JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 95.111.242.148

95.111.242.148 was found in our database!

This IP was reported 25 times. Confidence of Abuse is 100%: ?

100%

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS51167
Hostname(s)	vmi3203776.contaboserver.net
Domain Name	contabo.com
Country	🇫🇷 France
City	Lauterbourg, Grand Est

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 95.111.242.148

Whois 95.111.242.148

IP Abuse Reports for 95.111.242.148:

This IP address has been reported a total of 25 times from 20 distinct sources. 95.111.242.148 was first reported on June 23rd 2026, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 SMi-Web	2026-06-24 19:23:02 (3 days ago)	Blocked by firewall on hugin [5906/tcp] \| Rule: UFW \| SPT: 43093 \| TTL: 247 \| LEN: 44 \| TOS: 0x00 • ... show more Blocked by firewall on hugin [5906/tcp] \| Rule: UFW \| SPT: 43093 \| TTL: 247 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 [email protected]	2026-06-24 14:25:48 (4 days ago)	ASN: AS51167 Contabo GmbH. Country: FR. Ports: 5901,5906. Proto: TCP. Observations: 2. AbuseScore: 1 ... show more ASN: AS51167 Contabo GmbH. Country: FR. Ports: 5901,5906. Proto: TCP. Observations: 2. AbuseScore: 100/100 show less	Port Scan
🇺🇸 micropedro	2026-06-24 06:16:40 (4 days ago)	3 incidents: port scanning. First: 2026-06-23 18:24, Last: 2026-06-24 02:16 UTC. Triggers: ufw-repea ... show more 3 incidents: port scanning. First: 2026-06-23 18:24, Last: 2026-06-24 02:16 UTC. Triggers: ufw-repeater,non-public-port,firewall-tcp. show less	Port Scan
🇺🇸 micropedro	2026-06-24 06:16:28 (4 days ago)	3 incidents: port scanning. First: 2026-06-23 18:24, Last: 2026-06-24 02:16 UTC. Triggers: non-publi ... show more 3 incidents: port scanning. First: 2026-06-23 18:24, Last: 2026-06-24 02:16 UTC. Triggers: non-public-port,firewall-tcp,ufw-repeater. show less	Port Scan
🇬🇧 Nov	2026-06-24 01:29:30 (4 days ago)	Unauthorized access attempt (tcp/5901)	Port Scan
🇦🇹 centurion	2026-06-24 01:21:01 (4 days ago)	Blocked by UFW on cloud [5901/tcp] Source port: 42653 TTL: 247 Packet length: 44 TOS: 0x00 This rep ... show more Blocked by UFW on cloud [5901/tcp] Source port: 42653 TTL: 247 Packet length: 44 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇳🇱 VMHeaven.io	2026-06-23 23:48:37 (4 days ago)	Blocked by UFW [5901/tcp] Source port: 42669 TTL: 243 Packet length: 44	Port Scan
🇬🇧 essinghigh	2026-06-23 23:43:19 (4 days ago)	IPS Detection: 95.111.242.148 -> DPT: 5901	Port Scan
🇩🇪 zupan	2026-06-23 22:36:06 (4 days ago)	Blocked by UFW on vps [5901/tcp] \| SPT: 42669 \| TTL: 243 \| LEN: 44 \| TOS: 0x00 • Reported by: github ... show more Blocked by UFW on vps [5901/tcp] \| SPT: 42669 \| TTL: 243 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 MPL	2026-06-23 22:18:18 (4 days ago)	tcp/5901	Port Scan
🇫🇮 6kilowatti	2026-06-23 21:02:39 (4 days ago)	2026-06-24T00:02:38.447613+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:78:9a:18 ... show more 2026-06-24T00:02:38.447613+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:78:9a:18:bd:57:7e:08:00 SRC=95.111.242.148 DST=5.61.88.83 LEN=44 TOS=0x00 PREC=0x00 TTL=242 ID=45421 PROTO=TCP SPT=42669 DPT=5901 WINDOW=1025 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇳🇱 BIV	2026-06-23 20:30:42 (4 days ago)	Honeypot multi-source hit. Sources: tpot:P0f,tpot:Suricata. Ports: 5901. Automated tiered (T-Pot+DSh ... show more Honeypot multi-source hit. Sources: tpot:P0f,tpot:Suricata. Ports: 5901. Automated tiered (T-Pot+DShield). show less	Port Scan Hacking
🇩🇪 ValtonTahiri	2026-06-23 19:58:15 (4 days ago)	UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly as ... show more UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=95.111.242.148; proto=TCP; source_port=42653; target_port=5901; flags=SYN show less	Port Scan
🇫🇮 6kilowatti	2026-06-23 18:33:15 (4 days ago)	2026-06-23T21:33:14.568929+03:00 mummo kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:d6:a5:bc:00: ... show more 2026-06-23T21:33:14.568929+03:00 mummo kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:d6:a5:bc:00:00:5e:00:01:58:08:00 SRC=95.111.242.148 DST=83.148.240.21 LEN=44 TOS=0x00 PREC=0x00 TTL=244 ID=12295 PROTO=TCP SPT=42669 DPT=5901 WINDOW=1025 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 Cyber Crusader	2026-06-23 18:08:32 (4 days ago)	Hundreds of Attempts (at least) to Connect to and Access Firewall Ports	Port Scan Hacking Brute-Force

Showing 1 to 15 of 25 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2607:f8b0:4001:c34::121

🇭🇰 159.138.156.157

🇺🇸 158.94.187.104

🇹🇷 94.154.43.36

🇱🇻 81.30.98.44

🇸🇬 43.160.233.2

🇭🇰 2404:6800:4005:c08::122

🇹🇷 176.91.148.227

🇺🇸 172.174.5.146

🇷🇺 94.233.127.194

🇮🇩 36.68.186.7

🇷🇺 31.173.0.140

🇻🇳 14.225.206.171

🇺🇸 192.236.143.131

🇭🇰 119.8.30.89

🇸🇬 43.156.61.33

🇬🇧 5.226.140.52

🇺🇸 138.197.97.170

🇮🇳 103.59.202.218

🇺🇸 74.235.107.35