JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 5.254.74.6

5.254.74.6

Recent Activity

11 reports found in our database

1% ▲ ▲ ▲ Caution

Abuse confidence score ?

ISP

Global Anycast Hosting for www.voxility.com

Usage Type

Data Center/Web Hosting/Transit

ASN

AS3223

Domain Name

voxility.com

Country

🇺🇸 United States of America

City

Miami, Florida

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Top Reporter Countries (Last 60 Days)

Example preview

Report Categories (Last 60 Days)

Example preview

Reports Activity

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 5.254.74.6:

This IP address has been reported a total of 11 times from 8 distinct sources. 5.254.74.6 was first reported on October 10th 2023, and the most recent report was 5 hours ago. In the last 60 days, the only reporter location was: Romania with 2 reports. The most common categories in these recent reports were: Port Scan 2 times; Brute-Force 2 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇷🇴 Viperel	2026-09-06 17:04:48 (5 hours ago)	RouterOS: Repeated connections to sensitive (SSH/RDP/TELNET/DB/MGM) ports detected.	Port Scan Brute-Force
🇷🇴 Viperel	2026-09-06 01:02:35 (21 hours ago)	Repeated connections to sensitive (SSH/RDP/TELNET/DB) ports detected by MikroTik FW.	Port Scan Brute-Force
🇹🇷 SeczarSecureOps	2026-06-14 02:43:26 (2 months ago)	Auto-blocked by Seczar SecureOps — DNS Flood / Tunneling Suspected (560 events in 5min) at 2026-06-1 ... show more Auto-blocked by Seczar SecureOps — DNS Flood / Tunneling Suspected (560 events in 5min) at 2026-06-14 02:43 show less	Web App Attack
🇺🇸 LotPhantom	2025-12-24 23:33:11 (8 months ago)	2025-12-24T23:32:52.089490+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1 ... show more 2025-12-24T23:32:52.089490+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:08:00 SRC=5.254.74.6 DST=157.230.217.55 LEN=52 TOS=0x00 PREC=0x00 TTL=94 ID=62693 DF PROTO=TCP SPT=35880 DPT=3624 WINDOW=64240 RES=0x00 SYN URGP=0 2025-12-24T23:32:55.210588+00:00 bridginggaps kernel: message repeated 7 times: [ [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:08:00 SRC=5.254.74.6 DST=157.230.217.55 LEN=52 TOS=0x00 PREC=0x00 TTL=94 ID=62693 DF PROTO=TCP SPT=35880 DPT=3624 WINDOW=64240 RES=0x00 SYN URGP=0 ] ... show less	Port Scan Hacking
🇺🇸 xmission.com	2025-12-24 23:33:10 (8 months ago)	Blocked by UFW (TCP on 16981) Source port: 16469 TTL: 75 Packet length: 52 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 16981) Source port: 16469 TTL: 75 Packet length: 52 TOS: 0x00 This report (for 5.254.74.6) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 Zandro	2025-12-24 22:44:29 (8 months ago)	ranged TCP flood attack	DDoS Attack
Anonymous	2025-12-18 22:56:28 (8 months ago)	tcp_dst_session	DDoS Attack Port Scan Brute-Force
🇬🇷 gbetsis	2023-10-29 04:56:21 (2 years ago)	TCP Port Scanning	Port Scan Exploited Host
🇩🇪 Pingger Shikkoken	2023-10-29 00:57:22 (2 years ago)	Oct 29 00:56:36 dnsmasq[469684]: query[TXT] google.com from 5.254.74.6 Oct 29 00:56:47 dnsmasq[46968 ... show more Oct 29 00:56:36 dnsmasq[469684]: query[TXT] google.com from 5.254.74.6 Oct 29 00:56:47 dnsmasq[469684]: query[TXT] google.com from 5.254.74.6 Oct 29 00:57:02 dnsmasq[469684]: query[TXT] google.com from 5.254.74.6 Oct 29 00:57:03 dnsmasq[469684]: query[TXT] google.com from 5.254.74.6 Oct 29 00:57:11 dnsmasq[469684]: query[TXT] google.com from 5.254.74.6 ... show less	DNS Poisoning DDoS Attack Port Scan Exploited Host
🇩🇪 Pingger Shikkoken	2023-10-29 00:56:36 (2 years ago)	Participating in DDoS Amplification Attack	DNS Poisoning DDoS Attack Hacking Brute-Force Exploited Host
🇩🇪 Pingger Shikkoken	2023-10-10 04:40:00 (2 years ago)	Oct 10 04:37:29 dnsmasq[23172]: query[TXT] cisco.com from 5.254.74.6 Oct 10 04:37:30 dnsmasq[23172]: ... show more Oct 10 04:37:29 dnsmasq[23172]: query[TXT] cisco.com from 5.254.74.6 Oct 10 04:37:30 dnsmasq[23172]: query[TXT] cisco.com from 5.254.74.6 Oct 10 04:37:30 dnsmasq[23172]: query[TXT] cisco.com from 5.254.74.6 Oct 10 04:37:30 dnsmasq[23172]: query[TXT] cisco.com from 5.254.74.6 Oct 10 04:37:31 dnsmasq[23172]: query[TXT] cisco.com from 5.254.74.6 Oct 10 04:37:31 dnsmasq[23172]: query[TXT] cisco.com from 5.254.74.6 Oct 10 04:37:38 dnsmasq[23172]: query[TXT] cisco.com from 5.254.74.6 Oct 10 04:37:39 dnsmasq[23172]: query[TXT] cisco.com from 5.254.74.6 Oct 10 04:37:43 dnsmasq[23172]: query[TXT] cisco.com from 5.254.74.6 Oct 10 04:37:48 dnsmasq[23172]: query[TXT] cisco.com from 5.254.74.6 Oct 10 04:37:49 dnsmasq[23172]: query[TXT] cisco.com from 5.254.74.6 Oct 10 04:37:50 dnsmasq[23172]: query[TXT] cisco.com from 5.254.74.6 Oct 10 04:37:52 dnsmasq[23172]: query[TXT] cisco.com from 5.254.74.6 Oct 10 04:37:54 dnsmasq[23172]: query[TXT] cisco.com from 5.254.74.6 Oct 10 04:37:56 dnsmasq[23172]: qu ... show less	DNS Poisoning DDoS Attack Port Scan Exploited Host

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 172.94.9.64

🇵🇱 2a02:1778::113:10

🇭🇰 150.109.68.254

🇺🇸 85.208.96.203

🇳🇱 45.148.10.152

🇻🇳 14.185.50.107

🇨🇳 14.103.118.198

🇮🇱 169.150.227.75

🇧🇬 109.160.32.105

🇧🇬 79.124.62.126

🇮🇱 35.252.28.174

🇫🇷 2001:41d0:33a:a00::40e

🇳🇱 193.47.62.69

🇷🇴 193.32.162.103

🇦🇷 186.22.57.92

🇮🇹 178.249.211.101

🇧🇷 177.130.250.31

🇸🇬 172.253.236.210

🇳🇱 167.71.72.95

🇧🇬 109.160.32.11