JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 95.214.53.157

95.214.53.157 was found in our database!

This IP was reported 2,813 times. Confidence of Abuse is 100%: ?

100%

ISP	MEVSPACE sp. z o.o.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS201814
Domain Name	mevspace.com
Country	🇵🇱 Poland
City	Warsaw, Mazovia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 95.214.53.157

Whois 95.214.53.157

IP Abuse Reports for 95.214.53.157:

This IP address has been reported a total of 2,813 times from 135 distinct sources. 95.214.53.157 was first reported on March 24th 2024, and the most recent report was 8 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 thororen	2026-06-19 17:16:18 (8 minutes ago)	Blocked by UFW [10800/tcp] Source port: 37579 TTL: 241 Packet length: 40 TOS: 0x00 This report was ... show more Blocked by UFW [10800/tcp] Source port: 37579 TTL: 241 Packet length: 40 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇧🇷 diego	2026-06-19 17:12:21 (12 minutes ago)	[rede-168-134] 06/19/2026-14:12:20.923601, 95.214.53.157, Protocol: 6, ET CINS Active Threat Intelli ... show more [rede-168-134] 06/19/2026-14:12:20.923601, 95.214.53.157, Protocol: 6, ET CINS Active Threat Intelligence Poor Reputation IP group 137 show less	Hacking
🇩🇪 Admins@FBN	2026-06-19 17:04:22 (20 minutes ago)	FW-PortScan: Traffic Blocked srcport=45435 dstport=10800	Port Scan
🇩🇪 Admins@FBN	2026-06-19 16:26:55 (57 minutes ago)	FW-PortScan: Traffic Blocked srcport=60754 dstport=16379	Port Scan
🇧🇷 diego	2026-06-19 16:15:43 (1 hour ago)	[rede-arem1] 06/19/2026-13:15:42.908907, 95.214.53.157, Protocol: 6, ET CINS Active Threat Intellige ... show more [rede-arem1] 06/19/2026-13:15:42.908907, 95.214.53.157, Protocol: 6, ET CINS Active Threat Intelligence Poor Reputation IP group 137 show less	Hacking
🇩🇪 Admins@FBN	2026-06-19 16:10:05 (1 hour ago)	FW-PortScan: Traffic Blocked srcport=48120 dstport=16379	Port Scan
🇺🇸 MPL	2026-06-19 16:02:29 (1 hour ago)	tcp ports: 16379,10800 (47 or more attempts)	Port Scan
🇨🇭 SOC [GOLINE SA]	2026-06-19 15:54:05 (1 hour ago)	[RoutePulse \| 2026-06-19T15:54:04Z] ATTACK: Threat IP Active SOURCE: 95.214.53.157 · AS201814 MEVSPA ... show more [RoutePulse \| 2026-06-19T15:54:04Z] ATTACK: Threat IP Active SOURCE: 95.214.53.157 · AS201814 MEVSPACE sp. z o.o. · Poland EVIDENCE: severity=critical · 16 flows · 61 KB INTEL: AbuseIPDB 100% (1309 reports) \| feeds: URLhaus API (full),Wazuh SIEM — Suricata IDS (2) \| RoutePulse score 99/100 24H PERSISTENCE: 131 events (SIEM Firewall Scan×116, Threat IP Active×10, Host Baseline Shift×5) CONVICTION: Tier 4, LLR 9.11, 4.3 independent groups (multi-source SPRT) MITRE: T1071 Application Layer Protocol DETECTION: sFlow/IPFIX flow analysis + 14-detector ML stack (6-model weighted ensemble) + threat-intel correlation ACTION: Pre-blackhole intelligence report (live monitoring continues) show less	Hacking Exploited Host
🇧🇷 diego	2026-06-19 15:50:19 (1 hour ago)	[rede-168-134] 06/19/2026-12:50:19.520246, 95.214.53.157, Protocol: 6, ET CINS Active Threat Intelli ... show more [rede-168-134] 06/19/2026-12:50:19.520246, 95.214.53.157, Protocol: 6, ET CINS Active Threat Intelligence Poor Reputation IP group 137 show less	Hacking
🇳🇱 StopAbuse	2026-06-19 15:46:27 (1 hour ago)	tcp/3629 tcp/5678	Port Scan
🇳🇴 tmiland	2026-06-19 15:44:20 (1 hour ago)	Suricata Detected 64 attacks from 95.214.53.157.; ET CINS Active Threat Intelligence Poor Reputation ... show more Suricata Detected 64 attacks from 95.214.53.157.; ET CINS Active Threat Intelligence Poor Reputation IP group 132; IP: 95.214.53.157; Ports: 60365; Direction: to_server; Trigger: CINS; Category: Misc Attack; Severity: 2 show less	Brute-Force
🇩🇪 Admins@FBN	2026-06-19 15:30:58 (1 hour ago)	FW-PortScan: Traffic Blocked srcport=43457 dstport=3629	Port Scan
🇩🇪 acadeova	2026-06-19 15:29:50 (1 hour ago)	Blocked by UFW on vps2 [3629/tcp] Source port: 56908 TTL: 248 Packet length: 40 TOS: 0x00 This repo ... show more Blocked by UFW on vps2 [3629/tcp] Source port: 56908 TTL: 248 Packet length: 40 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇭🇰 pengpeng	2026-06-19 15:27:22 (1 hour ago)	monitor: on ser162528253480 \| port: 3629 \| ttl: 239 script: github.com/sefinek/UFW-AbuseIPDB-Report ... show more monitor: on ser162528253480 \| port: 3629 \| ttl: 239 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 SSP	2026-06-19 15:25:24 (1 hour ago)	Automatically generated from firewall_v2 logs on Server_ID: MIAPX1 Category: Port Scan Occurrences ... show more Automatically generated from firewall_v2 logs on Server_ID: MIAPX1 Category: Port Scan Occurrences: 174 Unique Ports: 12 Destination Ports: , 1, 4145, 1080, 4153, 5678, 3629, 16379, 10800, 10801, 3129, 3128 First Seen: 2026-06-18 15:25 UTC Last Seen: 2026-06-19 15:25 UTC show less	Port Scan

Showing 1 to 15 of 2813 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇷 181.16.173.245

🇳🇱 91.92.241.196

🇨🇳 59.82.83.158

🇬🇧 35.203.210.170

🇩🇪 213.209.159.227

🇺🇸 205.185.120.21

🇨🇴 177.93.57.42

🇺🇸 165.154.172.94

🇨🇳 118.196.34.237

🇸🇬 103.189.234.244

🇩🇪 45.129.242.233

🇬🇧 5.226.140.94

🇻🇳 210.211.122.97

🇦🇷 190.57.206.70

🇧🇷 189.56.0.19

🇨🇴 177.93.34.144

🇭🇰 172.253.237.19

🇮🇶 169.224.61.72

🇮🇳 152.52.245.142

🇺🇸 107.172.195.194