195.240.5.28

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
10% Caution
22 reports
12 reporters · latest 2 weeks ago
ISP
KPN B.V.
Usage Type
Fixed Line ISP
ASN
AS1136
Hostname(s)
195-240-5-28.fixed.kpn.net
Domain Name
kpn.com
Country
🇳🇱 Netherlands
City
Zaandam, North Holland
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
22 from 12 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 2 🇷🇺 Russian Federation 1
Most common categories Bad Web Bot 3 Hacking 1 Web App Attack 1
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
Anonymous
Hacking Bad Web Bot Web App Attack
🇺🇸 鬼影233
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0
Bad Web Bot
🇺🇸 鬼影233
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36
Bad Web Bot
🇺🇸 鬼影233
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36
Bad Web Bot
🇺🇸 kosada.com
DDoS Attack Bad Web Bot
🇺🇸 鬼影233
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36
Bad Web Bot
🇺🇸 kosada.com
Web bot: denial-of-service flood
DDoS Attack Bad Web Bot
Anonymous
Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to bypass firewall/robots.txt restrictions in thread-skip.asp
Exploited Host Bad Web Bot
🇺🇸 kosada.com
Web bot: denial-of-service flood
DDoS Attack Bad Web Bot
🇹🇷 baku.hosting
CSF Auto Report: (imapd) Failed IMAP login from 195.240.5.28 (NL/The Netherlands/195-240-5-28.fixed.kpn.net): 4 in the last 3600 secs
Brute-Force Web App Attack
🇳🇱 RvdH
Unauthorized connection attempt from IP address 195.240.5.28 on port 993
Port Scan Brute-Force
🇦🇹 AustrianSimon
03 Jul 2026 17:35:51UTC:Distributed Brute Force Password Attack (smtp, ftp, imap, pop, ssh) including ip address 195.240.5.28
Brute-Force
🇳🇱 RvdH
Unauthorized connection attempt from IP address 195.240.5.28 on port 993
Port Scan Brute-Force
🇳🇱 RvdH
Unauthorized connection attempt from IP address 195.240.5.28 on port 993
Port Scan Brute-Force
🇩🇪 Vegascosmetics
(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated redirect. Vegas Security
DDoS Attack Hacking Exploited Host

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 45.148.10.13
🇧🇪 35.210.73.133
🇧🇪 35.206.140.186
🇸🇬 216.137.185.195
🇫🇷 193.163.89.222
🇦🇷 190.57.219.136
🇧🇷 187.40.215.162
🇩🇪 165.227.140.122
🇺🇸 165.22.191.10
🇲🇾 120.141.26.67
🇷🇺 109.184.34.3
🇷🇺 95.165.254.138
🇳🇱 85.155.15.13
🇫🇷 82.66.106.251
🇧🇷 45.183.93.165
🇺🇸 40.124.123.184
feedback