38.54.27.234
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- LIGHT NODE LIMITED
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS154177
- Domain Name
- lightnode.com
- Country
- 🇧🇬 Bulgaria
- City
- Sofia, Sofia-Capital
Abuse Reports
Total reports
48 from
16 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇷🇸 Smel |
SQL/MH Probe, Scan, Hack -
|
Port Scan Hacking SQL Injection | |
| 🇩🇪 Jochen Pretli |
connection to honeypot
|
Email Spam Port Scan | |
| 🇬🇧 Joe-Mark |
Found ShadowWhisperer Unautherised Scan . proto=tcp . spt=55752 . dpt=143 . NFTABLES .
|
Port Scan Hacking | |
| 🇫🇷 uthul |
T-Pot honeypot: 1 hits on ports [] (automated)
|
Port Scan | |
| 🇩🇪 Jochen Pretli |
connection to honeypot
|
Email Spam Port Scan | |
| 🇬🇧 Joe-Mark |
Found ShadowWhisperer Unautherised Scan . proto=tcp . spt=64541 . dpt=143 . NFTABLES .
|
Port Scan Hacking | |
| 🇺🇸 MPL |
tcp/8020 (4 or more attempts)
|
Port Scan | |
| 🇬🇧 Joe-Mark |
Found ShadowWhisperer Unautherised Scan . proto=tcp . spt=45304 . dpt=143 . NFTABLES .
|
Port Scan Hacking | |
| 🇬🇧 Joe-Mark |
Found ShadowWhisperer Unautherised Scan . proto=tcp . spt=37445 . dpt=143 . NFTABLES .
|
Port Scan Hacking | |
| Anonymous |
2026-10-20 01:05:38 warning[1830156]: host unknown[38.54.27.234]: unauthorized https access attempted: tcp/443
|
Port Scan Brute-Force | |
| 🇬🇧 Joe-Mark |
Found ShadowWhisperer Unautherised Scan . proto=tcp . spt=44008 . dpt=143 . NFTABLES .
|
Port Scan Hacking | |
| 🇦🇺 FireGuard Server |
Blocked by os-abuseipdb; 4 hits, proto=tcp, ports=80
|
Port Scan Hacking | |
| 🇩🇪 xserverx.ru |
[UFW SCAN!!!!] SRC=38.54.27.234 LEN=40 TOS=0x08 PREC=0x20 TTL=49 DF PROTO=TCP SPT=55594 DPT=80 WINDOW=65535 RES=0x00 SYN URGP=0
...
|
Port Scan | |
| 🇷🇸 Smel |
SQL/MH Probe, Scan, Hack -
|
Port Scan Hacking SQL Injection | |
| 🇬🇧 kiwi.network |
Incessant port scan:
|
Port Scan Hacking Exploited Host |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown