150.241.87.249
| ISP | NODE HOST LIMITED |
|---|---|
| Usage Type | Data Center/Web Hosting/Transit |
| ASN | AS198550 |
| Domain Name | nodehost.ru |
| Country | 🇵🇱 Poland |
| City | Warsaw, Mazovia |
ISP, Usage Type, and Location provided by IPInfo. Updated weekly.
IP Abuse Reports for 150.241.87.249
This IP address has been reported a total of 36 times from 34 distinct sources. 150.241.87.249 was first reported on , and the most recent report was . In the last 60 days, the top reporter locations were: United States of America with 8 reports; Germany with 7 reports; France with 4 reports. The most common categories in these recent reports were: Brute-Force 21 times; Port Scan 19 times; IoT Targeted 11 times; SSH 11 times; Hacking 9 times; Other 4 times.
| Reporter | IoA Timestamp (UTC) | Comment | Categories | |
|---|---|---|---|---|
| 🇮🇳 evicky2002 |
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
|
Hacking Brute-Force SSH | ||
| 🇺🇸 LSPCCU |
|
Port Scan Hacking Brute-Force Web App Attack SSH IoT Targeted | ||
| 🇸🇪 warriors |
|
Hacking IoT Targeted | ||
| 🇩🇪 numberstorm |
|
Port Scan Hacking Brute-Force IoT Targeted | ||
| 🇺🇸 ShadowWhisperer |
TELNET port scan / probe. dropped after username
|
Port Scan IoT Targeted | ||
| 🇫🇷 EvoX |
🛡️ Honeypot [bsts-tpot-hive]: Unauthorized connection attempt detected on 23/TELNET
|
Hacking Port Scan | ||
| 🇩🇪 _ArminS_ |
SP-Scan 59160:23 detected 2026.09.21 10:39:50
blocked until 2026.11.10 02:42:37
|
Port Scan | ||
| 🇩🇪 banankicks |
|
Brute-Force Exploited Host | ||
| 🇵🇱 bart@ |
|
Port Scan | ||
| 🇫🇷 GoodOldTOS |
Connection to Telnet honeypot
|
Hacking | ||
| 🇳🇱 i-turnradio.nl |
2026-09-21 10:36:41 +02:00 - Unsolicited TCP connection to a honeypot port; probing port 23.
|
Port Scan | ||
| 🇬🇧 essinghigh |
IPS Detection: 150.241.87.249 -> DPT: 23
|
Port Scan | ||
| 🇨🇦 alexbfr |
Fail2Ban report from custom-honeypot; automated Telnet honeypot detection.
|
Brute-Force IoT Targeted | ||
| 🇫🇮 Luhte |
Unauthorised SSH/Telnet login attempt with user "" at 2026-09-21T08:34:09Z
|
Brute-Force SSH | ||
| 🇺🇸 johuang92 |
Cowrie SSH honeypot: session dba505ad436a | 1 login attempt(s) | classified as: brute_force
|
Brute-Force SSH |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩