151.243.11.109

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
585 reports
145 reporters · latest 9 minutes ago
ISP
LLC VASH KREDIT BANK
Usage Type
Data Center/Web Hosting/Transit
ASN
AS209630
Domain Name
email.ua
Country
🇩🇪 Germany
City
Koln, North Rhine-Westphalia
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
585 from 145 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 250 🇩🇪 Germany 72 🇫🇷 France 70
Most common categories Port Scan 546 Hacking 85 Brute-Force 60 Web App Attack 25 SSH 19
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 xmission.com
Blocked by UFW (TCP on 1717) Source port: 61186 TTL: 49 Packet length: 44 TOS: 0x08 This report (for 151.243.11.109) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇺🇸 MPL
tcp port scan (11 or more attempts)
Port Scan
🇩🇪 bescared
F2B - Malicious activity detected. Excessive port scans. -8ff06ede-
Port Scan
🇩🇪 EinfxchFinn
Unauthorized connection attempt to port 49665 from 151.243.11.109
Port Scan
🇺🇸 freehosts.eu
Blocked by UFW [5000/tcp] | SPT: 61178 | TTL: 55 | LEN: 44 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇵🇱 mkey
Source IP from blacklist AbuseIPDB is still actively scanning our network. (5 hits in last hour, last seen 2026-11-14 19:57:42)
Port Scan
🇭🇰 PingMeMaybe
Blocked by UFW on hk [135/tcp] Source port: 61255 TTL: 53 Packet length: 44 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇺🇸 RAP
2026-11-14 18:14:44 UTC Unauthorized activity to TCP port 135.
Port Scan
🇫🇷 uthul
T-Pot honeypot: 23 hits on ports [23, 587, 888, 3389, 4567] (automated)
Email Spam Port Scan Brute-Force SSH
🇺🇸 MPL
tcp/8880
Port Scan
🇺🇸 MPL
tcp port scan (20 or more attempts)
Port Scan
🇺🇸 MPL
tcp/8081
Port Scan
🇯🇵 S.O.B.A. Dev.
Persistent port scanning or vulnerability scanning
Port Scan
🇩🇪 NetReportsGermany
2026-11-14 10:35:56 UTC - blocked by AbuseIPDB blocklist - ports: 8081 - TCP flags: S, src port: 61001, TTL: 58, length: 44 bytes
Port Scan
🇫🇷 uthul
T-Pot honeypot: 25 hits on ports [23, 443, 587, 3389, 4567] (automated)
Email Spam Port Scan Brute-Force Web App Attack SSH

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 216.25.90.72
🇪🇹 196.188.229.245
🇺🇸 173.255.243.63
🇰🇷 152.32.139.186
🇸🇪 146.70.52.237
🇺🇸 103.203.57.11
🇺🇸 74.74.132.123
🇲🇺 197.225.146.23
🇺🇸 140.235.171.27
🇨🇳 112.95.75.93
🇺🇦 62.16.2.201
🇲🇾 120.141.20.47
🇮🇳 59.97.21.114
🇩🇪 194.88.98.113
🇮🇱 158.173.76.71
🇨🇳 118.25.182.251
🇬🇪 91.231.218.149
🇩🇪 167.94.145.20
🇮🇹 79.37.130.55
🇺🇸 70.184.163.235
feedback