
🇵🇰 125.209.88.139
🇮🇩 125.160.156.206
🇰🇷 125.143.249.102
🇻🇳 117.5.142.171
🇺🇸 95.163.148.37
🇮🇹 93.70.164.187
🇳🇱 81.173.64.250
feedback