5.231.242.242
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- GHOSTNET GmbH
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS49581
- Domain Name
- ghostnet.de
- Country
- 🇩🇪 Germany
- City
- Aachen, North Rhine-Westphalia
Abuse Reports
Total reports
64 from
4 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇨🇳 yiyan |
Automated SSH brute-force attack trapped in endlessh tarpit. Sample log: 2026-11-13T17:51:49.212Z ACCEPT host=5.231.242.242 port=29030 fd=8 n=11/8192
|
Brute-Force SSH | |
| 🇨🇳 yiyan |
Automated SSH brute-force attack trapped in endlessh tarpit. Sample log: 2026-11-13T00:50:48.891Z ACCEPT host=5.231.242.242 port=30606 fd=32 n=29/8192
|
Brute-Force SSH | |
| Anonymous |
Blocked by UFW (TCP on 38701)
Source port: 45086
TTL: 241
Packet length: 40
TOS: 0x14
This report (for 5.231.242.242) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇨🇳 鹏鹏 |
monitor: on VM-0-7-ubuntu | port: 38701 | ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇨🇳 yiyan |
Automated SSH brute-force attack trapped in endlessh tarpit. Sample log: 2026-11-11T16:34:10.283Z ACCEPT host=5.231.242.242 port=6382 fd=8 n=5/8192
|
Brute-Force SSH | |
| Anonymous |
Blocked by UFW (TCP on 601)
Source port: 34062
TTL: 242
Packet length: 40
TOS: 0x14
This report (for 5.231.242.242) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇨🇳 yiyan |
Automated SSH brute-force attack trapped in endlessh tarpit. Sample log: 2026-11-10T20:13:15.029Z ACCEPT host=5.231.242.242 port=48258 fd=10 n=7/8192
|
Brute-Force SSH | |
| Anonymous |
Blocked by UFW (TCP on 53100)
Source port: 50018
TTL: 241
Packet length: 40
TOS: 0x14
This report (for 5.231.242.242) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇨🇳 yiyan |
Automated SSH brute-force attack trapped in endlessh tarpit. Sample log: 2026-11-09T23:42:59.950Z ACCEPT host=5.231.242.242 port=15332 fd=5 n=2/8192
|
Brute-Force SSH | |
| Anonymous |
Blocked by UFW (TCP on 23422)
Source port: 60665
TTL: 239
Packet length: 40
TOS: 0x14
This report (for 5.231.242.242) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| Anonymous |
Blocked by UFW (TCP on 10265)
Source port: 41029
TTL: 240
Packet length: 40
TOS: 0x14
This report (for 5.231.242.242) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇨🇳 鹏鹏 |
monitor: on VM-0-7-ubuntu | port: 25876 | ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| Anonymous |
Blocked by UFW (TCP on 9885)
Source port: 39263
TTL: 241
Packet length: 40
TOS: 0x14
This report (for 5.231.242.242) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| Anonymous |
Blocked by UFW (TCP on 24912)
Source port: 43014
TTL: 242
Packet length: 40
TOS: 0x14
This report (for 5.231.242.242) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| Anonymous |
Blocked by UFW (TCP on 46163)
Source port: 48243
TTL: 240
Packet length: 40
TOS: 0x14
This report (for 5.231.242.242) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown