JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 91.243.199.112

91.243.199.112 was found in our database!

This IP was reported 186 times. Confidence of Abuse is 60%: ?

60%

ISP	TRADITIONAL LLC
Usage Type	Fixed Line ISP
ASN	AS15377
Hostname(s)	112.199.PPPoE.fregat.ua
Domain Name	fregat.net
Country	🇺🇦 Ukraine
City	Dnipro, Dnipropetrovsk

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 91.243.199.112

Whois 91.243.199.112

IP Abuse Reports for 91.243.199.112:

This IP address has been reported a total of 186 times from 52 distinct sources. 91.243.199.112 was first reported on July 27th 2025, and the most recent report was 8 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 EvoX	2026-08-28 10:16:11 (8 hours ago)	🛡️ Honeypot [bsts-tpot-hive]: Unsolicited SMB connection (dst port 445/tcp, src port 55765) to a pas ... show more 🛡️ Honeypot [bsts-tpot-hive]: Unsolicited SMB connection (dst port 445/tcp, src port 55765) to a passive honeypot sensor. No legitimate SMB service is exposed here; this traffic is consistent with automated internet-wide scanning or exploitation attempts targeting SMB (e.g. EternalBlue-class vulnerabilities). show less	Hacking
🇫🇷 vtchost.com	2026-08-27 23:50:14 (18 hours ago)	2026-08-28T01:50:13.329259+02:00 vmi3482414 kernel: PORTSCAN: IN=eth0 OUT= MAC=00:50:56:66:20:ee:c0: ... show more 2026-08-28T01:50:13.329259+02:00 vmi3482414 kernel: PORTSCAN: IN=eth0 OUT= MAC=00:50:56:66:20:ee:c0:69:11:b2:c8:03:08:00 SRC=91.243.199.112 DST=169.58.115.24 LEN=52 TOS=0x00 PREC=0x00 TTL=115 ID=30054 DF PROTO=TCP SPT=51937 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇫🇷 vtchost.com	2026-08-27 21:03:09 (21 hours ago)	2026-08-27T23:03:09.109319+02:00 vmi3491693 kernel: [46555.817763] PORTSCAN: IN=eth0 OUT= MAC=00:50: ... show more 2026-08-27T23:03:09.109319+02:00 vmi3491693 kernel: [46555.817763] PORTSCAN: IN=eth0 OUT= MAC=00:50:56:66:3e:63:c0:69:11:b3:a9:ed:08:00 SRC=91.243.199.112 DST=169.58.138.2 LEN=52 TOS=0x00 PREC=0x00 TTL=116 ID=21210 DF PROTO=TCP SPT=62325 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan
Anonymous	2026-08-26 17:12:27 (2 days ago)	Unauthorized access (445/tcp/microsoft-ds)	Port Scan
🇩🇪 mist x	2026-08-26 14:57:09 (2 days ago)	Honeypot SMB Probe: Port 445 SMB scan and exploit handshake probe.	Port Scan Hacking
🇩🇪 IP Analyzer	2026-08-21 20:30:36 (6 days ago)	Unauthorized connection attempt from IP address 91.243.199.112 on Port 445(SMB)	Port Scan
🇫🇷 zulzeen	2026-08-17 19:33:03 (1 week ago)	[incypit-web] Blocked by SysWarden Firewall [BLOCK] (SMB/Possible Ransomware Attack)	Hacking Brute-Force
🇫🇷 vtchost.com	2026-08-17 00:08:06 (1 week ago)	2026-08-17T02:08:05.827397+02:00 vmi3482414 kernel: PORTSCAN: IN=eth0 OUT= MAC=00:50:56:66:20:ee:c0: ... show more 2026-08-17T02:08:05.827397+02:00 vmi3482414 kernel: PORTSCAN: IN=eth0 OUT= MAC=00:50:56:66:20:ee:c0:69:11:b2:c8:03:08:00 SRC=91.243.199.112 DST=169.58.115.24 LEN=52 TOS=0x00 PREC=0x00 TTL=115 ID=30760 DF PROTO=TCP SPT=49385 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇫🇷 vtchost.com	2026-08-16 17:12:07 (1 week ago)	2026-08-16T19:12:06.771618+02:00 vmi3491693 kernel: [864196.325206] PORTSCAN: IN=eth0 OUT= MAC=00:50 ... show more 2026-08-16T19:12:06.771618+02:00 vmi3491693 kernel: [864196.325206] PORTSCAN: IN=eth0 OUT= MAC=00:50:56:66:3e:63:c0:69:11:b3:a9:ed:08:00 SRC=91.243.199.112 DST=169.58.138.2 LEN=52 TOS=0x00 PREC=0x00 TTL=115 ID=31816 DF PROTO=TCP SPT=62564 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇩🇪 crnpekgoz	2026-08-15 04:54:20 (1 week ago)	[PortScan] Risk=100 ASN=15377 (portscan) Port=445 HoneypotTrap=true Recidivist#2 \| Reported by Warde ... show more [PortScan] Risk=100 ASN=15377 (portscan) Port=445 HoneypotTrap=true Recidivist#2 \| Reported by WardenIPS: https://github.com/msncakma/WardenIPS show less	Port Scan
🇫🇷 Coco Bongo	2026-08-11 09:35:11 (2 weeks ago)	1786440910 - 08/11/2026 11:35:10 Host: 91.243.199.112/91.243.199.112 Port: 445 TCP Blocked ...	Port Scan
🇫🇷 geeek	2026-08-09 07:10:34 (2 weeks ago)	Port scanning: 445 TCP Blocked	Port Scan
🇫🇷 sthoyer.de	2026-08-05 04:16:00 (3 weeks ago)	Aug 5 06:15:59 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ... show more Aug 5 06:15:59 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=91.243.199.112 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=117 ID=12426 DF PROTO=TCP SPT=59787 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇩🇪 Luhte	2026-08-01 15:04:55 (3 weeks ago)	Unsolicited TCP connection from 91.243.199.112 to port 0 at 2026-08-01T15:04:55Z. Source IP complete ... show more Unsolicited TCP connection from 91.243.199.112 to port 0 at 2026-08-01T15:04:55Z. Source IP completed three-way handshake to non-public service on this host. Detected by automated intrusion monitoring. show less	Port Scan Hacking
🇩🇪 IP Analyzer	2026-07-30 03:00:24 (4 weeks ago)	Unauthorized connection attempt from IP address 91.243.199.112 on Port 445(SMB)	Port Scan

Showing 1 to 15 of 186 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇱 203.159.81.86

🇧🇷 200.159.177.30

🇬🇧 134.209.185.236

🇯🇵 124.45.31.57

🇳🇱 104.28.217.138

🇹🇷 94.154.43.36

🇷🇴 82.79.154.30

🇬🇧 81.19.219.234

🇱🇹 62.60.130.242

🇨🇦 20.63.81.20

🇫🇷 141.101.69.18

🇱🇹 141.98.9.24

🇭🇰 113.28.194.47

🇫🇷 91.231.89.50

🇹🇼 61.216.52.166

🇺🇸 52.124.44.193

🇰🇪 41.215.133.245

🇱🇺 213.166.54.229

🇩🇪 167.94.145.27

🇨🇳 124.77.31.174