95.133.252.180

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
60% Elevated
14 reports
13 reporters · latest 1 week ago
ISP
Verda Cloud Oy
Usage Type
Data Center/Web Hosting/Transit
ASN
AS198020
Domain Name
verda.com
Country
🇫🇮 Finland
City
Helsinki, Uusimaa
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
14 from 13 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇫🇷 France 6 🇩🇪 Germany 3 🇳🇱 Netherlands 2
Most common categories Port Scan 13 Hacking 3 Web App Attack 1 Bad Web Bot 1 DDoS Attack 1
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇹🇭 Sawasdee
Port Scan ...
Port Scan
🇩🇪 phil2k
DDoS Attack Port Scan
🇫🇷 EDSL
[SRV-VPN1] Blocked by SysWarden Firewall (Port Scan / Probing)
Port Scan
🇳🇱 VMHeaven.io
Blocked by UFW [32400/tcp] Source port: 40445 TTL: 245 Packet length: 40
Port Scan
🇳🇱 ByeByte API
Port scan from this IP. Firewall dropped every packet. Targeted TCP ports: 32400. Single burst at 2026-10-30 06:07 UTC.
Port Scan
🇩🇪 Ilop
[hp-100] 2 unsolicited packets to honeypot ports 32400 (OCI DShield sensor)
Port Scan
🇬🇧 sandra361
Port scan detected: 11 attempts across 1 port (32400). | Evidence: REAPER_TARPIT: IN=enp1s0f0 SRC=95.133.252.180 LEN=135 TOS=0x00 PREC=0x00 TTL=56 ID=17316 DF PROTO=TCP SPT=51322 DPT=32400 WINDOW=64240 RES=0x00 ACK PSH URGP=0
Port Scan
🇫🇷 EvoX
🛡️ Honeypot [bsts-tpot-sensor]: HTTP/1.1 request on 32400 GET /identity User-Agent: Mozilla/5.0 Accept: */*; 32400 [1] TCP
Hacking Bad Web Bot
Anonymous
Blocked by firewall on hugin [32400/tcp] | Rule: UFW | SPT: 58294 | TTL: 249 | LEN: 40 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇫🇷 abunssr
Seen 2026-10-30T08:29:04+03:00 to 2026-10-30T08:29:04+03:00. Honeypot on closed TCP ports 32400: 1 session(s), taken for http. Paths: /identity.
Port Scan Web App Attack
Anonymous
Port Scan Brute-Force
🇫🇷 Kejult
Honeypot Finding: active TCP application payload captured by Honeytrap; 5 payload-bearing connection/event(s), 475 payload byte(s) total, maximum payload 95 byte(s). Target port(s): 32400.
Port Scan Hacking
🇫🇷 Kejult
Honeypot Finding: active TCP application payload captured by Honeytrap; 5 payload-bearing connection/event(s), 475 payload byte(s) total, maximum payload 95 byte(s). Target port(s): 32400.
Port Scan Hacking
🇺🇸 xmission.com
Blocked by UFW (TCP on 32400) Source port: 55495 TTL: 242 Packet length: 40 TOS: 0x00 This report (for 95.133.252.180) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇷🇺 194.154.92.163
🇧🇷 191.6.253.4
🇨🇳 120.48.44.127
🇹🇼 118.163.145.175
🇮🇹 94.177.195.107
🇧🇬 78.128.114.46
🇰🇷 218.150.184.241
🇩🇪 193.108.119.193
🇳🇱 181.215.115.186
🇺🇸 91.230.168.43
🇺🇸 91.230.168.40
🇺🇦 46.172.197.192
🇺🇸 4.150.188.1
🇺🇸 205.210.31.28
🇪🇬 197.50.128.183
🇧🇬 185.253.160.154
🇺🇸 174.67.188.35
🇵🇹 94.61.169.27
🇬🇧 93.89.136.139
🇻🇳 210.245.20.230
feedback