JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 195.5.154.235

195.5.154.235 was found in our database!

This IP was reported 67 times. Confidence of Abuse is 100%: ?

100%

ISP	PJSC MegaFon
Usage Type	Fixed Line ISP
ASN	AS20632
Hostname(s)	mail.npt.ru
Domain Name	megafon.ru
Country	🇷🇺 Russian Federation
City	Saint Petersburg, St.-Petersburg

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 195.5.154.235

Whois 195.5.154.235

IP Abuse Reports for 195.5.154.235:

This IP address has been reported a total of 67 times from 36 distinct sources. 195.5.154.235 was first reported on May 1st 2026, and the most recent report was 15 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 andrepcg	2026-06-23 05:36:13 (15 hours ago)	Port scanning (195.5.154.235 -> :4000)	Port Scan Brute-Force
🇫🇷 Petre 21_ip	2026-06-21 23:40:18 (1 day ago)	2026-06-22T01:40:17.730919+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c ... show more 2026-06-22T01:40:17.730919+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c0:69:11:b3:85:db:08:00 SRC=195.5.154.235 DST=155.133.26.57 LEN=70 TOS=0x00 PREC=0x00 TTL=51 ID=37762 DF PROTO=UDP SPT=42408 DPT=8082 LEN=50 ... show less	Port Scan
🇦🇹 urnilxfgbez	2026-06-21 22:45:00 (1 day ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇫🇷 900cm	2026-06-20 19:48:23 (3 days ago)	Jun 20 21:48:22 raspberrypi sshd[2392]: Failed password for root from 195.5.154.235 port 54100 ssh2 ... show more Jun 20 21:48:22 raspberrypi sshd[2392]: Failed password for root from 195.5.154.235 port 54100 ssh2 ... show less	Port Scan Brute-Force SSH
🇧🇩 Md Sakibur Rahman	2026-06-20 10:10:32 (3 days ago)	2026-06-20T16:10:30.704282+06:00 zabbix sshd[49124]: pam_unix(sshd:auth): authentication failure; lo ... show more 2026-06-20T16:10:30.704282+06:00 zabbix sshd[49124]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.5.154.235 user=root 2026-06-20T16:10:31.974836+06:00 zabbix sshd[49124]: Failed password for root from 195.5.154.235 port 51868 ssh2 ... show less	Brute-Force SSH
🇷🇸 Smel	2026-06-16 05:00:10 (1 week ago)	MH/MP Probe, Scan, Hack -	Port Scan Hacking
🇺🇸 kosada.com	2026-06-12 20:00:56 (1 week ago)	SSH vulnerability probing: banner exchange: Connection from 195.5.154.235 port 45396: invalid format ... show more SSH vulnerability probing: banner exchange: Connection from 195.5.154.235 port 45396: invalid format [preauth] show less	Port Scan SSH
🇫🇷 Neoloop	2026-06-11 14:33:05 (1 week ago)	Jun 11 16:32:58 athena sshd[1647539]: Failed password for root from 195.5.154.235 port 56198 ssh2 Ju ... show more Jun 11 16:32:58 athena sshd[1647539]: Failed password for root from 195.5.154.235 port 56198 ssh2 Jun 11 16:33:00 athena sshd[1647575]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.5.154.235 user=root Jun 11 16:33:02 athena sshd[1647575]: Failed password for root from 195.5.154.235 port 56200 ssh2 Jun 11 16:33:03 athena sshd[1647652]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.5.154.235 user=root Jun 11 16:33:04 athena sshd[1647652]: Failed password for root from 195.5.154.235 port 56212 ssh2 ... show less	Brute-Force SSH
Anonymous	2026-06-10 11:26:40 (1 week ago)	Jun 10 13:25:04 server2 sshd[1837957]: Failed password for invalid user student4 from 195.5.154.235 ... show more Jun 10 13:25:04 server2 sshd[1837957]: Failed password for invalid user student4 from 195.5.154.235 port 56886 ssh2 Jun 10 13:26:07 server2 sshd[1838002]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.5.154.235 user=root Jun 10 13:26:09 server2 sshd[1838002]: Failed password for root from 195.5.154.235 port 49044 ssh2 Jun 10 13:26:37 server2 sshd[1838017]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.5.154.235 user=root Jun 10 13:26:39 server2 sshd[1838017]: Failed password for root from 195.5.154.235 port 59588 ssh2 ... show less	Brute-Force SSH
🇺🇸 Cyber Crusader	2026-06-10 04:28:44 (1 week ago)	Hundreds of Attempts (at least) to Connect to and Access Firewall Ports	Port Scan Hacking Brute-Force
🇺🇸 aks4226	2026-06-08 16:20:30 (2 weeks ago)	Brute force on SSH.	SSH Brute-Force
🇺🇸 RAP	2026-06-07 16:53:23 (2 weeks ago)	2026-06-07 16:53:23 UTC Unauthorized activity to TCP port 22. SSH	SSH
🇬🇧 PeravixGroup	2026-06-06 07:09:56 (2 weeks ago)	Honeypot detection: Remote Desktop Protocol (RDP) brute-force attempt on port 3389. Severity: HIGH. ... show more Honeypot detection: Remote Desktop Protocol (RDP) brute-force attempt on port 3389. Severity: HIGH. Aaran.cloud show less	Brute-Force Hacking
🇧🇷 wagnerbocchi	2026-06-05 12:51:40 (2 weeks ago)	2026-06-05T09:51:32.655459-03:00 pentest sshd[3606946]: pam_unix(sshd:auth): authentication failure; ... show more 2026-06-05T09:51:32.655459-03:00 pentest sshd[3606946]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.5.154.235 user=root 2026-06-05T09:51:34.789255-03:00 pentest sshd[3606946]: Failed password for root from 195.5.154.235 port 38736 ssh2 2026-06-05T09:51:36.907974-03:00 pentest sshd[3606969]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.5.154.235 user=root 2026-06-05T09:51:38.925941-03:00 pentest sshd[3606969]: Failed password for root from 195.5.154.235 port 35888 ssh2 ... show less	Brute-Force SSH
🇷🇸 Scan	2026-06-05 01:31:27 (2 weeks ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking

Showing 1 to 15 of 67 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.228

🇺🇸 2607:f8b0:4023:1009::124

🇳🇱 204.76.203.206

🇳🇱 195.178.110.30

🇨🇷 179.48.248.245

🇳🇵 103.163.182.8

🇨🇿 91.224.90.50

🇳🇱 213.176.16.100

🇮🇳 206.1.62.191

🇧🇷 187.111.28.131

🇰🇷 210.178.5.231

🇺🇸 195.184.76.34

🇨🇳 183.199.242.154

🇺🇸 173.230.155.151

🇩🇪 167.94.146.65

🇰🇼 37.34.237.45

🇺🇸 20.169.106.78

🇺🇸 2607:f8b0:4001:c58::126

🇺🇸 172.253.1.25

🇸🇳 41.82.50.218