JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

185.242.3.254

Recent Activity

Abuse confidence score ?

100% Critical

3,109 reports

205 reporters · latest 16 minutes ago

ISP	Ghosty Networks LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS401626
Domain Name	ghostynetworks.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 185.242.3.254

This IP address has been reported a total of 3,109 times from 205 distinct sources. 185.242.3.254 was first reported on April 12th 2026, and the most recent report was 16 minutes ago. In the last 60 days, the top reporter locations were: United States of America with 86 reports; Germany with 66 reports; Brazil with 32 reports. The most common categories in these recent reports were: Port Scan 241 times; Hacking 48 times; Brute-Force 19 times; Exploited Host 11 times; Web App Attack 3 times; Other 5 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 SSP	2026-09-23 04:00:06 (16 minutes ago)	Automatically generated from firewall_v2 logs on SID:VTSP4 Category: Port Scan Occurrences: 20 Un ... show more Automatically generated from firewall_v2 logs on SID:VTSP4 Category: Port Scan Occurrences: 20 Unique Ports: 19 Destination Ports: 5400, 5401, 5406, 5408, 5414, 5415, 5416, 5428, 5429, 5431, 5432, 5434, 5435, 5437, 5441, 5446, 5451, 5452, 5455 First Seen: 2026-09-22 05:45 UTC Last Seen: 2026-09-23 04:00 UTC show less	Port Scan
🇩🇪 Admins@FBN	2026-09-23 03:51:04 (25 minutes ago)	FW-PortScan: Traffic Blocked srcport=23703 dstport=5455	Port Scan
🇩🇪 london2038.com	2026-09-23 03:49:03 (27 minutes ago)	Connection atttempts against closed TCP ports Sep 23 03:48:53 BLOCK SRC=185.242.3.254 LEN=52 TOS=0x0 ... show more Connection atttempts against closed TCP ports Sep 23 03:48:53 BLOCK SRC=185.242.3.254 LEN=52 TOS=0x00 PREC=0x00 TTL=115 ID=0 DF PROTO=TCP SPT=15429 DPT=5450 WINDOW=14600 RES=0x00 SYN Sep 23 04:20:15 BLOCK SRC=185.242.3.254 LEN=52 TOS=0x00 PREC=0x00 TTL=115 ID=0 DF PROTO=TCP SPT=19011 DPT=5451 WINDOW=14600 RES=0x00 SYN Sep 23 05:49:02 BLOCK SRC=185.242.3.254 LEN=52 TOS=0x00 PREC=0x00 TTL=115 ID=0 DF PROTO=TCP SPT=7237 DPT=5454 WINDOW=14600 RES=0x00 SYN show less	Port Scan
🇩🇪 EinfxchFinn	2026-09-23 03:46:26 (30 minutes ago)	Unauthorized connection attempt to port 5454 from 185.242.3.254	Port Scan
🇺🇸 COMPLEX	2026-09-23 03:44:00 (32 minutes ago)	Unsolicited TCP traffic \| Action: DROP \| Port 5454	Brute-Force
🇩🇪 zupan	2026-09-23 03:42:29 (33 minutes ago)	Blocked by UFW on vps [5454/tcp] \| SPT: 16048 \| TTL: 112 \| LEN: 52 \| TOS: 0x00 • Reported by: github ... show more Blocked by UFW on vps [5454/tcp] \| SPT: 16048 \| TTL: 112 \| LEN: 52 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇧🇷 diego	2026-09-23 03:36:26 (40 minutes ago)	[rede-top188] 09/23/2026-00:36:26.307300, 185.242.3.254, Protocol: 6, ET DROP Spamhaus DROP Listed T ... show more [rede-top188] 09/23/2026-00:36:26.307300, 185.242.3.254, Protocol: 6, ET DROP Spamhaus DROP Listed Traffic Inbound group 40 show less	Hacking
🇩🇪 Admins@FBN	2026-09-23 03:29:18 (47 minutes ago)	FW-PortScan: Traffic Blocked srcport=19421 dstport=5454	Port Scan
🇧🇷 diego	2026-09-23 03:17:33 (58 minutes ago)	[rede-168-134] 09/23/2026-00:17:33.631249, 185.242.3.254, Protocol: 6, ET DROP Spamhaus DROP Listed ... show more [rede-168-134] 09/23/2026-00:17:33.631249, 185.242.3.254, Protocol: 6, ET DROP Spamhaus DROP Listed Traffic Inbound group 40 show less	Hacking
🇫🇮 sonot	2026-09-23 03:02:22 (1 hour ago)	Blocked by UFW on mail [5452/tcp] \| SPT: 8678 \| TTL: 110 \| LEN: 52 \| TOS: 0x00 • Reported by: github ... show more Blocked by UFW on mail [5452/tcp] \| SPT: 8678 \| TTL: 110 \| LEN: 52 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 Admins@FBN	2026-09-23 03:01:18 (1 hour ago)	FW-PortScan: Traffic Blocked srcport=4333 dstport=5452	Port Scan
🇩🇪 andrepcg	2026-09-23 02:57:15 (1 hour ago)	Port scanning (185.242.3.254 -> :5452)	Port Scan Brute-Force
🇩🇪 chillcog.com	2026-09-23 02:56:25 (1 hour ago)	Blocked by on honeypot [5452/tcp] \| SPT: 7027 \| TTL: 117 \| LEN: 52 \| TOS: 0x00 • Reported by: abuse. ... show more Blocked by on honeypot [5452/tcp] \| SPT: 7027 \| TTL: 117 \| LEN: 52 \| TOS: 0x00 • Reported by: abuse.terraforge.fun show less	Port Scan
🇺🇸 schematics.cc	2026-09-23 02:55:16 (1 hour ago)	Blocked by on honeypot2 [5452/tcp] \| SPT: 17672 \| TTL: 122 \| LEN: 52 \| TOS: 0x00 • Reported by: abus ... show more Blocked by on honeypot2 [5452/tcp] \| SPT: 17672 \| TTL: 122 \| LEN: 52 \| TOS: 0x00 • Reported by: abuse.terraforge.fun show less	Port Scan
🇺🇸 SSP	2026-09-23 02:45:09 (1 hour ago)	Automatically generated from firewall_v2 logs on SID:VTMI2 Category: Port Scan Occurrences: 20 Un ... show more Automatically generated from firewall_v2 logs on SID:VTMI2 Category: Port Scan Occurrences: 20 Unique Ports: 18 Destination Ports: 5402, 5404, 5406, 5408, 5413, 5414, 5416, 5420, 5421, 5423, 5430, 5431, 5437, 5438, 5439, 5442, 5443, 5452 First Seen: 2026-09-22 06:20 UTC Last Seen: 2026-09-23 02:45 UTC show less	Port Scan

Showing 1 to 15 of 3109 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 196.251.121.140

🇧🇪 34.14.99.143

🇰🇷 211.252.108.197

🇹🇼 198.235.24.46

🇸🇬 168.144.98.157

🇺🇸 159.198.77.246

🇹🇷 85.103.105.227

🇹🇷 78.169.8.191

🇺🇸 64.23.228.145

🇱🇹 62.60.130.253

🇧🇷 45.160.84.51

🇺🇸 45.61.188.240

🇧🇷 16.5.0.239

🇹🇼 198.235.24.93

🇹🇼 198.235.24.82

🇧🇷 187.92.28.238

🇦🇷 181.26.0.6

🇦🇺 170.64.142.108

🇩🇪 167.172.187.132

🇮🇩 104.28.215.133