JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 188.54.132.95

188.54.132.95 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 48%: ?

48%

ISP	Saudi Telecom Company JSC
Usage Type	Fixed Line ISP
ASN	AS39891
Domain Name	stc.com.sa
Country	🇸🇦 Saudi Arabia
City	Dammam, Eastern Province

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 188.54.132.95

Whois 188.54.132.95

IP Abuse Reports for 188.54.132.95:

This IP address has been reported a total of 12 times from 8 distinct sources. 188.54.132.95 was first reported on July 9th 2026, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 drewf.ink	2026-07-19 18:04:14 (4 days ago)	[18:04] Triggered SMB honeypot. Type: NetBIOS + SMB1. Dialect(s): LANMAN1.0, LM1.2X002, NT LANMAN 1. ... show more [18:04] Triggered SMB honeypot. Type: NetBIOS + SMB1. Dialect(s): LANMAN1.0, LM1.2X002, NT LANMAN 1.0, NT LM 0.12 show less	Hacking Exploited Host
Anonymous	2026-07-19 11:57:56 (4 days ago)	2026-07-19T13:57:55.940646+02:00 vps kernel: [833136.553378] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa ... show more 2026-07-19T13:57:55.940646+02:00 vps kernel: [833136.553378] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=188.54.132.95 DST=54.37.14.118 LEN=48 TOS=0x18 PREC=0x20 TTL=106 ID=1371 DF PROTO=TCP SPT=2066 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan Brute-Force
🇫🇷 Coco Bongo	2026-07-18 19:40:23 (5 days ago)	1784403622 - 07/18/2026 21:40:22 Host: 188.54.132.95/188.54.132.95 Port: 445 TCP Blocked ...	Port Scan
🇫🇷 Little Iguana	2026-07-17 00:46:01 (1 week ago)	trying to access non-authorized port	Port Scan
🇫🇷 sthoyer.de	2026-07-16 15:20:02 (1 week ago)	Jul 16 17:20:00 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ... show more Jul 16 17:20:00 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=188.54.132.95 DST=173.212.223.67 LEN=48 TOS=0x18 PREC=0x20 TTL=113 ID=15821 DF PROTO=TCP SPT=1490 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇫🇷 sthoyer.de	2026-07-14 06:39:27 (1 week ago)	Jul 14 08:39:26 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ... show more Jul 14 08:39:26 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=188.54.132.95 DST=173.212.223.67 LEN=52 TOS=0x18 PREC=0x20 TTL=112 ID=16390 DF PROTO=TCP SPT=2879 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇫🇷 EvoX	2026-07-14 05:50:09 (1 week ago)	🛡️ Honeypot [bsts-tpot-sensor]: Unsolicited SMB connection (dst port 445/tcp, src port 1839) to a pa ... show more 🛡️ Honeypot [bsts-tpot-sensor]: Unsolicited SMB connection (dst port 445/tcp, src port 1839) to a passive honeypot sensor. No legitimate SMB service is exposed here; this traffic is consistent with automated internet-wide scanning or exploitation attempts targeting SMB (e.g. EternalBlue-class vulnerabilities). show less	Hacking
🇫🇷 sthoyer.de	2026-07-12 16:10:53 (1 week ago)	Jul 12 18:10:53 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ... show more Jul 12 18:10:53 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=188.54.132.95 DST=173.212.223.67 LEN=52 TOS=0x18 PREC=0x20 TTL=112 ID=14395 DF PROTO=TCP SPT=2918 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇫🇷 Little Iguana	2026-07-12 16:09:44 (1 week ago)	trying to access non-authorized port	Port Scan
🇫🇷 sthoyer.de	2026-07-12 15:20:34 (1 week ago)	Jul 12 17:20:33 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ... show more Jul 12 17:20:33 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=188.54.132.95 DST=173.212.223.67 LEN=52 TOS=0x18 PREC=0x20 TTL=113 ID=8074 DF PROTO=TCP SPT=2609 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇨🇦 Luhte	2026-07-11 08:43:24 (1 week ago)	Unsolicited TCP connection from 188.54.132.95 to port 0 at 2026-07-11T08:43:24Z. Source IP completed ... show more Unsolicited TCP connection from 188.54.132.95 to port 0 at 2026-07-11T08:43:24Z. Source IP completed three-way handshake to non-public service on this host. Detected by automated intrusion monitoring. show less	Port Scan Hacking
🇵🇱 nfsec.pl	2026-07-09 23:26:29 (2 weeks ago)	Detected: TCP scan on port: 445 with flags: SYN	Port Scan

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 94.231.206.34

🇰🇷 58.224.62.29

🇳🇱 45.148.10.157

🇨🇳 27.21.31.84

🇨🇳 14.103.112.114

🇫🇮 204.168.201.95

🇦🇴 193.163.125.98

🇷🇴 193.46.255.86

🇹🇭 165.154.51.193

🇺🇸 162.216.149.193

🇺🇸 140.235.135.119

🇮🇳 135.235.179.75

🇮🇳 135.235.137.229

🇺🇸 130.131.161.17

🇨🇳 118.212.122.95

🇮🇩 103.145.34.109

🇸🇬 94.231.206.106

🇱🇹 81.30.98.47

🇷🇴 80.94.92.179

🇺🇸 66.132.195.68