JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

95.133.252.146

Recent Activity

Abuse confidence score ?

100% Critical

44 reports

41 reporters · latest 6 hours ago

ISP	Verda Cloud Oy
Usage Type	Data Center/Web Hosting/Transit
ASN	AS198020
Domain Name	verda.com
Country	🇫🇮 Finland
City	Helsinki, Uusimaa

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 95.133.252.146

Export CSV

This IP address has been reported a total of 44 times from 41 distinct sources. 95.133.252.146 was first reported on October 11th 2026, and the most recent report was 6 hours ago. In the last 60 days, the top reporter locations were: Germany with 16 reports; France with 14 reports; United States of America with 5 reports. The most common categories in these recent reports were: Port Scan 42 times; Brute-Force 5 times; Hacking 3 times; SSH 3 times; Email Spam 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 abdullahmughal	2026-10-13 22:00:58 (6 hours ago)	Jaal Deceptive Lab: Unauthorized malicious activity observed. • Targets: PostgreSQL:5432 (38 session ... show more Jaal Deceptive Lab: Unauthorized malicious activity observed. • Targets: PostgreSQL:5432 (38 sessions between 2026-10-11 17:24 UTC and 2026-10-11 17:24 UTC) • Activity: • Attribution: Zero-egress deception sensor; passed 24h quarantine; research scanners excluded. show less	Brute-Force SSH
🇫🇷 abdullahmughal	2026-10-12 18:00:34 (1 day ago)	Jaal Deceptive Lab: Unauthorized malicious activity observed. • Targets: PostgreSQL:5432 (38 session ... show more Jaal Deceptive Lab: Unauthorized malicious activity observed. • Targets: PostgreSQL:5432 (38 sessions between 2026-10-11 17:24 UTC and 2026-10-11 17:24 UTC) • Activity: • Attribution: Zero-egress deception sensor; passed 24h quarantine; research scanners excluded. show less	Brute-Force SSH
🇺🇸 HamSammich	2026-10-12 00:59:51 (2 days ago)	Automated sensor: 3 port 5432 connection/probe attempts over the last 24h (latest 2026-10-12T00:59Z) ... show more Automated sensor: 3 port 5432 connection/probe attempts over the last 24h (latest 2026-10-12T00:59Z). show less	Port Scan Brute-Force
🇮🇪 wiredalter	2026-10-12 00:54:22 (2 days ago)	Blocked by UFW on vhVPS [15432/tcp] Source Port: 46295 TTL: 240 Packet Length: 40 TOS: 0x00 Analyze ... show more Blocked by UFW on vhVPS [15432/tcp] Source Port: 46295 TTL: 240 Packet Length: 40 TOS: 0x00 Analyzed by https://ip.wiredalter.com show less	Port Scan Brute-Force
🇭🇰 CyberFox	2026-10-12 00:52:24 (2 days ago)	5432/tcp,5434/tcp,6432/tcp (3 or more attempts)	Port Scan
🇫🇷 peter.pann	2026-10-11 22:04:41 (2 days ago)	Port scan: 26 blocked connection attempts to ports 5432,5433,5434,5435,6432,15432 (dropped by our ge ... show more Port scan: 26 blocked connection attempts to ports 5432,5433,5434,5435,6432,15432 (dropped by our geo-firewall). show less	Port Scan
🇫🇷 agroman93	2026-10-11 17:49:41 (2 days ago)	T-Pot honeypot: 87 hits on ports [5432, 5433, 5434, 5435, 6432, 15432] (automated)	Port Scan
🇫🇷 sthoyer.de	2026-10-11 17:36:49 (2 days ago)	Oct 11 19:36:00 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd: ... show more Oct 11 19:36:00 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=95.133.252.146 DST=173.212.223.67 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=34021 PROTO=TCP SPT=57588 DPT=5434 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 11 19:36:24 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=95.133.252.146 DST=173.212.223.67 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=34021 PROTO=TCP SPT=57588 DPT=5434 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 11 19:36:24 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=95.133.252.146 DST=173.212.223.67 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=34021 PROTO=TCP SPT=57588 DPT=5434 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 11 19:36:48 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=95.133.252.146 DST=173.212.223.67 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=34021 PROTO=TCP SPT=57588 DPT=5434 WINDOW=1024 R ... show less	Port Scan
🇩🇪 gnb	2026-10-11 17:34:09 (2 days ago)	2026-10-11T19:33:28.609185+02:00 atlas kernel: [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=95.133.25 ... show more 2026-10-11T19:33:28.609185+02:00 atlas kernel: [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=95.133.252.146 DST=(redacted) LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=34610 PROTO=TCP SPT=57588 DPT=5435 WINDOW=1024 RES=0x00 SYN URGP=0 2026-10-11T19:33:45.958060+02:00 atlas kernel: [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=95.133.252.146 DST=(redacted) LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=34610 PROTO=TCP SPT=57588 DPT=5435 WINDOW=1024 RES=0x00 SYN URGP=0 2026-10-11T19:34:08.977297+02:00 atlas kernel: [UFW BLOCK] IN=eth0 OUT= MAC=(redacted) SRC=95.133.252.146 DST=(redacted) LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=34610 PROTO=TCP SPT=57588 DPT=5435 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇩🇪 ValtonTahiri	2026-10-11 17:27:01 (2 days ago)	UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly as ... show more UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=95.133.252.146; proto=TCP; source_port=57588; target_port=6432 show less	Port Scan
🇫🇷 sthoyer.de	2026-10-11 17:21:46 (2 days ago)	Oct 11 19:20:00 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd: ... show more Oct 11 19:20:00 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=95.133.252.146 DST=173.212.223.67 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=19071 PROTO=TCP SPT=57588 DPT=15432 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 11 19:20:17 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=95.133.252.146 DST=173.212.223.67 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=19071 PROTO=TCP SPT=57588 DPT=15432 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 11 19:20:34 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=95.133.252.146 DST=173.212.223.67 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=19071 PROTO=TCP SPT=57588 DPT=15432 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 11 19:21:26 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=95.133.252.146 DST=173.212.223.67 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=5490 PROTO=TCP SPT=57588 DPT=5432 WINDOW=1024 ... show less	Port Scan
🇦🇹 hxsain	2026-10-11 17:20:44 (2 days ago)	Blocked by UFW on fr2 [5432/tcp] \| SPT: 57588 \| TTL: 244 \| LEN: 40 \| TOS: 0x00 • Reported by: github ... show more Blocked by UFW on fr2 [5432/tcp] \| SPT: 57588 \| TTL: 244 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇬🇧 Andrew	2026-10-11 17:17:28 (2 days ago)	Blocked by UFW (TCP on port 5435). Source port: 57588 TTL: 244 Packet length: 40 TOS: 0x00 This rep ... show more Blocked by UFW (TCP on port 5435). Source port: 57588 TTL: 244 Packet length: 40 TOS: 0x00 This report (for 95.133.252.146) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 chillcog.com	2026-10-11 17:15:44 (2 days ago)	Blocked by on honeypot [5434/tcp] \| SPT: 57588 \| TTL: 247 \| LEN: 40 \| TOS: 0x00 • Reported by: abuse ... show more Blocked by on honeypot [5434/tcp] \| SPT: 57588 \| TTL: 247 \| LEN: 40 \| TOS: 0x00 • Reported by: abuse.terraforge.fun show less	Port Scan
🇩🇪 london2038.com	2026-10-11 17:12:03 (2 days ago)	Connection atttempts against closed TCP ports Oct 11 18:30:45 BLOCK SRC=95.133.252.146 LEN=40 TOS=0x ... show more Connection atttempts against closed TCP ports Oct 11 18:30:45 BLOCK SRC=95.133.252.146 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=31399 PROTO=TCP SPT=55057 DPT=5433 WINDOW=1024 RES=0x00 SYN Oct 11 18:31:31 BLOCK SRC=95.133.252.146 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=31399 PROTO=TCP SPT=55057 DPT=5433 WINDOW=1024 RES=0x00 SYN Oct 11 19:12:02 BLOCK SRC=95.133.252.146 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=47189 PROTO=TCP SPT=57588 DPT=15432 WINDOW=1024 RES=0x00 SYN show less	Port Scan

Showing 1 to 15 of 44 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇷 5.239.240.2

🇬🇧 2a06:4880::1e

🇨🇳 218.206.136.24

🇺🇸 216.180.246.50

🇺🇸 216.25.89.135

🇹🇭 203.156.108.110

🇮🇳 203.145.143.163

🇺🇸 199.165.159.33

🇳🇱 195.178.110.26

🇧🇷 131.0.148.45

🇨🇳 114.241.216.41

🇸🇬 114.119.145.115

🇳🇱 109.160.32.157

🇺🇸 108.233.55.108

🇳🇱 104.250.184.30

🇫🇷 91.196.152.34

🇺🇸 66.132.195.98

🇺🇸 65.191.75.21

🇨🇳 58.58.12.78

🇵🇱 45.138.12.51