136.244.99.156

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
26 reports
25 reporters · latest 6 hours ago
ISP
Vultr Holdings, LLC
Usage Type
Data Center/Web Hosting/Transit
ASN
AS20473
Hostname(s)
136.244.99.156.vultrusercontent.com
Domain Name
vultr.com
Country
🇳🇱 Netherlands
City
Amsterdam, North Holland
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
26 from 25 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 7 🇳🇱 Netherlands 4 🇫🇷 France 3
Most common categories Port Scan 19 Web App Attack 5 Hacking 5 Brute-Force 5 Bad Web Bot 3
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇵🇱 mkey
[First: 2026-11-05 19:25:54/single] HITS=1 Repeated suspicious IDS-detected activity; sample=WEB-ATACK: Invalid destination host in header
Port Scan Hacking Web App Attack
Anonymous
Port Scan Brute-Force SSH
🇷🇴 abuse_IP_reporter
Nov 5 22:20:32 server UFW BLOCK SRC=136.244.99.156 PROTO=TCP SPT=56710 DPT=80
Port Scan
🇫🇷 uthul
T-Pot honeypot: 17 hits on ports [80, 443] (automated)
Port Scan Web App Attack
🇳🇱 StopAbuse
tcp/443
Port Scan
🇵🇱 bart@
Automated scan detection against redacted protected targets. Hits=1; port 443 proto 6 detection dark_ip
Port Scan
🇩🇪 DasDuo
Attempt on port 80 (HTTP) - potential web application attack attempt. Blocked by firewall (unsolicited inbound, no prior outbound connection).
Port Scan Web App Attack
🇷🇴 abuse_IP_reporter
Nov 5 19:46:52 server UFW BLOCK SRC=136.244.99.156 PROTO=TCP SPT=56710 DPT=80
Port Scan
🇫🇷 Mölkky
Abusive IP (403 Forbidden)
Web App Attack
🇩🇪 hotzmatic
Suricata IDS: ET SCAN NMAP -sS window 1024 (1 events observed on private honeypot sensor)
Port Scan
🇨🇿 Countryman
repeated unauthorized SSL VPN connection attempts
DDoS Attack Hacking Brute-Force
🇩🇪 banankicks
Unauthorized connection attempt detected from IP address 136.244.99.156 to port 8080 (banankicks-server) [Y]
Brute-Force Exploited Host
🇩🇪 klaus_ph
136.244.99.156 - - [05/Nov/2026:19:09:19 +0100] "GET / HTTP/1.1" 200 833 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/125.0" ...
Bad Web Bot
🇳🇱 VMHeaven.io
Blocked by UFW [443/tcp] Source port: 56710 TTL: 248 Packet length: 40
Port Scan Web App Attack
🇬🇧 essinghigh
IPS Detection: 136.244.99.156 -> DPT: 80
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 184.154.16.90
🇧🇷 177.106.57.241
🇮🇳 117.247.23.131
🇨🇳 101.132.151.123
🇪🇸 79.116.228.17
🇦🇿 46.32.173.37
🇵🇰 43.230.94.189
🇩🇪 43.228.157.152
🇧🇷 34.95.250.109
🇬🇧 195.96.139.148
🇸🇬 194.5.82.91
🇸🇮 185.41.177.58
🇮🇳 152.56.143.53
🇭🇰 119.28.68.26
🇰🇷 106.244.120.37
feedback