150.109.180.208

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
420 reports
116 reporters ยท latest 11 hours ago
ISP
Tencent Building, Kejizhongyi Avenue
Usage Type
Data Center/Web Hosting/Transit
ASN
AS132203
Domain Name
tencent.com
Country
๐Ÿ‡น๐Ÿ‡ญ Thailand
City
Bangkok, Bangkok
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
420 from 116 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations ๐Ÿ‡บ๐Ÿ‡ธ United States of America 29 ๐Ÿ‡ฉ๐Ÿ‡ช Germany 27 ๐Ÿ‡ซ๐Ÿ‡ท France 25
Most common categories Web App Attack 82 Brute-Force 50 Hacking 27 Bad Web Bot 19 Exploited Host 8
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
๐Ÿ‡ฉ๐Ÿ‡ช 4server
Port Scan Brute-Force Web App Attack
๐Ÿ‡ซ๐Ÿ‡ท security.rdmc.fr
Activity from blacklisted IP
Hacking
๐Ÿ‡ฉ๐Ÿ‡ช NervousNiffler
[ThemeExploit] Theme exploit attempt: Direct access to theme PHP file: functions.php (path: /wp-content/themes/twentytwenty/functions.php)
Web App Attack
๐Ÿ‡ฉ๐Ÿ‡ช FeG Deutschland
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 14
Exploited Host Web App Attack
๐Ÿ‡ฉ๐Ÿ‡ช FeG Deutschland
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 14
Exploited Host Web App Attack
๐Ÿ‡บ๐Ÿ‡ธ LSPCCU
TSEC Honeypot Network report. Threat score: 82/100. Categories: Port Scan, Hacking, Brute-Force, Web App Attack, SSH. Honeypot: galah. Context: 150.109.180.208 classified as botnet node participating in coordinated attack campaigns (high confidence).
Port Scan Hacking Brute-Force Web App Attack SSH
๐Ÿ‡บ๐Ÿ‡ธ francelink.fr
Azure WAF blocked a request. Rule: 100200. Observed at: 2026-10-24T17:56:04.000Z.
Web App Attack
Anonymous
[ns31.kdns.gr] httpd-shell-path-probe: sites=www.dimitrisanousis.com; logs=/var/log/httpd/domains/dimitrisanousis.com.log; samples=/wp-content/themes/calliope/inc/out.php
Hacking Web App Attack
Anonymous
IP banned by Fail2Ban in jail nginx-abusive-ips
Web App Attack Brute-Force Bad Web Bot
๐Ÿ‡ซ๐Ÿ‡ท security.rdmc.fr
Activity from blacklisted IP
Hacking
๐Ÿ‡ฎ๐Ÿ‡น CoreTech srl
[DC: IP:151.1.252.27] ntopng alert: blacklisted_client_contact
Hacking
๐Ÿ‡ซ๐Ÿ‡ท SpaceHost-Server
Brute-Force Web App Attack
๐Ÿ‡ซ๐Ÿ‡ท tecnicorioja
wp-login attack [12/Oct/2026:15:18:01
Brute-Force Web App Attack
๐Ÿ‡ฌ๐Ÿ‡ง spamverify.com
Honeypot Hit: WordPress Login
Web Spam Blog Spam Bad Web Bot Web App Attack
๐Ÿ‡บ๐Ÿ‡ธ dtorrer
Brute-force general attack.
Brute-Force

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

๐Ÿ‡ซ๐Ÿ‡ท 185.194.178.9
๐Ÿ‡บ๐Ÿ‡ธ 108.45.175.253
๐Ÿ‡ณ๐Ÿ‡ฑ 77.67.26.142
๐Ÿ‡จ๐Ÿ‡ณ 47.100.241.172
๐Ÿ‡ช๐Ÿ‡ฌ 197.44.15.210
๐Ÿ‡ฆ๐Ÿ‡บ 180.181.250.249
๐Ÿ‡ต๐Ÿ‡ช 179.6.7.3
๐Ÿ‡บ๐Ÿ‡ธ 129.121.114.62
๐Ÿ‡บ๐Ÿ‡ธ 129.121.100.45
๐Ÿ‡ฐ๐Ÿ‡ท 121.133.167.123
๐Ÿ‡จ๐Ÿ‡ณ 101.96.195.62
๐Ÿ‡ฎ๐Ÿ‡ณ 59.97.21.114
๐Ÿ‡บ๐Ÿ‡ธ 23.92.149.149
๐Ÿ‡จ๐Ÿ‡ณ 14.103.118.150
๐Ÿ‡ธ๐Ÿ‡ฌ 8.222.211.65
๐Ÿ‡บ๐Ÿ‡ธ 204.8.98.35
๐Ÿ‡ฆ๐Ÿ‡ท 201.254.62.55
๐Ÿ‡ฒ๐Ÿ‡ฝ 201.151.115.138
๐Ÿ‡บ๐Ÿ‡ธ 193.202.16.155
๐Ÿ‡น๐Ÿ‡ญ 184.22.167.222