5.231.242.188
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- GHOSTNET GmbH
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS49581
- Domain Name
- ghostnet.de
- Country
- 🇳🇱 Netherlands
- City
- Kerkrade, Limburg
Abuse Reports
Total reports
142 from
5 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇨🇳 yiyan |
Automated SSH brute-force attack trapped in endlessh tarpit. Sample log: 2026-11-09T03:59:48.682Z ACCEPT host=5.231.242.188 port=58266 fd=6 n=6/8192
|
Brute-Force SSH | |
| 🇨🇳 yiyan |
Automated SSH brute-force attack trapped in endlessh tarpit. Sample log: 2026-11-07T16:00:51.524Z ACCEPT host=5.231.242.188 port=13086 fd=7 n=4/8192
|
Brute-Force SSH | |
| Anonymous |
Blocked by UFW (TCP on 49100)
Source port: 35482
TTL: 242
Packet length: 40
TOS: 0x14
This report (for 5.231.242.188) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇨🇳 yiyan |
Automated SSH brute-force attack trapped in endlessh tarpit. Sample log: 2026-11-07T02:49:17.703Z ACCEPT host=5.231.242.188 port=24164 fd=6 n=3/8192
|
Brute-Force SSH | |
| 🇨🇳 yiyan |
Automated SSH brute-force attack trapped in endlessh tarpit. Sample log: 2026-10-29T18:18:31.511Z ACCEPT host=5.231.242.188 port=16594 fd=78 n=75/8192
|
Brute-Force SSH | |
| Anonymous |
Blocked by UFW (TCP on 44600)
Source port: 51878
TTL: 239
Packet length: 40
TOS: 0x14
This report (for 5.231.242.188) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇨🇳 鹏鹏 |
monitor: on VM-0-7-ubuntu | port: 42301 | ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇨🇳 yiyan |
Automated SSH brute-force attack trapped in endlessh tarpit. Sample log: 2026-10-28T16:48:52.778Z ACCEPT host=5.231.242.188 port=56614 fd=5 n=4/8192
|
Brute-Force SSH | |
| 🇨🇳 鹏鹏 |
monitor: on VM-0-7-ubuntu | port: 53622 | ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇨🇳 yiyan |
Automated SSH brute-force attack trapped in endlessh tarpit. Sample log: 2026-10-27T19:13:13.972Z ACCEPT host=5.231.242.188 port=65328 fd=4 n=2/8192
|
Brute-Force SSH | |
| Anonymous |
Blocked by UFW (TCP on 57100)
Source port: 49342
TTL: 241
Packet length: 40
TOS: 0x14
This report (for 5.231.242.188) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| Anonymous |
Blocked by UFW (TCP on 18100)
Source port: 56688
TTL: 240
Packet length: 40
TOS: 0x14
This report (for 5.231.242.188) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇨🇳 yiyan |
Automated SSH brute-force attack trapped in endlessh tarpit. Sample log: 2026-10-26T17:18:40.170Z ACCEPT host=5.231.242.188 port=38160 fd=4 n=1/8192
|
Brute-Force SSH | |
| Anonymous |
Blocked by UFW (TCP on 49100)
Source port: 44551
TTL: 240
Packet length: 40
TOS: 0x14
This report (for 5.231.242.188) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| Anonymous |
Blocked by UFW (TCP on 19301)
Source port: 52496
TTL: 241
Packet length: 40
TOS: 0x14
This report (for 5.231.242.188) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown