95.65.99.157

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
69% Elevated
25 reports
17 reporters · latest 12 hours ago
ISP
StarNet Solutii SRL
Usage Type
Fixed Line ISP
ASN
AS31252
Domain Name
starnet.md
Country
🇲🇩 Moldova (the Republic of)
City
Cahul, Cahul
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
25 from 17 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 8 🇵🇱 Poland 5 🇳🇱 Netherlands 3
Most common categories DDoS Attack 11 Web App Attack 10 Brute-Force 8 Hacking 3 SSH 2
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇵🇱 MatStef132
MatShield L7: blocked on a protected site (flood-tool-header)
DDoS Attack
🇩🇪 satelliteproxy
DPI (Deep Packet Inspection) identified this source as an abusive automated web bot.
Bad Web Bot
Anonymous
| [Dangerous/Moldova] Aggressive IP 95.65.99.157 (~30 hits). Type: DoS Defender- Web server 400 error code
Web App Attack Hacking SQL Injection
🇵🇱 MatStef132
MatShield L7: blocked on a protected site (sec-fetch-dest-document-non-navigate)
DDoS Attack
🇫🇷 Stara
Distributed smtpauth, imapd and ftp login attacks or more than 2 temp blocks in the last 259200 secs
Brute-Force DDoS Attack
🇬🇧 Silly Development
Malicious activity detected from 31252 StarNet Solutii SRL towards host sillydev.co.uk (GET HTTP/2) @ 2026-11-03T21:27:32Z (5 occurrences)
DDoS Attack Exploited Host
🇳🇱 maxxsense
95.65.99.157 (MD/Moldova/95-65-99-157.starnet.md), 12 distributed imapd attacks on account [redacted]
Brute-Force
🇵🇱 MatStef132
MatShield L7: blocked on unlocknow.cc (sec-ch-ua-escaped-quotes)
DDoS Attack
🇵🇱 MatStef132
MatShield L7: blocked on a protected site (sec-ch-ua-escaped-quotes)
DDoS Attack
🇩🇪 GunsawianHosting
Open public proxy/relay
Open Proxy VPN IP Exploited Host
Anonymous
suspicious request in access.log
Web App Attack
🇪🇸 librebit
Attack to Postfix SASL, bad guys
Brute-Force
🇳🇱 homeshowdomain.nl
Auto-ban: >3000 req/min op 2026-10-22
Web App Attack SSH Hacking
🇳🇱 homeshowdomain.nl
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-10-20.
Web App Attack SSH Hacking
🇩🇪 ITcloud
Automated credential attack against a legacy web authentication flow: 2339 matching requests observed between 2026-10-17T14:47:27+00:00 and 2026-10-18T18:45:06+00:00 UTC.
Brute-Force Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 86.38.187.122
🇫🇷 85.217.140.5
🇺🇸 67.197.222.253
🇮🇷 37.202.182.75
🇮🇷 37.148.17.20
🇭🇰 152.32.173.48
🇺🇸 147.185.132.130
🇨🇳 120.48.170.74
🇮🇹 79.35.55.153
🇩🇪 69.5.169.87
🇺🇸 50.116.60.236
🇮🇷 37.148.111.156
🇺🇸 31.134.0.153
🇩🇪 207.154.253.186
🇳🇱 200.138.46.198
🇺🇦 194.0.55.217
feedback