JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 150.109.198.254

150.109.198.254 was found in our database!

This IP was reported 22 times. Confidence of Abuse is 91%: ?

91%

ISP	Tencent Building, Kejizhongyi Avenue
Usage Type	Data Center/Web Hosting/Transit
ASN	AS132203
Domain Name	tencent.com
Country	🇯🇵 Japan
City	Tokyo, Tokyo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 150.109.198.254

Whois 150.109.198.254

IP Abuse Reports for 150.109.198.254:

This IP address has been reported a total of 22 times from 20 distinct sources. 150.109.198.254 was first reported on May 2nd 2026, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Da_tschek	2026-07-26 18:51:26 (4 days ago)	Port scanning	Port Scan Hacking
🇫🇷 maxxsense	2026-07-26 17:14:01 (4 days ago)	(mod_security) mod_security triggered on hostname [redacted] 150.109.198.254 (JP/Japan/-)	SQL Injection
🇩🇪 palla89	2026-07-26 12:57:23 (4 days ago)	(mod_security) mod_security triggered on hostname [redacted] 150.109.198.254 (JP/Japan/-)	SQL Injection
🇫🇮 Christopher Hughes	2026-07-26 12:31:13 (4 days ago)	[Sun Jul 26 13:31:01.276796 2026] [proxy_fcgi:error] [pid 2227887:tid 139825009129024] [client 150.1 ... show more [Sun Jul 26 13:31:01.276796 2026] [proxy_fcgi:error] [pid 2227887:tid 139825009129024] [client 150.109.198.254:46026] AH01071: Got error 'Primary script unknown' [Sun Jul 26 13:31:02.875769 2026] [proxy_fcgi:error] [pid 2227887:tid 139825814435392] [client 150.109.198.254:46170] AH01071: Got error 'Primary script unknown' [Sun Jul 26 13:31:05.832053 2026] [proxy_fcgi:error] [pid 2221986:tid 139826535847488] [client 150.109.198.254:46446] AH01071: Got error 'Primary script unknown' [Sun Jul 26 13:31:12.411386 2026] [proxy_fcgi:error] [pid 2227887:tid 139826418415168] [client 150.109.198.254:60524] AH01071: Got error 'Primary script unknown' [Sun Jul 26 13:31:13.029676 2026] [proxy_fcgi:error] [pid 2227887:tid 139825764079168] [client 150.109.198.254:60586] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
🇬🇧 relianoid.com	2026-07-26 05:49:35 (4 days ago)	404 Errors Abuse detected by Relianoid OSS Load Balancer - relianoid.com	Web App Attack
🇳🇱 sernate	2026-07-26 00:59:26 (5 days ago)	(mod_security) mod_security (id:210492) triggered by 150.109.198.254 (JP/Japan/-): 10 in the last 36 ... show more (mod_security) mod_security (id:210492) triggered by 150.109.198.254 (JP/Japan/-): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_MODSEC show less	Brute-Force
🇩🇪 strxmpp	2026-07-26 00:46:50 (5 days ago)	150.109.198.254 - - [26/Jul/2026:02:46:49 +0200] "GET /config/database.yaml HTTP/1.1" 404 495 "-" "M ... show more 150.109.198.254 - - [26/Jul/2026:02:46:49 +0200] "GET /config/database.yaml HTTP/1.1" 404 495 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" ... show less	Bad Web Bot
🇺🇸 masterguru	2026-07-25 21:53:21 (5 days ago)	COMODO WAF: URL file extension is restricted by policy. Match of "pmFromFile userdata_wl_extensions" ... show more COMODO WAF: URL file extension is restricted by policy. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. (210730-128) show less	Hacking
🇫🇮 Daniel Baer	2026-07-25 21:50:02 (5 days ago)	CrowdSec local HTTP alert scenario: crowdsecurity/http-probing alert_id: 1790 events: 11 created_at: ... show more CrowdSec local HTTP alert scenario: crowdsecurity/http-probing alert_id: 1790 events: 11 created_at: 2026-07-25T21:49:36Z message: Ip 150.109.198.254 performed 'crowdsecurity/http-probing' (11 events over 8.08529188s) at 2026-07-25 21:49:36.216478312 +0000 UTC target_uri: ["/asset-manifest.json","/manifest.json","/manifest.webmanifest","/build/asset-manifest.json","/static/asset-manifest.json","/_next/build-manifest.json","/_next/react-loadable-manifest.json","/_next/routes-manifest.json","/_next/prerender-manifest.json","/_next/required-server-files.json","/_next/static/chunks/manifest.json"] method: ["GET"] status: ["404"] user_agent: ["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"] show less	Bad Web Bot Web App Attack
🇺🇸 oralunal	2026-07-25 21:30:35 (5 days ago)	IP banned by Fail2Ban in jail suss access.log ah-app-1 ...	Bad Web Bot Web App Attack
🇮🇪 AutosOnShow	2026-07-25 12:32:05 (5 days ago)	blocked for webapp attack \| path requested: /.git/config \| seen at 2026-07-25 12:31:49.947 \|	Web App Attack
🇮🇪 AutosOnShow	2026-07-25 09:38:05 (5 days ago)	blocked for webapp attack \| path requested: /.env \| seen at 2026-07-25 09:37:36.187 \|	Web App Attack
Anonymous	2026-07-25 08:09:09 (5 days ago)	[server.techsupportltd.gr] httpd-config-scan: sites=www.example.com; logs=/var/log/httpd/access_log; ... show more [server.techsupportltd.gr] httpd-config-scan: sites=www.example.com; logs=/var/log/httpd/access_log; samples=/.env.development \| /.env.test \| /.env.prod show less	Hacking Web App Attack
🇺🇸 Rayulcifer	2026-07-25 07:44:46 (5 days ago)	150.109.198.254 - - [25/Jul/2026:02:44:44 -0500] "GET /.env.dev HTTP/1.1" 404 33195 "-" "Mozilla/5.0 ... show more 150.109.198.254 - - [25/Jul/2026:02:44:44 -0500] "GET /.env.dev HTTP/1.1" 404 33195 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" ... show less	Open Proxy Port Scan Hacking Web App Attack SSH
🇺🇸 ThreatHunter7	2026-07-25 05:00:01 (6 days ago)	Malicious scanning/attack activity detected. 70 suspicious requests from this IP.	Web App Attack

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 212.227.7.185

🇺🇸 147.185.132.47

🇳🇱 91.92.40.153

🇳🇱 45.148.10.141

🇷🇴 193.32.162.27

🇺🇾 186.48.73.36

🇮🇳 103.171.55.242

🇺🇸 20.168.0.74

🇰🇷 222.108.109.37

🇧🇷 186.209.102.56

🇺🇸 104.23.251.90

🇺🇸 92.119.36.117

🇷🇴 92.118.39.50

🇺🇸 65.49.1.230

🇬🇧 35.203.211.118

🇹🇷 5.181.85.100

🇦🇷 186.1.225.195

🇺🇸 173.244.60.241

🇺🇸 162.158.91.31

🇨🇳 121.229.25.10