This IP address has been reported a total of
80
times from
70 distinct
sources.
203.231.254.118 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
*Port Scan* detected from 203.231.254.118 (KR/South Korea/-). 11 hits in the last 110 seconds (0-143 ...
show more*Port Scan* detected from 203.231.254.118 (KR/South Korea/-). 11 hits in the last 110 seconds (0-143)
show less
UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly as ...
show moreUFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=203.231.254.118; proto=TCP; source_port=34181; target_port=88; flags=SYN
show less
Malicious activity detected: web_attack
Server: commstackbc (185.127.18.66)
Attack: web_attack
Time ...
show moreMalicious activity detected: web_attack
Server: commstackbc (185.127.18.66)
Attack: web_attack
Timestamp: 2026-09-01 12:46:46 UTC
Log evidence:
09/01/2026-12:46:44.960695 [**] [1:1000101:2] SECURITY Port Scan Detected - Multiple Unauthorized Ports [**] [Classification: Attempted Information Leak] [Priority: 1] {TCP} 203.231.254.118:60497 -> 185.127.18.66:995
09/01/2026-12:46:45.592531 [**] [1:1000101:2] SECURITY Port Scan Detected - Multiple Unauthorized Ports [**] [Classification: Attempted Information Leak] [Priority: 1] {TCP} 203.231.254.118:43440 -> 185.127.18.66:444
show less
Port Scan
Brute-Force
Anonymous
Port Scan ( 1 x 37 ) ( 1 x 106 ) ( 1 x 389 ) ( 1 x 1433 ) ( 1 x 3389 ) ( 1 x 4899 ) ( 1 x 5060 ) ( 1 ...
show morePort Scan ( 1 x 37 ) ( 1 x 106 ) ( 1 x 389 ) ( 1 x 1433 ) ( 1 x 3389 ) ( 1 x 4899 ) ( 1 x 5060 ) ( 1 x 5432 ) ( 1 x 9090 ) ( 1 x 32768 )
show less
Unsolicited SSH (TCP/22) connection attempts blocked at edge firewall; no public SSH service is expo ...
show moreUnsolicited SSH (TCP/22) connection attempts blocked at edge firewall; no public SSH service is exposed.
show less