JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 150.241.116.199

150.241.116.199 was found in our database!

This IP was reported 618 times. Confidence of Abuse is 0%: ?

ISP	Frankfurt, Germany
Usage Type	Data Center/Web Hosting/Transit
ASN	AS215590
Domain Name	xorek.cloud
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 150.241.116.199

Whois 150.241.116.199

IP Abuse Reports for 150.241.116.199:

This IP address has been reported a total of 618 times from 294 distinct sources. 150.241.116.199 was first reported on January 4th 2026, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 thetomtaylor.co.uk	2026-04-08 20:06:10 (2 months ago)	Fail2Ban - [SSH]Brute-force login attempts on sshd ... [ice01,wa02]	Brute-Force SSH
🇬🇧 Bytemark	2026-02-06 09:26:32 (4 months ago)	Feb 6 09:26:31 dlcentre3 postfix/smtpd[20550]: NOQUEUE: reject: RCPT from unknown[150.241.116.199]: ... show more Feb 6 09:26:31 dlcentre3 postfix/smtpd[20550]: NOQUEUE: reject: RCPT from unknown[150.241.116.199]: 554 5.7.1 Service unavailable; Client host [150.241.116.199] blocked using sbl-xbl.spamhaus.org; Listed by SBL, see https://check.spamhaus.org/sbl/query/SBL689187 / Listed by CSS, see https://check.spamhaus.org/query/ip/150.241.116.199; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<mail.dayoutz.com> show less	Email Spam Spoofing Brute-Force Exploited Host
🇬🇧 andypiper	2026-01-27 02:02:43 (4 months ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
Anonymous	2026-01-26 05:35:51 (4 months ago)	Exploitation attempt from User-Agent: libredtail-http	Exploited Host Web App Attack
🇨🇭 SOC [GOLINE SA]	2026-01-24 21:08:04 (4 months ago)	Suricata IDS Detection: Suricata High-Severity Alert === ATTACK DETAILS === Signature: Suricata Hig ... show more Suricata IDS Detection: Suricata High-Severity Alert === ATTACK DETAILS === Signature: Suricata High-Severity Alert Signature ID: Severity 1-2 Severity: 1-2 (Critical/High) Category: Security Threat === NETWORK INFO === Source IP: 150.241.116.199 (IPv4) Source Port: N/A Target: lg.goline.ch (lg.goline.ch) Target Port: multiple Protocol: TCP/UDP App Protocol: N/A === DETECTION === System: Suricata IDS Time: 2026-01-24 22:08:02 Status: Banned by Fail2Ban show less	Port Scan Hacking Bad Web Bot
🇹🇷 rtbh.com.tr	2026-01-24 20:11:12 (4 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇦🇹 urnilxfgbez	2026-01-23 23:45:00 (4 months ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇪🇸 Gem	2026-01-23 23:30:33 (4 months ago)	Unauthorized web scan.	Web App Attack
🇹🇷 rtbh.com.tr	2026-01-23 20:11:11 (4 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇩🇪 ps-center	2026-01-23 10:56:58 (4 months ago)	RDM-W: TCP-Scanner. Port: 23	Port Scan
🇺🇸 LotPhantom	2026-01-23 10:44:10 (4 months ago)	150.241.116.199 - - [23/Jan/2026:10:43:12 +0000] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdi ... show more 150.241.116.199 - - [23/Jan/2026:10:43:12 +0000] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 146 "-" "libredtail-http" "0" ... show less	Web App Attack
🇭🇰 Paschen J Ki	2026-01-23 10:38:12 (4 months ago)	2026-01-23T18:33:03.069361+08:00 rbm-BIDbKZig sshd[22253]: pam_unix(sshd:auth): authentication failu ... show more 2026-01-23T18:33:03.069361+08:00 rbm-BIDbKZig sshd[22253]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.241.116.199 2026-01-23T18:33:05.233380+08:00 rbm-BIDbKZig sshd[22253]: Failed password for invalid user admin from 150.241.116.199 port 52522 ssh2 2026-01-23T18:35:35.969962+08:00 rbm-BIDbKZig sshd[23331]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.241.116.199 user=root 2026-01-23T18:35:38.335427+08:00 rbm-BIDbKZig sshd[23331]: Failed password for root from 150.241.116.199 port 36550 ssh2 2026-01-23T18:38:11.596148+08:00 rbm-BIDbKZig sshd[24497]: Invalid user rpc from 150.241.116.199 port 35312 ... show less	Brute-Force SSH
🇫🇷 Ozelot	2026-01-23 10:19:53 (4 months ago)	2026-01-23T12:17:26.682842+02:00 ozelot sshd-session[2650080]: pam_unix(sshd:auth): authentication f ... show more 2026-01-23T12:17:26.682842+02:00 ozelot sshd-session[2650080]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.241.116.199 2026-01-23T12:17:28.089793+02:00 ozelot sshd-session[2650080]: Failed password for invalid user admin from 150.241.116.199 port 47454 ssh2 2026-01-23T12:19:52.531944+02:00 ozelot sshd-session[2687179]: Invalid user orangepi from 150.241.116.199 port 41324 show less	Brute-Force SSH
🇺🇸 MPL	2026-01-23 10:18:03 (4 months ago)	tcp/2375 (2 or more attempts)	Port Scan
🇭🇰 Paschen J Ki	2026-01-23 10:00:39 (4 months ago)	2026-01-23T17:58:11.676603+08:00 rbm-BIDbKZig sshd[5093]: Invalid user orangepi from 150.241.116.199 ... show more 2026-01-23T17:58:11.676603+08:00 rbm-BIDbKZig sshd[5093]: Invalid user orangepi from 150.241.116.199 port 60940 2026-01-23T17:58:11.681199+08:00 rbm-BIDbKZig sshd[5093]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.241.116.199 2026-01-23T17:58:13.650973+08:00 rbm-BIDbKZig sshd[5093]: Failed password for invalid user orangepi from 150.241.116.199 port 60940 ssh2 2026-01-23T18:00:36.929988+08:00 rbm-BIDbKZig sshd[6285]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.241.116.199 user=root 2026-01-23T18:00:38.804197+08:00 rbm-BIDbKZig sshd[6285]: Failed password for root from 150.241.116.199 port 60892 ssh2 ... show less	Brute-Force SSH

Showing 1 to 15 of 618 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 162.216.149.75

🇺🇸 139.177.206.6

🇨🇳 120.48.67.104

🇮🇩 36.92.140.209

🇬🇧 35.203.210.27

🇺🇸 2600:1f16:743:ac02:b018:3ff7:1004:b090

🇨🇳 220.250.10.233

🇳🇱 212.30.37.211

🇩🇪 194.88.98.89

🇳🇱 176.65.149.236

🇮🇩 163.7.12.183

🇺🇸 162.216.150.207

🇫🇮 147.185.133.2

🇺🇸 147.185.132.138

🇺🇸 134.199.78.41

🇧🇩 103.115.119.190

🇱🇹 91.224.92.147

🇱🇹 77.90.185.79

🇺🇸 64.62.197.19

🇺🇸 63.135.161.42