JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 150.109.239.194

150.109.239.194 was found in our database!

This IP was reported 32 times. Confidence of Abuse is 35%: ?

35%

ISP	Tencent Building, Kejizhongyi Avenue
Usage Type	Data Center/Web Hosting/Transit
ASN	AS132203
Domain Name	tencent.com
Country	🇰🇷 Korea (the Republic of)
City	Seoul, Seoul

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 150.109.239.194

Whois 150.109.239.194

IP Abuse Reports for 150.109.239.194:

This IP address has been reported a total of 32 times from 10 distinct sources. 150.109.239.194 was first reported on October 28th 2025, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 nodepile	2026-06-17 23:33:12 (4 hours ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/static/version1775170088/fr ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/static/version1775170088/frontend/Smartwave/porto/en_US/Magento_Ui/templates/modal/modal-popup.html ua='Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36') show less	Web App Attack Exploited Host
🇺🇸 nodepile	2026-06-15 20:52:17 (2 days ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/static/version1775170088/fr ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/static/version1775170088/frontend/Smartwave/porto/en_US/js-translation.json ua='Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36') show less	Web App Attack Exploited Host
🇺🇸 nodepile	2026-06-13 07:29:45 (4 days ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/static/version1775170088/fr ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/static/version1775170088/frontend/Smartwave/porto/en_US/owl.carousel/assets/owl.carousel.css ua='Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36') show less	Web App Attack Exploited Host
Anonymous	2026-06-09 06:08:30 (1 week ago)	Web attack	Bad Web Bot Web App Attack
🇺🇸 nodepile	2026-06-09 01:08:23 (1 week ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/static/version1775170088/fr ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/static/version1775170088/frontend/Smartwave/porto/en_US/Magento_Ui/templates/modal/modal-custom.html ua='Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36') show less	Web App Attack Exploited Host
🇨🇦 polycoda	2026-06-07 11:19:26 (1 week ago)	🥶 Part of massive botnet scraping campaign that nearly turned into a DDoS on 2025-11-27	DDoS Attack
🇺🇸 nodepile	2026-06-06 11:00:34 (1 week ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/wheels.html ua='Mozilla/5.0 ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/wheels.html ua='Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36') show less	Web App Attack Exploited Host
🇺🇸 nodepile	2026-06-04 08:17:28 (1 week ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/customer/account/login/refe ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/customer/account/login/referer/aHR0cHM6Ly91bW5pdHphLmNvbS9jYXRhbG9nL3Byb2R1Y3Qvdmlldy9pZC82OTM3MS9jYXRlZ29yeS80MjUxLyNyZXZpZXctZm9ybQ~~/ ua='Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.5 Safari/605.1.15') show less	Web App Attack Exploited Host
🇨🇦 Mediashaker	2026-05-30 00:05:03 (2 weeks ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 150.109.239.194 (KR/ ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 150.109.239.194 (KR/South Korea/-) show less	Bad Web Bot
🇩🇪 rh24	2026-05-27 08:07:10 (3 weeks ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 150.109.239.194 (KR/ ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 150.109.239.194 (KR/South Korea/-) show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-05-23 08:08:56 (3 weeks ago)	(mod_security) mod_security (id:217210) triggered by 150.109.239.194 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:217210) triggered by 150.109.239.194 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 23 04:08:48.406998 2026] [security2:error] [pid 29365:tid 29365] [client 150.109.239.194:36805] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?i:(?:[a-z]{3,10}\\\\s+(?:\\\\w{3,7}?://[\\\\w\\\\-\\\\./](?::\\\\d+)?)?/[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S])?\|connect (?:\\\\d{1,3}\\\\.){3}\\\\d{1,3}\\\\.?(?::\\\\d+)?\|options \\\\)\\\\s+[\\\\w\\\\./]+\|get /[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "114"] [id "217210"] [rev "1"] [msg "COMODO WAF: Invalid HTTP Request Line\|\|midwayisland.com\|F\|4"] [data "GET https://midwayisland.com HTTP/1.1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "midwayisland.com"] [uri "/"] [unique_id "ahFgkHKE0i6JfcBYhsVLHQAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇷🇸 Smel	2026-04-19 06:52:05 (1 month ago)	HTTP/80/443/8080 Unauthorized Probe, Hack -	Hacking Web App Attack
🇸🇬 securejdprop	2026-04-15 06:24:41 (2 months ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing. crowdsecurity/http-probing	Hacking Web App Attack
Anonymous	2026-04-14 17:45:23 (2 months ago)	Automated bot traffic — residential proxy, fake browser fingerprint. UA="Mozilla/5.0 (Windows NT 10. ... show more Automated bot traffic — residential proxy, fake browser fingerprint. UA="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" show less	Bad Web Bot Web App Attack
Anonymous	2026-03-26 09:05:15 (2 months ago)	Web attack	Bad Web Bot Web App Attack

Showing 1 to 15 of 32 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇯🇵 209.248.45.104

🇺🇸 172.234.25.61

🇫🇷 91.196.152.185

🇸🇪 89.253.90.113

🇺🇸 66.132.195.82

🇳🇱 45.142.193.18

🇳🇱 45.135.195.139

🇫🇮 45.38.198.253

🇧🇪 35.233.29.163

🇲🇾 27.125.245.120

🇺🇸 23.22.59.87

🇺🇿 213.230.86.114

🇪🇸 212.227.235.203

🇧🇷 205.210.31.171

🇧🇷 201.88.227.72

🇷🇺 178.178.222.58

🇧🇷 177.130.168.18

🇺🇸 172.104.11.46

🇻🇳 171.244.39.95

🇩🇪 151.243.11.35