5.231.242.227
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- GHOSTNET GmbH
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS49581
- Domain Name
- ghostnet.de
- Country
- 🇩🇪 Germany
- City
- Aachen, North Rhine-Westphalia
Abuse Reports
Total reports
87 from
7 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇨🇳 yiyan |
Automated SSH brute-force attack trapped in endlessh tarpit. Sample log: 2026-11-14T16:17:53.548Z ACCEPT host=5.231.242.227 port=45858 fd=4 n=6/8192
|
Brute-Force SSH | |
| 🇨🇳 yiyan |
Automated SSH brute-force attack trapped in endlessh tarpit. Sample log: 2026-11-13T22:34:20.673Z ACCEPT host=5.231.242.227 port=24202 fd=8 n=5/8192
|
Brute-Force SSH | |
| Anonymous |
Blocked by UFW (TCP on 63022)
Source port: 43882
TTL: 242
Packet length: 40
TOS: 0x14
This report (for 5.231.242.227) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇨🇳 yiyan |
Automated SSH brute-force attack trapped in endlessh tarpit. Sample log: 2026-11-12T16:23:41.181Z ACCEPT host=5.231.242.227 port=34376 fd=11 n=8/8192
|
Brute-Force SSH | |
| 🇨🇳 yiyan |
Automated SSH brute-force attack trapped in endlessh tarpit. Sample log: 2026-11-11T23:13:08.003Z ACCEPT host=5.231.242.227 port=20444 fd=7 n=4/8192
|
Brute-Force SSH | |
| 🇨🇳 day |
SSH brute-force banned by fail2ban on <hostname> (jail sshd, failures 5)
|
Brute-Force SSH | |
| 🇨🇳 yiyan |
Automated SSH brute-force attack trapped in endlessh tarpit. Sample log: 2026-11-10T22:05:00.547Z ACCEPT host=5.231.242.227 port=28750 fd=6 n=3/8192
|
Brute-Force SSH | |
| Anonymous |
Blocked by UFW (TCP on 22022)
Source port: 56149
TTL: 240
Packet length: 40
TOS: 0x14
This report (for 5.231.242.227) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇨🇳 鹏鹏 |
monitor: on VM-0-7-ubuntu | port: 23622 | ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇨🇳 yiyan |
Automated SSH brute-force attack trapped in endlessh tarpit. Sample log: 2026-11-09T17:36:24.376Z ACCEPT host=5.231.242.227 port=43706 fd=13 n=12/8192
|
Brute-Force SSH | |
| Anonymous |
Blocked by UFW (TCP on 28301)
Source port: 58643
TTL: 240
Packet length: 40
TOS: 0x14
This report (for 5.231.242.227) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| Anonymous |
Blocked by UFW (TCP on 9700)
Source port: 48729
TTL: 240
Packet length: 40
TOS: 0x14
This report (for 5.231.242.227) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| Anonymous |
Blocked by UFW (TCP on 5822)
Source port: 58246
TTL: 239
Packet length: 40
TOS: 0x14
This report (for 5.231.242.227) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| Anonymous |
Blocked by UFW (TCP on 52900)
Source port: 44904
TTL: 242
Packet length: 40
TOS: 0x14
This report (for 5.231.242.227) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| Anonymous |
Blocked by UFW (TCP on 30601)
Source port: 57682
TTL: 240
Packet length: 40
TOS: 0x14
This report (for 5.231.242.227) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown