This IP address has been reported a total of
68
times from
4 distinct
sources.
5.231.242.254 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
Blocked by UFW (TCP on 5622)
Source port: 51265
TTL: 239
Packet length: 40
TOS: 0x14
This report (f ...
show moreBlocked by UFW (TCP on 5622)
Source port: 51265
TTL: 239
Packet length: 40
TOS: 0x14
This report (for 5.231.242.254) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
2026-06-03T05:54:21.358290+08:00 nekoaru-shanghai-1 sshd-session[1815437]: Connection from 5.231.242 ...
show more2026-06-03T05:54:21.358290+08:00 nekoaru-shanghai-1 sshd-session[1815437]: Connection from 5.231.242.254 port 16260 on 192.168.12.24 port 41022 rdomain ""
2026-06-03T05:54:22.938692+08:00 nekoaru-shanghai-1 sshd-session[1815437]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.231.242.254 user=root
2026-06-03T05:54:24.610598+08:00 nekoaru-shanghai-1 sshd-session[1815437]: Failed password for root from 5.231.242.254 port 16260 ssh2
...
show less
Brute-Force
SSH
Anonymous
Blocked by UFW (TCP on 45022)
Source port: 49447
TTL: 241
Packet length: 40
TOS: 0x14
This report ( ...
show moreBlocked by UFW (TCP on 45022)
Source port: 49447
TTL: 241
Packet length: 40
TOS: 0x14
This report (for 5.231.242.254) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Blocked by UFW (TCP on 36522)
Source port: 46352
TTL: 240
Packet length: 40
TOS: 0x14
This report ( ...
show moreBlocked by UFW (TCP on 36522)
Source port: 46352
TTL: 240
Packet length: 40
TOS: 0x14
This report (for 5.231.242.254) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Jun 1 04:01:15 gateway sshd[2395439]: Invalid user a from 5.231.242.254 port 42216
Jun 1 04:01:15 ...
show moreJun 1 04:01:15 gateway sshd[2395439]: Invalid user a from 5.231.242.254 port 42216
Jun 1 04:01:15 gateway sshd[2395454]: Invalid user admin from 5.231.242.254 port 42262
Jun 1 04:01:16 gateway sshd[2395450]: Invalid user admin from 5.231.242.254 port 42250
Jun 1 04:01:17 gateway sshd[2395446]: Invalid user admin from 5.231.242.254 port 42242
Jun 1 04:01:17 gateway sshd[2395477]: Invalid user admin from 5.231.242.254 port 42298
...
show less
monitor: on VM-0-7-ubuntu | port: 26822 | ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporte ...
show moremonitor: on VM-0-7-ubuntu | port: 26822 | ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
Anonymous
Blocked by UFW (TCP on 36522)
Source port: 57650
TTL: 241
Packet length: 40
TOS: 0x14
This report ( ...
show moreBlocked by UFW (TCP on 36522)
Source port: 57650
TTL: 241
Packet length: 40
TOS: 0x14
This report (for 5.231.242.254) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
Anonymous
Blocked by UFW (TCP on 30322)
Source port: 48539
TTL: 241
Packet length: 40
TOS: 0x14
This report ( ...
show moreBlocked by UFW (TCP on 30322)
Source port: 48539
TTL: 241
Packet length: 40
TOS: 0x14
This report (for 5.231.242.254) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
Anonymous
Blocked by UFW (TCP on 38622)
Source port: 43638
TTL: 239
Packet length: 40
TOS: 0x14
This report ( ...
show moreBlocked by UFW (TCP on 38622)
Source port: 43638
TTL: 239
Packet length: 40
TOS: 0x14
This report (for 5.231.242.254) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
Anonymous
Blocked by UFW (TCP on 48922)
Source port: 60779
TTL: 241
Packet length: 40
TOS: 0x14
This report ( ...
show moreBlocked by UFW (TCP on 48922)
Source port: 60779
TTL: 241
Packet length: 40
TOS: 0x14
This report (for 5.231.242.254) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
monitor: on VM-0-7-ubuntu | port: 50222 | ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporte ...
show moremonitor: on VM-0-7-ubuntu | port: 50222 | ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
Anonymous
Blocked by UFW (TCP on 2622)
Source port: 55580
TTL: 239
Packet length: 40
TOS: 0x14
This report (f ...
show moreBlocked by UFW (TCP on 2622)
Source port: 55580
TTL: 239
Packet length: 40
TOS: 0x14
This report (for 5.231.242.254) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
2026-05-25T11:08:25.609137+08:00 nekoaru-shanghai-1 sshd-session[609914]: Connection from 5.231.242. ...
show more2026-05-25T11:08:25.609137+08:00 nekoaru-shanghai-1 sshd-session[609914]: Connection from 5.231.242.254 port 54730 on 192.168.12.24 port 41022 rdomain ""
2026-05-25T11:08:28.161390+08:00 nekoaru-shanghai-1 sshd-session[609914]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.231.242.254 user=root
2026-05-25T11:08:29.935989+08:00 nekoaru-shanghai-1 sshd-session[609914]: Failed password for root from 5.231.242.254 port 54730 ssh2
...
show less
Brute-Force
SSH
Showing 1 to
15
of 68 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩