95.165.3.78

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
94% Critical
54 reports
31 reporters · latest 11 hours ago
ISP
Moscow Local Telephone Network (OAO MGTS)
Usage Type
Fixed Line ISP
ASN
AS25513
Domain Name
spd-mgts.ru
Country
🇷🇺 Russian Federation
City
Moscow, Moscow
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
54 from 31 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 7 🇫🇷 France 5 🇨🇿 Czechia 3
Most common categories Port Scan 24 Ping of Death 1 Hacking 1 Spoofing 1 Brute-Force 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇩🇪 int8
2026-11-09T08:57:46.091885913Z Minecraft server scanner: status request
Port Scan
🇩🇪 noahxyz
Port Scan (TCP 25565) and Spoofing of Minecraft Usernames.
Spoofing Port Scan
🇩🇪 int8
2026-11-08T19:55:54.732460599Z Minecraft server scanner: status request
Port Scan
🇩🇪 e⁻
2026-11-08T08:49:51Z Minecraft server scanner
Port Scan
🇯🇵 jsys
Automated report (nfacl NetFlow analysis, 300s window): host sweep (254 distinct dst hosts)
Port Scan
🇦🇺 LiftUp Hosting
Honeypot hit: Empty payload (likely service probe); 25565 [3] TCP
Port Scan
🇫🇷 Hiigara
connection attempt : 95.165.3.78 on port : tcp/25565 (Unknown)
Port Scan
🇫🇷 Kejult
Honeypot Finding: verified TCP multi-port scan/probing; 4 application-level events across 2 target ports and 4 source port(s). Ports: 25565/service, 25577/service. Sensors: Honeytrap.
Port Scan
🇨🇭 Elysium Security
Mass port scanning on a whole network
Port Scan
🇫🇷 Akumistu
PORT SCANN mINECRAFT 25561
Port Scan
🇷🇺 Agrohim
Gate Inet blocked for categories:
DDoS Attack Ping of Death Port Scan Hacking Brute-Force
🇲🇳 Public CSIRT/CC of Mongolia
Honeypot hit: Empty payload (likely service probe); 25565 [4] TCP
Port Scan
🇧🇷 ICS Labs
ICS Labs threat intelligence (ICS Feeds): Exploited Host. Last observed 2026-11-04 UTC.
Exploited Host
🇫🇷 uthul
T-Pot honeypot: 19 hits on ports [25565] (automated)
Port Scan
🇺🇸 drewf.ink
[15:46] Port scanning. Port(s) scanned: TCP/25565
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 209.59.158.97
🇺🇸 184.183.93.96
🇫🇷 172.69.222.252
🇳🇱 77.239.124.130
🇩🇪 64.89.163.134
🇳🇱 45.148.10.157
🇺🇸 20.42.98.120
🇷🇴 2.57.121.25
🇲🇾 103.4.46.41
🇫🇷 51.68.122.243
🇦🇷 38.3.245.11
🇳🇱 213.209.159.241
🇧🇷 177.137.145.118
🇰🇷 115.160.76.23
🇺🇸 109.105.210.77
🇳🇬 102.88.113.9
feedback