JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 150.241.105.167

150.241.105.167 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 64%: ?

64%

ISP	u1host ltd
Usage Type	Data Center/Web Hosting/Transit
ASN	AS213877
Hostname(s)	vm241887.hosted-by.u1host.com
Domain Name	u1host.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 150.241.105.167

Whois 150.241.105.167

IP Abuse Reports for 150.241.105.167:

This IP address has been reported a total of 16 times from 11 distinct sources. 150.241.105.167 was first reported on December 1st 2025, and the most recent report was 10 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 technash	2026-09-02 11:20:00 (10 hours ago)	Port scanning detection [Fortinet/Sentinel]. Deny/drop traffic.	Port Scan
🇩🇪 dispaisyenterprises	2026-09-02 09:57:52 (12 hours ago)	Honeypot [fra-de-honeypot]: Empty payload (likely service probe); 6363 [1], 6010 [1], 5922 [1], 5975 ... show more Honeypot [fra-de-honeypot]: Empty payload (likely service probe); 6363 [1], 6010 [1], 5922 [1], 5975 [1], 5960 [1], 5939 [1] TCP Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇹🇷 SeczarSecureOps	2026-09-02 08:09:00 (13 hours ago)	Auto-blocked by Seczar SecureOps — Port Scan Detection (44 events in 10min) at 2026-09-02 08:09	Port Scan
🇷🇴 abuse_IP_reporter	2026-09-01 13:45:04 (1 day ago)	Sep 1 16:11:52 server UFW BLOCK SRC=150.241.105.167 PROTO=TCP SPT=61000 DPT=5981	Port Scan
🇷🇴 abuse_IP_reporter	2026-09-01 12:45:04 (1 day ago)	Sep 1 15:40:32 server UFW BLOCK SRC=150.241.105.167 PROTO=TCP SPT=61000 DPT=10000	Port Scan
🇩🇪 Hans Wurst	2026-09-01 11:52:36 (1 day ago)	1788263556 - 09/01/2026 13:52:36 Host: 150.241.105.167/150.241.105.167 Port: 6667 TCP Blocked	Port Scan
🇷🇴 abuse_IP_reporter	2026-09-01 11:45:05 (1 day ago)	Sep 1 14:41:12 server UFW BLOCK SRC=150.241.105.167 PROTO=TCP SPT=61000 DPT=5908	Port Scan
🇫🇷 hxsain	2026-09-01 11:32:47 (1 day ago)	Blocked by UFW on fr2 [7000/tcp] \| SPT: 61000 \| TTL: 240 \| LEN: 44 \| TOS: 0x00 • Reported by: github ... show more Blocked by UFW on fr2 [7000/tcp] \| SPT: 61000 \| TTL: 240 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇮 6kilowatti	2026-09-01 11:27:46 (1 day ago)	2026-09-01T14:27:45.533081+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:78:9a:18 ... show more 2026-09-01T14:27:45.533081+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:78:9a:18:bd:57:7e:08:00 SRC=150.241.105.167 DST=5.61.88.83 LEN=44 TOS=0x00 PREC=0x00 TTL=240 ID=44216 PROTO=TCP SPT=61000 DPT=6050 WINDOW=1025 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇫🇷 security.rdmc.fr	2026-08-31 15:41:46 (2 days ago)	Port Scan Attack proto:TCP src:61000 dst:5900	Port Scan
🇹🇷 SeczarSecureOps	2026-08-31 13:45:22 (2 days ago)	Auto-blocked by Seczar SecureOps — High-Risk Port Probe (admin-managed entries) — VNC (3 events in 1 ... show more Auto-blocked by Seczar SecureOps — High-Risk Port Probe (admin-managed entries) — VNC (3 events in 10min) at 2026-08-31 13:45 show less	Web App Attack
🇹🇷 SeczarSecureOps	2026-08-31 13:25:16 (2 days ago)	Seczar SecureOps — Port Scan Detection (8 events) — quarantined 43200m on DinarFW	Port Scan
🇩🇪 ValtonTahiri	2026-08-31 13:21:03 (2 days ago)	UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly as ... show more UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=150.241.105.167; proto=TCP; source_port=61000; target_port=5969; flags=SYN show less	Port Scan
🇫🇮 6kilowatti	2026-08-31 03:39:19 (2 days ago)	2026-08-31T06:39:19.408681+03:00 koti kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:bd:29:2d:18:f ... show more 2026-08-31T06:39:19.408681+03:00 koti kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:bd:29:2d:18:fd:74:70:71:9e:08:00 SRC=150.241.105.167 DST=10.0.0.30 LEN=44 TOS=0x00 PREC=0x00 TTL=243 ID=35854 PROTO=TCP SPT=61000 DPT=5984 WINDOW=1025 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇩🇪 crnpekgoz	2026-08-30 21:06:19 (3 days ago)	[PortScan] Risk=100 ASN=213877 (portscan) Port=5921 HoneypotTrap=true \| Reported by WardenIPS: https ... show more [PortScan] Risk=100 ASN=213877 (portscan) Port=5921 HoneypotTrap=true \| Reported by WardenIPS: https://github.com/msncakma/WardenIPS show less	Port Scan

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 193.47.62.69

🇺🇸 137.131.8.253

🇺🇸 70.120.203.193

🇫🇷 34.155.159.183

🇺🇸 137.184.44.190

🇨🇳 118.145.228.55

🇺🇸 66.132.195.56

🇰🇷 59.22.201.143

🇩🇪 31.76.11.68

🇷🇴 2.57.121.112

🇰🇷 203.237.81.58

🇨🇴 200.21.254.245

🇩🇪 134.209.251.50

🇮🇳 110.173.190.221

🇺🇸 76.79.213.70

🇺🇸 62.10.174.7

🇫🇷 51.77.230.180

🇳🇱 45.148.10.157

🇮🇷 37.32.22.70

🇵🇭 124.105.218.149