151.243.11.104

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
313 reports
139 reporters · latest 20 minutes ago
ISP
LLC VASH KREDIT BANK
Usage Type
Data Center/Web Hosting/Transit
ASN
AS209630
Domain Name
email.ua
Country
🇩🇪 Germany
City
Essen, North Rhine-Westphalia
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
313 from 139 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 122 🇩🇪 Germany 40 🇫🇷 France 39
Most common categories Port Scan 274 Hacking 58 Brute-Force 37 Web App Attack 15 SSH 12
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇳🇱 Ivan Ivanov
Global Docker honeypot port trap
Port Scan
🇩🇪 Ilop
[hp-100] 2 unsolicited packets to honeypot ports 8008,135 (OCI DShield sensor)
Port Scan
Anonymous
Port Scanner
Port Scan
🇺🇸 xmission.com
Blocked by UFW (TCP on 21) Source port: 61158 TTL: 50 Packet length: 44 TOS: 0x00 This report (for 151.243.11.104) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan FTP Brute-Force Brute-Force
🇺🇸 Aurealize
firewall port scanning detected. 2 or more observation(s) from 2026-11-06T17:31:16.000Z through 2026-11-06T17:31:16.000Z.
Port Scan
🇺🇸 xmission.com
Blocked by UFW (TCP on 7547) Source port: 61177 TTL: 50 Packet length: 44 TOS: 0x00 This report (for 151.243.11.104) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇬🇧 sandra361
Port scan detected: 7 packets across 1 port (60000). | Evidence: REAPER_TARPIT: IN=enp1s0f0 SRC=151.243.11.104 LEN=40 TOS=0x00 PREC=0x00 TTL=56 ID=61564 DF PROTO=TCP SPT=53343 DPT=60000 WINDOW=42340 RES=0x00 ACK FIN URGP=0
Port Scan
🇷🇺 Albram
Blocked by DNSBL - Mailserver check_relay ...
Brute-Force
🇺🇸 xmission.com
Blocked by UFW (TCP on 8008) Source port: 61126 TTL: 49 Packet length: 44 TOS: 0x00 This report (for 151.243.11.104) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇫🇷 uthul
T-Pot honeypot: 150 hits on ports [22, 9200, 40000] (automated)
Port Scan Brute-Force SSH
🇨🇦 Arpan Sen
Network port/address scan: probed 22 distinct port(s) across 21 host(s); 100% of connections received no service (SYN, no reply) -- passive network sensor.
Port Scan
🇺🇸 xmission.com
Blocked by UFW (TCP on 25) Source port: 61031 TTL: 50 Packet length: 44 TOS: 0x00 This report (for 151.243.11.104) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan Email Spam
🇫🇷 security.rdmc.fr
Activity from blacklisted IP
Hacking
🇺🇸 RAP
2026-11-06 16:09:36 UTC Unauthorized activity to TCP port 8080. Web App
Port Scan Web App Attack
🇺🇸 Antairus
Port scan detected. Scanned ports: 993, 9080, 587. Detected by firewall.
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 35.185.123.13
🇨🇦 216.232.226.217
🇺🇾 167.62.202.44
🇺🇸 136.0.39.68
🇩🇪 104.165.18.189
🇫🇷 62.210.198.162
🇸🇬 43.134.85.158
🇹🇳 196.203.231.220
🇬🇧 185.247.137.109
🇨🇭 178.194.85.120
🇫🇮 147.185.133.50
🇮🇳 117.207.45.171
🇮🇩 103.155.46.254
🇦🇱 79.106.125.11
🇺🇸 54.92.171.106
🇺🇸 18.97.26.42
🇺🇸 34.86.208.86
🇧🇷 187.45.74.177
🇺🇸 54.91.122.193
🇺🇸 50.201.46.122
feedback