201.59.130.254

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
37% Elevated
20 reports
10 reporters · latest 2 weeks ago
ISP
V tal
Usage Type
Fixed Line ISP
ASN
AS7738
Domain Name
vtal.com
Country
🇧🇷 Brazil
City
Vitoria, Espirito Santo
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
20 from 10 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇷🇺 Russian Federation 8 🇧🇷 Brazil 5 🇩🇪 Germany 3
Most common categories Port Scan 12 Exploited Host 9 DDoS Attack 8 Hacking 5 Brute-Force 4
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 Cyber Crusader
Hundreds of Attempts (at least) to Connect to and Access Firewall Ports
Port Scan Hacking Brute-Force
🇩🇪 reznekcs
Blocked by UFW firewall
Brute-Force
🇩🇪 Admins@FBN
FW-PortScan: Traffic Blocked srcport=45005 dstport=40404
Port Scan
🇧🇷 cibersecoptidata
Port scan / Unsolicited traffic.
Port Scan
🇧🇷 ICS Labs
ICS Labs threat intelligence (ICS Feeds): Exploited Host. Last observed 2026-10-24 UTC.
Exploited Host
🇮🇳 Mr.Singh
NFT blocked 201.59.130.254 on 23-Oct-2026..
Port Scan Brute-Force
🇷🇺 AbuseIPDB informer
nfdump top talker: 201.59.130.254 | first seen 2026-10-13 08:10:33.472 | duration 00:00:00.069 | flows=1 | packets=27621 | bytes=20.4 M | pps=396 | bps=2.3 M | bpp=739 | proto=any
DDoS Attack Port Scan Exploited Host
🇷🇺 AbuseIPDB informer
nfdump top talker: 201.59.130.254 | first seen 2026-10-12 20:31:41.696 | duration 00:00:00.070 | flows=5 | packets=205623 | bytes=145.6 M | pps=2910 | bps=16.5 M | bpp=707 | proto=udp
DDoS Attack Exploited Host
🇷🇺 AbuseIPDB informer
nfdump top talker: 201.59.130.254 | first seen 2026-10-12 19:55:34.400 | duration 00:00:00.213 | flows=11 | packets=797940 | bytes=577.9 M | pps=3737 | bps=21.7 M | bpp=724 | proto=udp
DDoS Attack Exploited Host
🇷🇺 AbuseIPDB informer
nfdump top talker: 201.59.130.254 | first seen 2026-10-12 19:27:18.912 | duration 00:00:00.070 | flows=1 | packets=35805 | bytes=26.5 M | pps=506 | bps=3.0 M | bpp=739 | proto=udp
DDoS Attack Exploited Host
🇷🇺 AbuseIPDB informer
nfdump top talker: 201.59.130.254 | first seen 2026-10-12 12:25:08.224 | duration 00:00:00.227 | flows=5 | packets=181071 | bytes=130.6 M | pps=797 | bps=4.6 M | bpp=721 | proto=udp
DDoS Attack Exploited Host
🇷🇺 AbuseIPDB informer
nfdump top talker: 201.59.130.254 | first seen 2026-10-09 11:30:29.120 | duration 00:00:00.077 | flows=1 | packets=22506 | bytes=17.0 M | pps=290 | bps=1.8 M | bpp=755 | proto=any
DDoS Attack Port Scan Exploited Host
🇷🇺 AbuseIPDB informer
nfdump top talker: 201.59.130.254 | first seen 2026-10-08 13:20:05.760 | duration 00:00:00.073 | flows=5 | packets=215853 | bytes=158.4 M | pps=2948 | bps=17.3 M | bpp=733 | proto=any
DDoS Attack Port Scan Exploited Host
🇧🇷 cibersecoptidata
Port scan / Unsolicited traffic.
Port Scan
🇺🇸 Cyber Crusader
Hundreds of Attempts (at least) to Connect to and Access Firewall Ports
Port Scan Hacking Brute-Force

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇲🇽 201.149.53.243
🇪🇸 159.253.248.70
🇰🇷 119.203.240.122
🇳🇱 77.239.124.62
🇺🇸 20.84.48.144
🇳🇱 203.55.131.4
🇻🇪 200.44.211.78
🇺🇸 136.176.223.82
🇹🇭 118.194.250.113
🇮🇳 110.227.211.82
🇨🇳 103.191.243.96
🇧🇩 103.56.209.249
🇺🇸 40.124.113.127
🇫🇮 35.228.194.248
🇬🇧 35.203.210.208
🇿🇦 197.184.79.136
🇦🇺 194.223.170.226
🇨🇳 140.249.189.35
🇸🇦 77.31.67.61
🇲🇽 201.163.73.88
feedback