JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 185.5.254.136

185.5.254.136

Recent Activity

39 reports found in our database

93% ▲ ▲ ▲ Critical

Abuse confidence score ?

ISP

AS6723 LIMITED LIABILITY COMPANY

Usage Type

Fixed Line ISP

ASN

AS211190

Domain Name

as6723.net

Country

🇺🇦 Ukraine

City

Vinnytsya, Vinnytsia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Top Reporter Countries (Last 60 Days)

Example preview

Report Categories (Last 60 Days)

Example preview

Reports Activity

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 185.5.254.136:

This IP address has been reported a total of 39 times from 26 distinct sources. 185.5.254.136 was first reported on June 29th 2026, and the most recent report was 3 days ago. In the last 60 days, the top reporter locations were: United States of America with 10 reports; Germany with 9 reports; France with 5 reports. The most common categories in these recent reports were: Port Scan 21 times; Exploited Host 7 times; Brute-Force 6 times; Bad Web Bot 5 times; Hacking 5 times; Other 13 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Jochen Pretli	2026-09-04 11:41:57 (3 days ago)	connection to honeypot	Email Spam Port Scan
🇺🇸 xmission.com	2026-09-04 03:52:28 (4 days ago)	Blocked by UFW (TCP on 22) Source port: 53118 TTL: 54 Packet length: 60 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 22) Source port: 53118 TTL: 54 Packet length: 60 TOS: 0x00 This report (for 185.5.254.136) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan SSH Brute-Force
🇺🇸 RAP	2026-09-04 02:27:37 (4 days ago)	2026-09-04 02:27:37 UTC Unauthorized activity to TCP port 22. SSH	SSH
🇺🇸 gui-ying233	2026-09-03 15:23:59 (4 days ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 show less	Bad Web Bot
🇫🇮 6kilowatti	2026-09-01 18:37:53 (6 days ago)	2026-09-01T21:37:53.454631+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:78:9a:18 ... show more 2026-09-01T21:37:53.454631+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:78:9a:18:bd:57:7e:08:00 SRC=185.5.254.136 DST=5.61.88.83 LEN=60 TOS=0x00 PREC=0x00 TTL=47 ID=4201 DF PROTO=TCP SPT=36236 DPT=23 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇵🇱 mkey	2026-09-01 00:25:06 (1 week ago)	Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT \| PORTS ... show more Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT \| PORTS=23 \| HITS=2 \| IPSET=ADD \| FIRST=2026-09-01 02:19:10 \| LAST=2026-09-01 02:19:11. Last seen 2026-09-01 02:19:12. show less	Port Scan
🇬🇧 sandra361	2026-08-31 17:03:31 (1 week ago)	Port scan detected: 6 attempts across 2 ports (22,23). \| Evidence: REAPER_TARPIT: IN=enp1s0f0 SRC=18 ... show more Port scan detected: 6 attempts across 2 ports (22,23). \| Evidence: REAPER_TARPIT: IN=enp1s0f0 SRC=185.5.254.136 LEN=40 TOS=0x00 PREC=0x00 TTL=53 ID=3287 DF PROTO=TCP SPT=54440 DPT=23 WINDOW=65535 RES=0x00 ACK FIN URGP=0 show less	Port Scan
🇺🇸 pixelmemory.us	2026-08-31 03:26:53 (1 week ago)	2026-08-31T03:25:18 185.5.254.136 GET /Photos/SF%20Bay%20Photo/2005%20Bay%20to%20Breakers/4807.jpg M ... show more 2026-08-31T03:25:18 185.5.254.136 GET /Photos/SF%20Bay%20Photo/2005%20Bay%20to%20Breakers/4807.jpg Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 ... show less	Bad Web Bot
🇩🇪 banankicks	2026-08-27 12:04:46 (1 week ago)	Unauthorized connection attempt detected from IP address 185.5.254.136 to port 23 (banankicks-server ... show more Unauthorized connection attempt detected from IP address 185.5.254.136 to port 23 (banankicks-server) [b] show less	Brute-Force Exploited Host
🇩🇪 Admins@FBN	2026-08-25 11:22:03 (1 week ago)	FW-PortScan: Traffic Blocked srcport=36540 dstport=8980	Port Scan
🇺🇸 kosada.com	2026-08-25 11:06:15 (1 week ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇫🇷 security.rdmc.fr	2026-08-23 13:10:36 (2 weeks ago)	Port Scan Attack proto:TCP src:49254 dst:23	Port Scan
🇺🇦 URAN Publishing Service	2026-08-22 05:25:10 (2 weeks ago)	SQLi Attempt	Hacking SQL Injection Web App Attack
🇺🇸 gui-ying233	2026-08-20 15:26:46 (2 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 show less	Bad Web Bot
🇫🇷 Zkillu	2026-08-19 19:53:37 (2 weeks ago)	UDP flood (DDoS) vs AS215599: 2175 pkts / 3.11 MB to UDP 80 across 153 dst IP(s), 2026-08-19 21:46 t ... show more UDP flood (DDoS) vs AS215599: 2175 pkts / 3.11 MB to UDP 80 across 153 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host

Showing 1 to 15 of 39 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2604:a880:400:d1:0:4:efb0:6001

🇳🇱 193.176.31.234

🇧🇬 109.160.32.200

🇪🇹 102.213.69.56

🇨🇳 101.67.137.223

🇹🇷 78.172.205.162

🇨🇦 72.136.116.67

🇺🇸 64.62.156.124

🇱🇹 62.60.130.201

🇹🇼 35.229.168.104

🇨🇳 8.138.98.28

🇧🇪 207.175.146.227

🇲🇽 201.121.89.205

🇮🇳 182.76.115.214

🇦🇷 181.90.23.201

🇳🇱 178.128.252.231

🇳🇱 160.119.71.9

🇺🇸 146.190.140.13

🇨🇳 101.126.71.100

🇷🇴 92.118.39.71