JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

95.104.252.4

Recent Activity

Abuse confidence score ?

39% Elevated

67 reports

40 reporters · latest 1 day ago

ISP	MTS PJSC
Usage Type	Fixed Line ISP
ASN	AS8359
Domain Name	mts.ru
Country	🇷🇺 Russian Federation
City	Norilsk, Krasnoyarsk Krai

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 95.104.252.4

Export CSV

This IP address has been reported a total of 67 times from 40 distinct sources. 95.104.252.4 was first reported on October 26th 2025, and the most recent report was 1 day ago. In the last 60 days, the top reporter locations were: Germany with 6 reports; France with 3 reports. The most common categories in these recent reports were: Port Scan 8 times; Hacking 2 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 IP Analyzer	2026-10-05 16:30:17 (1 day ago)	Unauthorized connection attempt from IP address 95.104.252.4 on Port 445(SMB)	Port Scan
🇫🇷 Coco Bongo	2026-10-03 06:30:22 (4 days ago)	1791009022 - 10/03/2026 08:30:22 Host: 95.104.252.4/95.104.252.4 Port: 445 TCP Blocked ...	Port Scan
🇩🇪 Mailguard-FRD	2026-09-29 23:15:44 (1 week ago)	1790723743 - 09/30/2026 01:15:43 Host: 95.104.252.4/95.104.252.4 Port: 445 TCP Blocked ...	Port Scan
Anonymous	2026-09-24 05:32:35 (1 week ago)	denied SMB access attempt. destination port 445.	Port Scan Hacking
🇫🇷 vtchost.com	2026-09-23 17:34:09 (1 week ago)	portscan on honeypot system ...	Port Scan
🇩🇪 IP Analyzer	2026-09-03 04:00:38 (1 month ago)	Unauthorized connection attempt from IP address 95.104.252.4 on Port 445(SMB)	Port Scan
🇫🇷 EvoX	2026-08-31 10:21:03 (1 month ago)	🛡️ Honeypot [bsts-tpot-sensor]: Unsolicited SMB connection (dst port 445/tcp, src port 51927) to a p ... show more 🛡️ Honeypot [bsts-tpot-sensor]: Unsolicited SMB connection (dst port 445/tcp, src port 51927) to a passive honeypot sensor. No legitimate SMB service is exposed here; this traffic is consistent with automated internet-wide scanning or exploitation attempts targeting SMB (e.g. EternalBlue-class vulnerabilities). show less	Hacking
Anonymous	2026-08-30 19:20:35 (1 month ago)	Unauthorized access (445/tcp/microsoft-ds)	Port Scan
🇩🇪 HoneyPot-FrPri	2026-08-25 15:27:57 (1 month ago)	1787671676 - 08/25/2026 17:27:56 Host: 95.104.252.4/95.104.252.4 Port: 445 TCP Blocked ...	Port Scan
🇫🇷 EvoX	2026-08-05 16:32:32 (2 months ago)	🛡️ Honeypot [bsts-tpot-sensor]: Unsolicited SMB connection (dst port 445/tcp, src port 61911) to a p ... show more 🛡️ Honeypot [bsts-tpot-sensor]: Unsolicited SMB connection (dst port 445/tcp, src port 61911) to a passive honeypot sensor. No legitimate SMB service is exposed here; this traffic is consistent with automated internet-wide scanning or exploitation attempts targeting SMB (e.g. EternalBlue-class vulnerabilities). show less	Hacking
🇫🇷 EvoX	2026-08-05 02:49:42 (2 months ago)	🛡️ Honeypot [bsts-tpot-sensor]: Unsolicited SMB connection (dst port 445/tcp, src port 62156) to a p ... show more 🛡️ Honeypot [bsts-tpot-sensor]: Unsolicited SMB connection (dst port 445/tcp, src port 62156) to a passive honeypot sensor. No legitimate SMB service is exposed here; this traffic is consistent with automated internet-wide scanning or exploitation attempts targeting SMB (e.g. EternalBlue-class vulnerabilities). show less	Hacking
Anonymous	2026-08-04 02:15:34 (2 months ago)	denied traffic to a honeypot network. destination port 445.	Port Scan Hacking
🇩🇪 crnpekgoz	2026-07-19 07:28:01 (2 months ago)	[PortScan] Risk=100 ASN=8359 (portscan) Port=445 HoneypotTrap=true Recidivist#2 \| Reported by Warden ... show more [PortScan] Risk=100 ASN=8359 (portscan) Port=445 HoneypotTrap=true Recidivist#2 \| Reported by WardenIPS: https://github.com/msncakma/WardenIPS show less	Port Scan
🇫🇷 thecocasio	2026-07-18 11:47:30 (2 months ago)	PortSentry honeypot: unsolicited TCP connection to closed decoy port 445 (SMB) on a host running no ... show more PortSentry honeypot: unsolicited TCP connection to closed decoy port 445 (SMB) on a host running no such service. Automated port-scan detection at 2026-07-18T11:47:30Z. show less	Port Scan
🇫🇷 zulzeen	2026-07-16 12:03:05 (2 months ago)	[incypit-web] Blocked by SysWarden Firewall [GEO] (SMB/Possible Ransomware Attack)	Hacking Brute-Force

Showing 1 to 15 of 67 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 222.220.102.32

🇮🇳 103.66.49.58

🇧🇬 78.128.113.22

🇺🇸 34.138.129.177

🇩🇪 34.40.59.136

🇯🇵 8.216.6.220

🇷🇺 178.57.11.157

🇹🇼 165.154.14.170

🇮🇳 122.168.123.73

🇹🇼 122.117.242.175

🇱🇹 77.90.185.20

🇺🇿 213.230.100.156

🇭🇰 203.218.70.58

🇸🇪 171.25.158.87

🇵🇭 103.91.142.112

🇷🇺 94.243.11.212

🇺🇸 54.85.109.140

🇮🇩 36.92.140.209

🇧🇷 35.247.195.90

🇳🇱 34.32.229.253