150.109.243.207
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Tencent Building, Kejizhongyi Avenue
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS132203
- Domain Name
- tencent.com
- Country
- 🇰🇷 Korea (the Republic of)
- City
- Seoul, Seoul
Abuse Reports
Total reports
29 from
23 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇩🇪 big-cloud.nl |
Try to access /.git/config
|
Web App Attack | |
| 🇩🇪 SwinT |
WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail
|
Web App Attack | |
| 🇳🇱 Alt255 |
|
Bad Web Bot Web App Attack | |
| Anonymous |
HTTP scan of URLS detected through requesting more than 5 non existing (sensative) URLs (url file paths on the same domain)
|
Brute-Force Web App Attack | |
| 🇺🇸 TPI-Abuse |
|
Brute-Force Bad Web Bot Web App Attack | |
| 🇩🇪 Callum |
probing for exposed files and admin pages: 55 attempts within 1 minutes, seen by web server log
|
Web App Attack | |
| 🇩🇪 pscriptos |
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
|
Web App Attack Hacking | |
| 🇵🇱 Budyn |
|
Hacking Web App Attack | |
| Anonymous |
Observed scanned 82 known-sensitive endpoint(s), e.g.: /, /.env, /.env.backup, /.env.bak, /.env.ci, /.env.dev
|
Bad Web Bot Web App Attack | |
| 🇺🇸 zcampbell |
Web vulnerability scanning: probing for exposed sensitive files (.git). Detected and blocked automatically.
|
Web App Attack Bad Web Bot | |
| 🇺🇸 TPI-Abuse |
|
Brute-Force Bad Web Bot Web App Attack | |
| Anonymous |
IP matched detection query bad paths many.
|
Brute-Force Web App Attack | |
| 🇩🇪 LRob |
Secret file probe | method: GET | path: /.git/config, /.env, /.env.local (+4 more) | ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | 2026-11-10 17:33 UTC
|
Hacking Web App Attack | |
| 🇳🇱 Site.eu |
Scanning for secret files (.env, .git, credentials, config backups)
|
Bad Web Bot Web App Attack | |
| 🇮🇪 kundukundu |
[Drupal AbuseIPDB module] Request path is blacklisted. /phpversion.php
|
Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown