JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 150.109.120.203

150.109.120.203 was found in our database!

This IP was reported 23 times. Confidence of Abuse is 55%: ?

55%

ISP	Tencent Building, Kejizhongyi Avenue
Usage Type	Data Center/Web Hosting/Transit
ASN	AS132203
Domain Name	tencent.com
Country	🇭🇰 Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 150.109.120.203

Whois 150.109.120.203

IP Abuse Reports for 150.109.120.203:

This IP address has been reported a total of 23 times from 16 distinct sources. 150.109.120.203 was first reported on April 21st 2026, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 adnscom.net	2026-06-28 11:54:14 (4 hours ago)	IPS trigger: Brute force WebApp/CMS scanning/attack	Brute-Force Web App Attack
🇺🇸 kosada.com	2026-06-27 22:38:56 (18 hours ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
Anonymous	2026-06-27 01:15:21 (1 day ago)	PAD: Bot_Add_Cart detected	Bad Web Bot
🇩🇪 FeG Deutschland	2026-06-26 21:16:12 (1 day ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 28	Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-06-17 19:07:25 (1 week ago)	(mod_security) mod_security (id:210730) triggered by 150.109.120.203 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 150.109.120.203 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 15:07:21.083893 2026] [security2:error] [pid 20139:tid 20139] [client 150.109.120.203:53366] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.raintechgutters.com\|F\|2"] [data ".raintechgutters.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.raintechgutters.com"] [uri "/gutter-guard-installation-orlando/www.raintechgutters.com"] [unique_id "ajLwac08Fs2YtSwztU0i2gAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇦 1gz	2026-06-16 10:31:38 (1 week ago)	Triggered Cloudflare WAF (firewallCustom) from HK. Action taken: BLOCK Protocol: HTTP/2 (GET method) ... show more Triggered Cloudflare WAF (firewallCustom) from HK. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: /lajme/fluksi-i-emigranteve-alarmon-italine-gati-shpallja-e-gjendjes-se-jashtezakonshme/497809 UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.64 Safari/537.36 Edg/101.0.1210.47 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇨🇦 1gz	2026-06-14 05:32:45 (2 weeks ago)	Triggered Cloudflare WAF (firewallCustom) from HK. Action taken: BLOCK Protocol: HTTP/2 (GET method) ... show more Triggered Cloudflare WAF (firewallCustom) from HK. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: /sport/inter-arsyeja-pse-de-vrij-nuk-ka-rinovuar-me-lazion/375141/ UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇫🇷 Sklurk	2026-06-13 18:18:30 (2 weeks ago)	Web App Attack	Web App Attack
🇨🇭 backslash	2026-06-03 02:27:00 (3 weeks ago)	block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8	Bad Web Bot
🇺🇸 pduggusa	2026-05-25 01:42:01 (1 month ago)	Detected attacking dugganusa.com at 2026-05-25T01:42:01.190Z \| Source: DugganUSA PreCog auto-block	Hacking
🇺🇸 pduggusa	2026-05-25 00:40:48 (1 month ago)	Detected attacking dugganusa.com at 2026-05-25T00:40:48.472Z \| Source: DugganUSA PreCog auto-block	Hacking
🇺🇸 pduggusa	2026-05-24 03:33:55 (1 month ago)	Detected attacking dugganusa.com at 2026-05-24T03:33:55.290Z \| Source: DugganUSA PreCog auto-block	Hacking
🇫🇷 vtchost.com	2026-05-16 08:26:46 (1 month ago)	requested honeypot page - ignored robots.txt - scraping botnet or virus ...	Bad Web Bot Exploited Host
🇨🇿 ptlab	2026-05-16 00:45:42 (1 month ago)	Detected wp_login attack from WP-host.	Hacking Web App Attack
🇨🇳 ThreatBook.io	2026-05-11 23:30:16 (1 month ago)	ThreatBook Intelligence: Info more details on http://threatbook.io/ip/150.109.120.203 2026-05-11 17: ... show more ThreatBook Intelligence: Info more details on http://threatbook.io/ip/150.109.120.203 2026-05-11 17:17:00 /wxshare11/wxs.php,{"body":"url=http%3A%2F%2Fnxjj.nxnews.net%2Fyxwg%2F202601%2Ft20260104_1397319.html","content_type":"application/x-www-form-urlencoded","header":{"Accept":["application/json, text/javascript, /; q=0.01"],"Accept-Encoding":["gzip, deflate"],"Accept-Language":["zh-CN,zh;q=0.9"],"Connection":["keep-alive"],"Content-Length":["73"],"Content-Type":["application/x-www-form-urlencoded; charset=UTF-8"],"Origin":["http://nxjj.nxnews.net"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36"]},"host":"fx.nxnews.net","method":"POST","proto":"HTTP/1.1","remote_addr":"150.109.120.203:44786","status_code":200,"url":"/wxshare11/wxs.php","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36"} show less	Web App Attack

Showing 1 to 15 of 23 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 177.11.190.41

🇵🇱 146.59.15.50

🇱🇻 81.30.98.44

🇺🇸 34.170.148.76

🇺🇸 193.3.53.6

🇲🇽 187.175.9.225

🇧🇷 177.11.190.40

🇧🇷 177.11.190.39

🇫🇮 138.124.99.219

🇭🇰 134.122.204.64

🇵🇭 124.6.178.98

🇨🇳 117.21.184.227

🇺🇸 113.20.0.58

🇨🇳 112.46.212.112

🇨🇦 52.60.177.107

🇸🇬 43.172.197.17

🇷🇺 217.118.83.211

🇺🇸 216.218.206.73

🇧🇷 177.11.190.38

🇧🇷 177.11.190.37