JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 150.158.139.65

150.158.139.65 was found in our database!

This IP was reported 33 times. Confidence of Abuse is 83%: ?

83%

ISP	Tencent Cloud Computing (Beijing) Co., Ltd
Usage Type	Data Center/Web Hosting/Transit
ASN	AS45090
Domain Name	tencentcloud.com
Country	🇨🇳 China
City	Shanghai, Shanghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 150.158.139.65

Whois 150.158.139.65

IP Abuse Reports for 150.158.139.65:

This IP address has been reported a total of 33 times from 13 distinct sources. 150.158.139.65 was first reported on July 16th 2026, and the most recent report was 48 seconds ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-07-17 22:03:33 (48 seconds ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-07-16. show less	Web App Attack SSH Hacking
🇵🇱 sefinek.net	2026-07-17 17:42:09 (4 hours ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action: BLOCK \| Protocol: HTTP/1.1 (GET) \| Endpoi ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action: BLOCK \| Protocol: HTTP/1.1 (GET) \| Endpoint: /.secrets \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 (Silvy X Ran; +https://silvyxran.love; +https://silver.inc) • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-17 16:35:23 (5 hours ago)	(mod_security) mod_security (id:210492) triggered by 150.158.139.65 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 150.158.139.65 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 12:35:17.406273 2026] [security2:error] [pid 17269:tid 17269] [client 150.158.139.65:38596] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "m2oblivion.com"] [uri "/.env.production"] [unique_id "alpZxXvPZOORQc7KLIp6mAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-07-17 14:52:15 (7 hours ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 13:40:49 (8 hours ago)	(mod_security) mod_security (id:210492) triggered by 150.158.139.65 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 150.158.139.65 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 09:40:42.163865 2026] [security2:error] [pid 21339:tid 21339] [client 150.158.139.65:12588] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "peaksalesnw.com"] [uri "/.env.staging"] [unique_id "alow2lFZThUJ8PkYX0pNiQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 zwebvigil	2026-07-17 12:14:19 (9 hours ago)	150.158.139.65 [17/Jul/2026:05:14:16 -0700] "GET /static/js/app.js HTTP/1.1" 404 22 "-" port=44556 ... show more 150.158.139.65 [17/Jul/2026:05:14:16 -0700] "GET /static/js/app.js HTTP/1.1" 404 22 "-" port=44556 "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 (Silvy X Ran; +https://silvyxran.love; +https://silver.inc)" "-" "-" "<host>" 3826 150.158.139.65 [17/Jul/2026:05:14:16 -0700] "GET /static/js/bundle.js HTTP/1.1" 404 22 "-" port=44556 "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 (Silvy X Ran; +https://silvyxran.love; +https://silver.inc)" "-" "-" "<host>" 2766 150.158.139.65 [17/Jul/2026:05:14:16 -0700] "GET /dist/main.js HTTP/1.1" 404 22 "-" port=44556 "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 (Silvy X Ran; +https://silvyxran.love; +https://silver.inc)" "-" "-" "<host>" 2805 150.158.139.65 [17/Jul/2026:05:14:17 -0700] "GET /dist/app.js HTTP/1.1" 404 show less	Web App Attack
🇫🇷 largo-it.net	2026-07-17 10:23:35 (11 hours ago)	Jul 17 12:21:22 vps-9f3cdc33 haproxy[1195832]: 150.158.139.65:48774 [17/Jul/2026:12:21:21.805] www_f ... show more Jul 17 12:21:22 vps-9f3cdc33 haproxy[1195832]: 150.158.139.65:48774 [17/Jul/2026:12:21:21.805] www_frontend~ finance_cluster/finance1_test1_https 0/0/10/357/367 404 3252 - - ---- 62/14/0/0/0 0/0 "GET /config HTTP/1.1" Jul 17 12:23:25 vps-9f3cdc33 haproxy[1195832]: 150.158.139.65:36286 [17/Jul/2026:12:23:25.476] www_frontend~ finance_cluster/finance1_test1_https 0/0/11/374/385 404 3252 - - ---- 67/22/0/0/0 0/0 "GET /cdp_api_key.json HTTP/1.1" Jul 17 12:23:26 vps-9f3cdc33 haproxy[1195832]: 150.158.139.65:36286 [17/Jul/2026:12:23:26.260] www_frontend~ finance_cluster/finance1_test1_https 0/0/11/146/157 404 3252 - - ---- 67/22/0/0/0 0/0 "GET /app.js HTTP/1.1" Jul 17 12:23:26 vps-9f3cdc33 haproxy[1195832]: 150.158.139.65:36286 [17/Jul/2026:12:23:26.813] www_frontend~ finance_cluster/finance1_test1_https 0/0/11/47/58 404 3252 - - ---- 67/22/0/0/0 0/0 "GET /main.js HTTP/1.1" Jul 17 12:23:28 vps-9f3cdc33 haproxy[1195832]: 150.158.139.65:36286 [17/Jul/2026:12:23:28.736] www_frontend~ finance_cl ... show less	Hacking Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 10:12:47 (11 hours ago)	(mod_security) mod_security (id:210492) triggered by 150.158.139.65 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 150.158.139.65 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 06:12:41.884563 2026] [security2:error] [pid 9783:tid 9783] [client 150.158.139.65:61058] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gslandservices.soviaenterprises.com"] [uri "/.env.backup"] [unique_id "aloAGSvVUttCuKAw49HUZQAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 08:48:20 (13 hours ago)	(mod_security) mod_security (id:210492) triggered by 150.158.139.65 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 150.158.139.65 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 04:48:13.129240 2026] [security2:error] [pid 12714:tid 12832] [client 150.158.139.65:22428] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.oftv.hdtv55.com"] [uri "/.env"] [unique_id "alnsTQAmQvKuBGHJlUiC9QAAAQY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 07:55:06 (14 hours ago)	(mod_security) mod_security (id:210492) triggered by 150.158.139.65 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 150.158.139.65 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 03:54:58.331484 2026] [security2:error] [pid 416735:tid 416735] [client 150.158.139.65:46048] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.armstrongpartnersllc.com.ssl-grp.com"] [uri "/.env.development.local"] [unique_id "alnf0n6Ub13glD98x9F8xwAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 07:39:05 (14 hours ago)	(mod_security) mod_security (id:210492) triggered by 150.158.139.65 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 150.158.139.65 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 03:38:59.284389 2026] [security2:error] [pid 599142:tid 599142] [client 150.158.139.65:51666] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.davidsonmanagement.net"] [uri "/.env.local"] [unique_id "alncEz7gwRQNgflEZnTJ9AAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 07:10:12 (14 hours ago)	(mod_security) mod_security (id:210492) triggered by 150.158.139.65 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 150.158.139.65 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 03:10:06.376413 2026] [security2:error] [pid 24311:tid 24311] [client 150.158.139.65:13016] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "summitartists.com"] [uri "/.env.development"] [unique_id "alnVThS-VhiRRKTe88o-6QAAAB0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 06:00:06 (16 hours ago)	(mod_security) mod_security (id:210492) triggered by 150.158.139.65 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 150.158.139.65 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 01:59:57.253767 2026] [security2:error] [pid 606:tid 661] [client 150.158.139.65:20666] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sjstauffer.com"] [uri "/.env"] [unique_id "alnE3eXcjxXRYjvI0LSrIgAAAcY"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Savvii	2026-07-17 04:48:14 (17 hours ago)	20 attempts against mh-misbehave-ban on tin	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 03:32:39 (18 hours ago)	(mod_security) mod_security (id:210492) triggered by 150.158.139.65 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 150.158.139.65 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 23:32:34.954015 2026] [security2:error] [pid 23042:tid 23042] [client 150.158.139.65:48582] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "underraided.com"] [uri "/.env.save"] [unique_id "almiUuF8qKGZMKLeVI5q9QAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 33 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 45.153.34.71

🇧🇷 200.233.246.65

🇺🇸 198.74.56.68

🇨🇳 116.228.233.93

🇨🇳 106.89.50.210

🇹🇷 94.154.43.192

🇧🇩 61.247.179.182

🇳🇱 45.148.10.40

🇺🇸 18.237.54.119

🇦🇺 13.55.68.210

🇭🇰 8.210.25.244

🇨🇭 209.99.185.195

🇷🇺 188.32.210.218

🇺🇸 54.211.218.254

🇺🇸 54.203.130.134

🇦🇺 54.66.149.122

🇺🇸 52.38.168.119

🇭🇰 47.243.213.8

🇸🇬 47.130.153.42

🇩🇪 45.135.141.8