This IP address has been reported a total of
224
times from
4 distinct
sources.
5.231.242.49 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-05-21T18:02:05.975666+08:00 nekoaru-shanghai-1 sshd-session[75808]: Invalid user 1 from 5.231.2 ...
show more2026-05-21T18:02:05.975666+08:00 nekoaru-shanghai-1 sshd-session[75808]: Invalid user 1 from 5.231.242.49 port 20198
2026-05-21T18:02:04.477779+08:00 nekoaru-shanghai-1 sshd-session[75811]: Connection from 5.231.242.49 port 23078 on 192.168.12.24 port 41022 rdomain ""
2026-05-21T18:02:06.071627+08:00 nekoaru-shanghai-1 sshd-session[75811]: Invalid user hyq from 5.231.242.49 port 23078
...
show less
monitor: on VM-0-7-ubuntu | port: 21322 | ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporte ...
show moremonitor: on VM-0-7-ubuntu | port: 21322 | ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
Anonymous
Blocked by UFW (TCP on 23922)
Source port: 50454
TTL: 242
Packet length: 40
TOS: 0x14
This report ( ...
show moreBlocked by UFW (TCP on 23922)
Source port: 50454
TTL: 242
Packet length: 40
TOS: 0x14
This report (for 5.231.242.49) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
Anonymous
Blocked by UFW (TCP on 30422)
Source port: 52003
TTL: 241
Packet length: 40
TOS: 0x14
This report ( ...
show moreBlocked by UFW (TCP on 30422)
Source port: 52003
TTL: 241
Packet length: 40
TOS: 0x14
This report (for 5.231.242.49) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
Anonymous
Blocked by UFW (TCP on 62122)
Source port: 33780
TTL: 239
Packet length: 40
TOS: 0x14
This report ( ...
show moreBlocked by UFW (TCP on 62122)
Source port: 33780
TTL: 239
Packet length: 40
TOS: 0x14
This report (for 5.231.242.49) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
2026-05-17T15:16:17.911033+08:00 nekoaru-shanghai-1 sshd-session[3909851]: Invalid user user from 5. ...
show more2026-05-17T15:16:17.911033+08:00 nekoaru-shanghai-1 sshd-session[3909851]: Invalid user user from 5.231.242.49 port 59832
2026-05-17T15:16:17.520155+08:00 nekoaru-shanghai-1 sshd-session[3909863]: Connection from 5.231.242.49 port 51710 on 192.168.12.24 port 41022 rdomain ""
2026-05-17T15:16:18.519877+08:00 nekoaru-shanghai-1 sshd-session[3909863]: Invalid user user from 5.231.242.49 port 51710
...
show less
Brute-Force
SSH
Anonymous
Blocked by UFW (TCP on 21622)
Source port: 42826
TTL: 242
Packet length: 40
TOS: 0x14
This report ( ...
show moreBlocked by UFW (TCP on 21622)
Source port: 42826
TTL: 242
Packet length: 40
TOS: 0x14
This report (for 5.231.242.49) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
Anonymous
Blocked by UFW (TCP on 36422)
Source port: 60713
TTL: 241
Packet length: 40
TOS: 0x14
This report ( ...
show moreBlocked by UFW (TCP on 36422)
Source port: 60713
TTL: 241
Packet length: 40
TOS: 0x14
This report (for 5.231.242.49) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
Anonymous
Blocked by UFW (TCP on 13722)
Source port: 42779
TTL: 241
Packet length: 40
TOS: 0x14
This report ( ...
show moreBlocked by UFW (TCP on 13722)
Source port: 42779
TTL: 241
Packet length: 40
TOS: 0x14
This report (for 5.231.242.49) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
ThreatBook Intelligence: Scanner more details on http://threatbook.io/ip/5.231.242.49
2026-05-13 12: ...
show moreThreatBook Intelligence: Scanner more details on http://threatbook.io/ip/5.231.242.49
2026-05-13 12:22:40 ["uname -s -v -n -r -m"]
2026-05-13 12:22:41 ["uname -s -v -n -r -m"]
2026-05-13 12:22:42 ["uname -s -v -n -r -m"]
2026-05-13 12:22:41 ["uname -s -v -n -r -m"]
show less
Brute-Force
Anonymous
Blocked by UFW (TCP on 11222)
Source port: 40413
TTL: 241
Packet length: 40
TOS: 0x14
This report ( ...
show moreBlocked by UFW (TCP on 11222)
Source port: 40413
TTL: 241
Packet length: 40
TOS: 0x14
This report (for 5.231.242.49) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
Anonymous
Blocked by UFW (TCP on 17822)
Source port: 44257
TTL: 239
Packet length: 40
TOS: 0x14
This report ( ...
show moreBlocked by UFW (TCP on 17822)
Source port: 44257
TTL: 239
Packet length: 40
TOS: 0x14
This report (for 5.231.242.49) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
2026-05-06T05:04:05.068770+08:00 nekoaru-shanghai-1 sshd-session[2980450]: Invalid user prueba from ...
show more2026-05-06T05:04:05.068770+08:00 nekoaru-shanghai-1 sshd-session[2980450]: Invalid user prueba from 5.231.242.49 port 39376
2026-05-06T05:04:04.151274+08:00 nekoaru-shanghai-1 sshd-session[2980459]: Connection from 5.231.242.49 port 56166 on 192.168.12.24 port 41022 rdomain ""
2026-05-06T05:04:05.161054+08:00 nekoaru-shanghai-1 sshd-session[2980459]: Invalid user oracle from 5.231.242.49 port 56166
...
show less
Brute-Force
SSH
Showing 16 to
30
of 224 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩