JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

146.19.254.157

Recent Activity

Abuse confidence score ?

100% Critical

500 reports

302 reporters · latest 5 hours ago

ISP	BlueVPS OU
Usage Type	Data Center/Web Hosting/Transit
ASN	AS62005
Domain Name	bluevps.com
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 146.19.254.157

Export CSV

This IP address has been reported a total of 500 times from 302 distinct sources. 146.19.254.157 was first reported on July 21st 2025, and the most recent report was 5 hours ago. In the last 60 days, the top reporter locations were: United States of America with 117 reports; Germany with 96 reports; France with 46 reports. The most common categories in these recent reports were: Port Scan 307 times; Web App Attack 150 times; Hacking 117 times; Brute-Force 62 times; Bad Web Bot 51 times; Other 49 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Ilop	2026-10-20 20:00:54 (5 hours ago)	[hp-100] 8 unsolicited packets to honeypot ports 8080,443 (OCI DShield sensor)	Port Scan
🇺🇸 BSG Webmaster	2026-10-20 07:00:02 (18 hours ago)	Port scanning (Port 443)	Port Scan Hacking
🇺🇸 anon333	2026-10-20 04:06:03 (21 hours ago)	Invalid probes to web server T0006	Hacking Exploited Host
🇩🇪 Mykola Spesivtsev	2026-10-20 03:13:33 (22 hours ago)	HTTP Tarpit detected bot activity:TargetPort:80, Path:/, Method:GET, UA:Mozilla/5.0 (Windows NT 10.0 ... show more HTTP Tarpit detected bot activity:TargetPort:80, Path:/, Method:GET, UA:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Sa show less	Port Scan Web App Attack Bad Web Bot
🇰🇷 MW	2026-10-20 03:07:46 (22 hours ago)	146.19.254.157 - - [20/Oct/2026:12:07:41 +0900] "GET /vmmgr HTTP/1.1" 404 5685 "-" "Mozilla/5.0 (Win ... show more 146.19.254.157 - - [20/Oct/2026:12:07:41 +0900] "GET /vmmgr HTTP/1.1" 404 5685 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 146.19.254.157 - - [20/Oct/2026:12:07:42 +0900] "GET /dcimgr HTTP/1.1" 404 5685 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:124.0) Gecko/20100101 Firefox/124.0" 146.19.254.157 - - [20/Oct/2026:12:07:44 +0900] "GET /billmgr HTTP/1.1" 404 5685 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15" show less	Bad Web Bot Web App Attack
🇮🇱 spd.co.il	2026-10-20 03:04:38 (22 hours ago)	Port scan detected on multiple ports	Port Scan
🇷🇺 dnsbd.tech	2026-10-20 03:02:02 (22 hours ago)	nftables: Port scan (TCP:1500) [srv1]	Port Scan Hacking
🇺🇸 masterguru	2026-10-20 02:59:55 (22 hours ago)	Host header is a numeric IP address. Pattern match "^ (920350-164)	Hacking Bad Web Bot
🇬🇧 kiwi.network	2026-10-20 02:44:13 (22 hours ago)	Incessant port scan: Binary file (standard input) matches	Port Scan Hacking Exploited Host
🇺🇸 sandra361	2026-10-20 02:42:50 (22 hours ago)	Port scan detected: 18 attempts across 1 port (80). \| Evidence: REAPER_TARPIT: IN=enp1s0 SRC=146.19. ... show more Port scan detected: 18 attempts across 1 port (80). \| Evidence: REAPER_TARPIT: IN=enp1s0 SRC=146.19.254.157 LEN=40 TOS=0x00 PREC=0x00 TTL=49 ID=6035 DF PROTO=TCP SPT=40172 DPT=80 WINDOW=42340 RES=0x00 ACK RST URGP=0 show less	Port Scan
🇺🇸 freehosts.eu	2026-10-20 02:41:05 (22 hours ago)	Blocked by UFW [8443/tcp] \| SPT: 47298 \| TTL: 243 \| LEN: 40 \| TOS: 0x08 • Reported by: github.com/se ... show more Blocked by UFW [8443/tcp] \| SPT: 47298 \| TTL: 243 \| LEN: 40 \| TOS: 0x08 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Bad Web Bot
🇸🇪 cider1725	2026-10-20 02:17:25 (23 hours ago)	146.19.254.157 - - [20/Oct/2026:02:17:24 +0000] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Android 13; ... show more 146.19.254.157 - - [20/Oct/2026:02:17:24 +0000] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Android 13; Mobile; rv:122.0) Gecko/122.0 Firefox/122.0" "-" 146.19.254.157 - - [20/Oct/2026:02:17:24 +0000] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Android 13; Mobile; rv:122.0) Gecko/122.0 Firefox/122.0" "-" 146.19.254.157 - - [20/Oct/2026:02:17:24 +0000] "GET /vmmgr HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Mobile Safari/537.36" "-" ... show less	Brute-Force Web App Attack
🇺🇸 xmission.com	2026-10-20 02:16:56 (23 hours ago)	Blocked by UFW (TCP on 8080) Source port: 47298 TTL: 240 Packet length: 40 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 8080) Source port: 47298 TTL: 240 Packet length: 40 TOS: 0x08 This report (for 146.19.254.157) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇷🇺 dnsbd.tech	2026-10-20 02:02:34 (23 hours ago)	nftables: Port scan (TCP:1500) [srv2]	Port Scan Hacking
🇺🇸 donarev419	2026-10-20 01:45:53 (23 hours ago)	Connection to port 8443 with data transfer. Data preview: �	Port Scan Hacking

Showing 1 to 15 of 500 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇦 216.26.237.120

🇮🇱 192.116.46.66

🇫🇷 146.59.225.176

🇩🇪 139.59.142.73

🇿🇦 102.211.48.186

🇫🇷 91.231.89.13

🇵🇱 87.251.64.132

🇸🇬 47.128.120.235

🇬🇧 45.82.76.121

🇬🇧 35.203.210.111

🇬🇧 5.252.83.83

🇬🇧 195.96.139.220

🇻🇪 190.205.60.70

🇧🇷 187.111.156.196

🇺🇾 186.53.115.108

🇦🇷 181.116.200.138

🇲🇽 177.226.106.195

🇸🇬 168.144.108.17

🇳🇱 138.226.239.233

🇩🇪 109.160.32.147