5.181.50.17
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- netcup GmbH
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS197540
- Hostname(s)
- v2202506250199356722.bestsrv.de
- Domain Name
- netcup.de
- Country
- 🇩🇪 Germany
- City
- Nuremberg, Bavaria
No reports in the last 60 days
5.181.50.17 has been reported 34 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
34 from
26 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇬🇧 PeravixGroup |
Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: MEDIUM. Aaran.cloud
|
IoT Targeted Brute-Force | |
| 🇨🇿 Countryman |
repeated unauthorized connection attempts, host sweep, port 23
|
Hacking Brute-Force | |
| 🇺🇸 drewf.ink |
[01:04] Attempted telnet login on port 23 with username
|
Brute-Force Exploited Host | |
| 🇳🇱 ByeByte API |
byebyte.space auth: TCP packet to port 23 (telnet) at 2026-06-17T00:59:31Z. Source port 2215. TCP flags: SYN. Packet: 40B, TTL 52, window 60849, IP id 8660. Single packet, dropped at firewall. p0f: 12 hops.
|
Port Scan | |
| 🇳🇱 ByeByte API |
Port scan from this IP. Firewall dropped every packet. Targeted TCP ports: 23. Single burst at 2026-06-17 00:59 UTC.
|
Port Scan | |
| 🇺🇸 MPL |
tcp/23 (2 or more attempts)
|
Port Scan | |
| 🇯🇵 knock |
Knock-Knock honeypot brute-force: Telnet (54 total hits)
|
Brute-Force | |
| Anonymous |
Unauthorized connection attempt on Port 23
|
Port Scan Hacking Exploited Host | |
| 🇧🇪 sauron-le-noir |
scan port : 23 from Allemagne at Wed Jun 17 01:43:04 2026
|
Port Scan | |
| 🇱🇹 NotACaptcha |
Unauthorised access (Jun 17 01:52) SRC=5.181.50.17 LEN=40 TTL=52 ID=54744 TCP DPT=23 WINDOW=60849 SYN
|
Port Scan | |
| 🇩🇪 Admins@FBN |
FW-PortScan: Traffic Blocked srcport=2215 dstport=23
|
Port Scan | |
| 🇺🇸 RAP |
2026-06-16 22:38:59 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | |
| 🇬🇧 essinghigh |
IPS Detection: 5.181.50.17 -> DPT: 23
|
Port Scan | |
| 🇩🇪 iNetWorker |
trying to access non-authorized port
|
Port Scan | |
| 🇨🇭 m_vlasov |
SSH/Telnet honeypot: 0 login attempts, 1 sessions, 0 shell commands.
|
Port Scan IoT Targeted |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown