JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 109.69.19.248

109.69.19.248 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 91%: ?

91%

ISP	Beget LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS198610
Domain Name	beget.ru
Country	🇷🇺 Russian Federation
City	Moscow, Moscow

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 109.69.19.248

Whois 109.69.19.248

IP Abuse Reports for 109.69.19.248:

This IP address has been reported a total of 19 times from 16 distinct sources. 109.69.19.248 was first reported on July 6th 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 heyzg	2026-07-09 09:50:44 (2 hours ago)	API LLMjacking (Ollama) (observed): 4 HTTP, 8.2m; attempted outbound scan & cryptomining; Ollama: /a ... show more API LLMjacking (Ollama) (observed): 4 HTTP, 8.2m; attempted outbound scan & cryptomining; Ollama: /api/tags,/api/chat show less	Hacking Web App Attack
Anonymous	2026-07-09 09:30:05 (3 hours ago)	Triggered: repeated knocking on closed ports.	Port Scan
🇨🇭 pingusurmars	2026-07-09 09:12:43 (3 hours ago)	Blocked by UFW on ampereone [5678/tcp] Source port: 47904 TTL: 245 Packet length: 40 TOS: 0x00 This ... show more Blocked by UFW on ampereone [5678/tcp] Source port: 47904 TTL: 245 Packet length: 40 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 Tamsweb	2026-07-09 09:11:07 (3 hours ago)	Unauthorized connection attempt or scan from 109.69.19.248 on port 11434 ...	Port Scan
🇫🇮 kumiko	2026-07-09 09:08:32 (3 hours ago)	[2026-07-09 12:08:32] Unauthorized port scan/probing (port 11434) Blocked by UFW	Port Scan
🇩🇪 ValtonTahiri	2026-07-09 08:46:49 (3 hours ago)	UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly as ... show more UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=109.69.19.248; proto=TCP; source_port=46399; target_port=5678; flags=SYN show less	Port Scan
🇺🇸 LotPhantom	2026-07-09 08:46:14 (3 hours ago)	2026-07-09T08:46:13.800772+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1 ... show more 2026-07-09T08:46:13.800772+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:08:00 SRC=109.69.19.248 DST=157.230.217.55 LEN=40 TOS=0x00 PREC=0x20 TTL=244 ID=19198 PROTO=TCP SPT=46399 DPT=11434 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan Hacking
🇺🇸 chillcog.com	2026-07-09 07:43:41 (4 hours ago)	Blocked by on honeypot2 [7860/tcp] \| SPT: 42527 \| TTL: 240 \| LEN: 40 \| TOS: 0x00 • Reported by: abus ... show more Blocked by on honeypot2 [7860/tcp] \| SPT: 42527 \| TTL: 240 \| LEN: 40 \| TOS: 0x00 • Reported by: abuse.terraforge.fun show less	Port Scan
🇺🇸 kelliwic.net	2026-07-09 07:40:12 (4 hours ago)	Port scan detected (F2B)	Port Scan
🇩🇪 cloudmax	2026-07-09 07:40:01 (4 hours ago)	Cloudmax IPS Block - Suspicious activity. Possible port scanning, service reconnaissance, or vulnera ... show more Cloudmax IPS Block - Suspicious activity. Possible port scanning, service reconnaissance, or vulnerability probing show less	Port Scan
🇫🇷 Little Iguana	2026-07-09 07:30:49 (5 hours ago)	trying to access non-authorized port	Port Scan
Anonymous	2026-07-09 07:29:54 (5 hours ago)	Jul 9 03:21:50 localhost kernel: [111926953.994094] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:9 ... show more Jul 9 03:21:50 localhost kernel: [111926953.994094] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=109.69.19.248 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=63189 PROTO=TCP SPT=41428 DPT=11434 WINDOW=1024 RES=0x00 SYN URGP=0 Jul 9 03:21:50 localhost kernel: [111926953.994146] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=109.69.19.248 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=63189 PROTO=TCP SPT=41428 DPT=11434 SEQ=3130571265 ACK=0 WINDOW=1024 RES=0x00 SYN URGP=0 Jul 9 03:29:53 localhost kernel: [111927436.827469] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=109.69.19.248 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=20242 PROTO=TCP SPT=41977 DPT=5678 WINDOW=1024 RES=0x00 SYN URGP=0 Jul 9 03:29:53 localhost kernel: [111927436.827477] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=109.69.19.248 DST=[mungedIP2] LEN=40 TOS show less	Port Scan
Anonymous	2026-07-09 07:25:52 (5 hours ago)	2026-07-09T08:25:51.379307+01:00 vps kernel: [45322083.239997] [PORTSCAN DETECTED] IN=ens3 OUT= MAC= ... show more 2026-07-09T08:25:51.379307+01:00 vps kernel: [45322083.239997] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=109.69.19.248 DST=54.37.14.118 LEN=40 TOS=0x08 PREC=0x20 TTL=234 ID=5248 PROTO=TCP SPT=41428 DPT=11434 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan Brute-Force
🇩🇪 SMi-Web	2026-07-09 07:23:23 (5 hours ago)	Blocked by firewall on hugin [11434/tcp] \| Rule: UFW \| SPT: 41428 \| TTL: 245 \| LEN: 40 \| TOS: 0x00 • ... show more Blocked by firewall on hugin [11434/tcp] \| Rule: UFW \| SPT: 41428 \| TTL: 245 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇬🇧 sonot	2026-07-09 07:22:48 (5 hours ago)	Blocked by UFW on tunneluk01 [11434/tcp] \| SPT: 41428 \| TTL: 242 \| LEN: 40 \| TOS: 0x00 • Reported by ... show more Blocked by UFW on tunneluk01 [11434/tcp] \| SPT: 41428 \| TTL: 242 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 220.132.100.145

🇨🇳 203.56.198.45

🇵🇱 176.53.159.197

🇸🇬 118.139.164.171

🇧🇩 103.4.145.50

🇷🇺 85.117.232.42

🇺🇸 50.6.248.168

🇲🇾 47.250.58.156

🇳🇱 45.148.10.141

🇨🇳 220.182.14.60

🇮🇳 182.78.86.62

🇵🇰 153.117.8.231

🇧🇷 129.121.42.131

🇧🇩 103.86.198.253

🇮🇳 103.59.203.66

🇩🇪 92.209.155.157

🇬🇧 89.213.48.78

🇳🇱 89.21.67.138

🇳🇱 45.148.10.147

🇨🇴 190.157.13.210