This IP address has been reported a total of
525
times from
127 distinct
sources.
192.142.24.156 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
TCP/6036,6037,9100,17000,17001 (49 packets total) over 7.0 days
Port Scan
Anonymous
Detected by router-side syslog over 72h. 54 inbound firewall DROPs (54 TCP) across 5 distinct destin ...
show moreDetected by router-side syslog over 72h. 54 inbound firewall DROPs (54 TCP) across 5 distinct destination port(s). Top targets: TCP/17000=12, TCP/6036=11, TCP/6037=11. First seen 2026-06-03T21:56Z, last seen 2026-06-05T20:34Z. Categories: Port Scan.
show less
Firewall: Within 2026-06-03 23:59:01 - 2026-06-04 08:09:03 CEST(+0200) identified: port scan from 19 ...
show moreFirewall: Within 2026-06-03 23:59:01 - 2026-06-04 08:09:03 CEST(+0200) identified: port scan from 192.142.24.156 on uncommon port/s: 17000(tcp:17000),17001(tcp:17001),6037(tcp:6037) (3 trials)
Fail2ban: Within 2026-06-03 23:59:01 - 2026-06-04 08:09:03 CEST(+0200) banned: 13 times by fail2ban[firewall]; 13 times by fail2ban[recidive]
show less
Graylog firewall DROP detected. Hits=5366, ASN=AS60064, Provider=HOSTPALACE DATACENTERS LTD, Country ...
show moreGraylog firewall DROP detected. Hits=5366, ASN=AS60064, Provider=HOSTPALACE DATACENTERS LTD, Country=NL, Range=192.142.24.0/24, AbuseScore=100, Reports=396
show less
Port Scan
Hacking
Brute-Force
Bad Web Bot
Exploited Host
Web App Attack
SSH
Category: Port Scan
Occurrences: 10
Unique Ports: 3
Destination Ports:
17000, 6036, 6037
Fir ...
show moreCategory: Port Scan
Occurrences: 10
Unique Ports: 3
Destination Ports:
17000, 6036, 6037
First Seen:
2026-06-05 19:46 UTC
Last Seen:
2026-06-05 20:35 UTC
Automatically generated from firewall logs on Server_ID: SP8888PX1.
show less
Unauthorized network connection attempt(s) via TCP/UDP port(s) from TI-mapped IP entity detected [Fo ...
show moreUnauthorized network connection attempt(s) via TCP/UDP port(s) from TI-mapped IP entity detected [Fortinet/Sentinel].
show less
Detected by router-side syslog over 72h. 52 inbound firewall DROPs (52 TCP) across 5 distinct destin ...
show moreDetected by router-side syslog over 72h. 52 inbound firewall DROPs (52 TCP) across 5 distinct destination port(s). Top targets: TCP/17000=12, TCP/17001=10, TCP/6036=10. First seen 2026-06-03T21:56Z, last seen 2026-06-05T18:47Z. Categories: Port Scan.
show less
Jun 5 14:28:16 192.142.24.156 TCP SPT=55973 DPT=17001 SYN
Jun 5 15:56:09 192.142.24.156 TCP SPT=57 ...
show moreJun 5 14:28:16 192.142.24.156 TCP SPT=55973 DPT=17001 SYN
Jun 5 15:56:09 192.142.24.156 TCP SPT=57038 DPT=17000 SYN
Jun 5 16:29:54 192.142.24.156 TCP SPT=43512 DPT=6036 SYN
...
show less
Port Scan
Anonymous
Honeypot hit: Suspicious payload (possible command injection); 17000 [4] TCP
Reported by: https://gi ...
show moreHoneypot hit: Suspicious payload (possible command injection); 17000 [4] TCP
Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB
show less
Jun 5 14:04:37 192.142.24.156 TCP SPT=32898 DPT=17001 SYN
Jun 5 15:04:27 192.142.24.156 TCP SPT=45 ...
show moreJun 5 14:04:37 192.142.24.156 TCP SPT=32898 DPT=17001 SYN
Jun 5 15:04:27 192.142.24.156 TCP SPT=45238 DPT=9100 SYN
Jun 5 15:46:57 192.142.24.156 TCP SPT=37682 DPT=17000
...
show less
Port Scan
Showing 1 to
15
of 525 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩