150.109.197.225
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Tencent Building, Kejizhongyi Avenue
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS132203
- Domain Name
- tencent.com
- Country
- 🇯🇵 Japan
- City
- Tokyo, Tokyo
Abuse Reports
Total reports
66 from
32 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇫🇷 cityhunter_rhone |
Observed at (UTC): 2026-10-26T12:51:42+00:00 | Connection attempts on sensitive port(s) 3000 (3) of a private server (ports closed to the public, firewall log), between 2026-10-24 09:47 and 2026-10-26 12:51 UTC. Mercurius-Guide automated detection.
|
Port Scan Hacking | |
| 🇩🇪 ValtonTahiri |
|
Port Scan | |
| 🇩🇪 EnthecSolutions |
Detected by Enthec Solutions. | Attempts: 95 in 24h | Target port: 3000
|
Web App Attack | |
| 🇫🇷 Zikmadol |
Trapline honeypot: MCP server abuse. Feed: https://github.com/Zikmadol/trapline-ioc
|
Web App Attack | |
| 🇫🇮 sonot |
Blocked by UFW on mail [3000/tcp] | SPT: 55268 | TTL: 41 | LEN: 60 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇫🇷 Kejult |
Honeypot Finding: repeated TCP service probing on TCP/3000 (HTTP/API); 95 application-level events across 95 source port(s). Sensor(s): Honeyaml.
|
Port Scan | |
| 🇬🇧 sandra361 |
Port scan detected: 8 attempts across 1 port (3000). | Evidence: GHOST_SCAN: IN=enp1s0f0 SRC=150.109.197.225 LEN=60 TOS=0x00 PREC=0x00 TTL=48 ID=51699 DF PROTO=TCP SPT=53548 DPT=3000 WINDOW=64240 RES=0x00 SYN URGP=0
|
Port Scan | |
| Anonymous |
Repeated suspicious activity detected by Fail2ban
...
|
Port Scan | |
| 🇫🇮 sonot |
Blocked by UFW on mail [3000/tcp] | SPT: 40592 | TTL: 40 | LEN: 60 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇫🇮 dnsbd.tech |
nftables: Port scan (TCP:3000) [srv2]
|
Port Scan Hacking | |
| 🇫🇷 fzc2000 |
Repeated TCP connections to unused ports on a honeypot
|
Port Scan | |
| 🇩🇪 kingjan1999 |
Blocked by UFW [3000/tcp] | SPT: 57148 | TTL: 51 | LEN: 60 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇬🇧 sonot |
Blocked by UFW on tunneluk01 [3000/tcp] | SPT: 40744 | TTL: 49 | LEN: 60 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| Anonymous |
Blocked by UFW [3000/tcp] | SPT: 38408 | TTL: 51 | LEN: 60 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇫🇷 Kejult |
Honeypot Finding: repeated TCP service probing on TCP/3000 (HTTP/API); 95 application-level events across 95 source port(s). Sensor(s): Honeyaml.
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown