JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 185.254.30.159

185.254.30.159 was found in our database!

This IP was reported 9 times. Confidence of Abuse is 12%: ?

12%

ISP	Mirac Dogan trading as Perminet Technology
Usage Type	Data Center/Web Hosting/Transit
ASN	AS60446
Domain Name	perminet.com
Country	🇹🇷 Turkey
City	Basaksehir, Istanbul

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 185.254.30.159

Whois 185.254.30.159

IP Abuse Reports for 185.254.30.159:

This IP address has been reported a total of 9 times from 6 distinct sources. 185.254.30.159 was first reported on March 5th 2026, and the most recent report was 7 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 SeczarSecureOps	2026-06-13 09:17:41 (7 hours ago)	Auto-blocked by Seczar SecureOps — DNS Flood / Tunneling Suspected (4615 events in 5min) at 2026-06- ... show more Auto-blocked by Seczar SecureOps — DNS Flood / Tunneling Suspected (4615 events in 5min) at 2026-06-13 09:17 show less	Web App Attack
🇹🇷 pamircil	2026-06-04 03:01:14 (1 week ago)	🍯 WinnieThePooh Honeypot : Botnet Activity (UDP/5060) 💀	Hacking Brute-Force SSH
🇹🇷 pamircil	2026-05-31 00:00:45 (1 week ago)	🍯 WinnieThePooh Honeypot : Botnet Activity (UDP/5060) 💀	Hacking Brute-Force SSH
🇨🇭 pingusurmars	2026-03-11 13:30:31 (3 months ago)	Blocked by UFW on amperetwo [3128/tcp] Source port: 60826 TTL: 48 Packet length: 52 TOS: 0x00 This ... show more Blocked by UFW on amperetwo [3128/tcp] Source port: 60826 TTL: 48 Packet length: 52 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-03-11 13:11:46 (3 months ago)	Mar 11 08:55:17 localhost kernel: [101579197.397417] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:9 ... show more Mar 11 08:55:17 localhost kernel: [101579197.397417] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=185.254.30.159 DST=[mungedIP2] LEN=52 TOS=0x00 PREC=0x40 TTL=42 ID=33453 PROTO=TCP SPT=53343 DPT=3128 WINDOW=65535 RES=0x00 SYN URGP=0 Mar 11 08:55:17 localhost kernel: [101579197.397425] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=185.254.30.159 DST=[mungedIP2] LEN=52 TOS=0x00 PREC=0x40 TTL=42 ID=33453 PROTO=TCP SPT=53343 DPT=3128 SEQ=72446161 ACK=0 WINDOW=65535 RES=0x00 SYN URGP=0 OPT (0204059C0103030801010402) Mar 11 09:11:45 localhost kernel: [101580185.879412] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=185.254.30.159 DST=[mungedIP2] LEN=52 TOS=0x00 PREC=0x40 TTL=42 ID=16987 PROTO=TCP SPT=44506 DPT=3128 WINDOW=65535 RES=0x00 SYN URGP=0 Mar 11 09:11:45 localhost kernel: [101580185.879421] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=185.254.30 show less	Port Scan
🇩🇪 phil2k	2026-03-05 20:26:37 (3 months ago)	Firewall: Within 2026-03-05 07:26:27 - 2026-03-05 07:34:17 CET(+0100) identified: unallowed access f ... show more Firewall: Within 2026-03-05 07:26:27 - 2026-03-05 07:34:17 CET(+0100) identified: unallowed access from 185.254.30.159 on port 3128(tcp:3128) (1 trial) Fail2ban: Within 2026-03-05 07:26:27 - 2026-03-05 07:34:18 CET(+0100) banned: 4 times by fail2ban[firewall]; 4 times by fail2ban[recidive] show less	Port Scan Brute-Force
🇩🇪 phil2k	2026-03-05 06:34:19 (3 months ago)	fail2ban:firewall:2026-03-05T07:26:27.689463+01:00 <SRV> firewall: filter IN=<ANONYMIZED_INTERFACE> ... show more fail2ban:firewall:2026-03-05T07:26:27.689463+01:00 <SRV> firewall: filter IN=<ANONYMIZED_INTERFACE> OUT= MAC=<ANONYMIZED_MAC> SRC=185.254.30.159 DST=<PRIVATE_IPv4> LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=54321 PROTO=TCP SPT=45234 DPT=3128 WINDOW=65535 RES=0x00 SYN URGP=0 2026-03-05T07:34:17.633332+01:00 <SRV> firewall: filter IN=<ANONYMIZED_INTERFACE> OUT= MAC=<ANONYMIZED_MAC> SRC=185.254.30.159 DST=<ANONYMIZED_IP> LEN=40 TOS=0x00 PREC=0x00 TTL=237 ID=54321 PROTO=TCP SPT=39120 DPT=3128 WINDOW=65535 RES=0x00 SYN URGP=0 show less	DDoS Attack Port Scan
🇨🇭 pingusurmars	2026-03-05 06:28:24 (3 months ago)	Blocked by UFW on amperetwo [3128/tcp] Source port: 54446 TTL: 238 Packet length: 40 TOS: 0x00 This ... show more Blocked by UFW on amperetwo [3128/tcp] Source port: 54446 TTL: 238 Packet length: 40 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇦🇺 trentwiles.com	2026-03-05 06:26:21 (3 months ago)	Unauthorized connection attempt detected from IP address 185.254.30.159 to port 3128 [SYD]	Port Scan

Showing 1 to 9 of 9 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇺 202.155.187.200

🇹🇭 150.95.82.21

🇻🇳 59.153.220.117

🇭🇰 47.56.137.181

🇻🇳 14.230.111.202

🇰🇷 175.203.61.49

🇺🇸 172.253.8.146

🇻🇳 125.212.244.35

🇬🇪 91.239.206.123

🇩🇪 69.5.169.169

🇺🇸 66.132.172.116

🇮🇳 59.179.31.237

🇺🇸 45.79.128.205

🇲🇦 41.250.84.25

🇳🇱 5.187.35.26

🇺🇸 3.131.24.55

🇰🇷 175.201.203.181

🇺🇸 138.197.204.198

🇺🇸 107.174.194.43

🇮🇳 103.127.30.137