AbuseIPDB » 150.109.253.34

150.109.253.34 was found in our database!

This IP was reported 613 times. Confidence of Abuse is 0%: ?

0%

ISP	Tencent Building, Kejizhongyi Avenue
Usage Type	Data Center/Web Hosting/Transit
ASN	AS132203
Domain Name	tencent.com
Country	Korea (the Republic of)
City	Seoul, Seoul

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 150.109.253.34

Whois 150.109.253.34

IP Abuse Reports for 150.109.253.34:

This IP address has been reported a total of 613 times from 116 distinct sources. 150.109.253.34 was first reported on January 18th 2024, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Anonymous	2025-02-18 02:52:03 (3 months ago)	Excessive connections to http/https ports	DDoS Attack
sdos.es	2025-02-17 10:55:49 (3 months ago)	"Multiple/Conflicting Connection Header Data Found - keep-alive, close"	Web App Attack
advena	2025-02-17 10:46:09 (3 months ago)	150.109.253.34 (AS132203 TENCENT-NET-AP-CN Tencent Building, Kejizhongyi Avenue) was intercepted at ... show more150.109.253.34 (AS132203 TENCENT-NET-AP-CN Tencent Building, Kejizhongyi Avenue) was intercepted at 2025-02-17T10:41:08Z after violating WAF directive: 874a3e315c344b1281ad4f00046aab6f. Pre-cautionary/corrective action applied: block. show less	Web Spam Hacking Brute-Force Web App Attack
MogBox	2025-02-17 03:21:06 (3 months ago)	(mod_security) mod_security (id:210350) triggered by 150.109.253.34 (KR/South Korea/-): 1 in the las ... show more(mod_security) mod_security (id:210350) triggered by 150.109.253.34 (KR/South Korea/-): 1 in the last 3600 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Sun Feb 16 22:21:03.349896 2025] [security2:error] [pid 1086510:tid 1086549] [client 150.109.253.34:58302] [client 150.109.253.34] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||67.225.186.60|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "67.225.186.60"] [uri "/"] [unique_id "Z7KrH6B5sQF64R2cB4aluAAAAEw"] show less	Hacking
rshict	2025-02-17 00:55:13 (3 months ago)	Hacking, Brute-Force, Web App Attack	Hacking Brute-Force Web App Attack
anon333	2025-02-16 14:34:01 (3 months ago)	Hacker syslog review 1739716440	Hacking
Anonymous	2025-02-16 09:53:43 (3 months ago)	botnet	DDoS Attack
Honzas	2025-02-14 13:44:15 (3 months ago)	Unsolicited connection attemps(4), port 443/TCP	Brute-Force
webbfabriken	2025-02-14 08:38:50 (3 months ago)	spam or other hacking activities reported by webbfabriken security servers Attack reported by ... show morespam or other hacking activities reported by webbfabriken security servers Attack reported by Webbfabriken Security API - WFSecAPI show less	Web Spam
MAGIC	2025-02-14 08:08:08 (3 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
advena	2025-02-14 07:30:59 (3 months ago)	150.109.253.34 (AS132203 TENCENT-NET-AP-CN Tencent Building, Kejizhongyi Avenue) was intercepted at ... show more150.109.253.34 (AS132203 TENCENT-NET-AP-CN Tencent Building, Kejizhongyi Avenue) was intercepted at 2025-02-14T07:28:45Z after violating WAF directive: 874a3e315c344b1281ad4f00046aab6f. Pre-cautionary/corrective action applied: managed_challenge. show less	Web Spam Hacking Brute-Force Web App Attack
Anonymous	2025-02-11 05:06:37 (3 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Burayot	2025-02-11 02:26:38 (3 months ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 150.109.253.34 (KR/South Korea/-): ... show moreLF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 150.109.253.34 (KR/South Korea/-): 1 in the last 3600 secs show less	Web App Attack
Sklurk	2025-02-10 18:13:46 (3 months ago)	Web App Attack	Web App Attack
juguemosalacarioca.com	2025-02-09 13:49:47 (3 months ago)	Multiple HTTP calls attempting to GET resources using common API calls or formats on port 8080	Web App Attack

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩