JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 150.241.206.248

150.241.206.248 was found in our database!

This IP was reported 70 times. Confidence of Abuse is 0%: ?

ISP	PoloCloud Computing (Hong Kong) Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS151338
Domain Name	polocloud.hk
Country	🇺🇸 United States of America
City	Salt Lake City, Utah

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 150.241.206.248

Whois 150.241.206.248

IP Abuse Reports for 150.241.206.248:

This IP address has been reported a total of 70 times from 44 distinct sources. 150.241.206.248 was first reported on October 17th 2025, and the most recent report was 6 months ago.

Old Reports: The most recent abuse report for this IP address is from 6 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 LIT-BR0169	2025-12-13 16:48:00 (6 months ago)	Path transversal attempt, using the syntax "lang=../../../../../../../../tmp/index1" ~Reported by ... show more Path transversal attempt, using the syntax "lang=../../../../../../../../tmp/index1" ~Reported by SOC - Logical IT show less	Web App Attack
🇰🇪 Oste	2025-10-20 08:13:26 (8 months ago)	Unauthorized activity detected from reported IP, including scanning and intrusion attempts.	Hacking SQL Injection Bad Web Bot Web App Attack
🇫🇷 service Informatique	2025-10-19 04:00:37 (8 months ago)	/cgi-bin	Web App Attack
🇬🇧 [email protected]	2025-10-19 00:37:25 (8 months ago)	...	Brute-Force SSH
🇨🇭 Peter-Johann Sarbach	2025-10-18 23:21:19 (8 months ago)	Hacking website	Hacking
🇦🇹 urnilxfgbez	2025-10-18 22:45:00 (8 months ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇹🇷 rtbh.com.tr	2025-10-18 08:09:25 (8 months ago)	list.rtbh.com.tr report: tcp/23	Brute-Force
🇺🇸 bigscoots.com	2025-10-18 07:34:28 (8 months ago)	150.241.206.248 (US/United States/-), 5 distributed sshd attacks on account [root] in the last 3600 ... show more 150.241.206.248 (US/United States/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Oct 18 02:34:18 15017 sshd[18514]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.241.206.248 user=root Oct 18 02:34:19 15017 sshd[18514]: Failed password for root from 150.241.206.248 port 56912 ssh2 Oct 18 02:34:20 15017 sshd[18516]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.241.206.248 user=root Oct 18 01:37:09 15017 sshd[14209]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.181.143.69 user=root Oct 18 01:37:11 15017 sshd[14209]: Failed password for root from 103.181.143.69 port 42904 ssh2 IP Addresses Blocked: show less	Brute-Force SSH
🇪🇸 masterguru	2025-10-18 07:29:54 (8 months ago)	COMODO WAF: PHP Injection Attack: I/O Stream Found. Pattern match "(?i)php://(std(in\|out\|err)\|(in\|ou ... show more COMODO WAF: PHP Injection Attack: I/O Stream Found. Pattern match "(?i)php://(std(in\|out\|err)\|(in\|out)put\|fd\|memory\|temp\|filter)" at ARGS_NAMES:\\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. (218420-122) show less	Hacking
🇦🇹 Pingger Shikkoken	2025-10-18 06:40:09 (8 months ago)	2025-10-18T06:40:09+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC ... show more 2025-10-18T06:40:09+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:88:32:08:00 SRC=150.241.206.248 DST=10.1.1.2 LEN=40 TOS=0x00 PREC=0x00 TTL=41 ID=57916 PROTO=TCP SPT=48045 DPT=80 WINDOW=65535 RES=0x00 SYN URGP=0 show less	Hacking Bad Web Bot
🇺🇸 TPI-Abuse	2025-10-18 06:34:39 (8 months ago)	(mod_security) mod_security (id:218420) triggered by 150.241.206.248 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:218420) triggered by 150.241.206.248 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 18 02:34:36.130634 2025] [security2:error] [pid 7150:tid 7150] [client 150.241.206.248:56788] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in\|out\|err)\|(in\|out)put\|fd\|memory\|temp\|filter)" at ARGS_NAMES:\\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found\|\|192.64.150.109:80\|F\|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "192.64.150.109"] [uri "/hello.world"] [unique_id "aPM0_BumnN1Is_7yQjm8fgAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 www.narsol.org	2025-10-18 06:11:08 (8 months ago)	Oct 18 02:11:04 do1 sshd[299611]: Connection closed by authenticating user root 150.241.206.248 port ... show more Oct 18 02:11:04 do1 sshd[299611]: Connection closed by authenticating user root 150.241.206.248 port 53038 [preauth] Oct 18 02:11:04 do1 sshd[299691]: Invalid user ntp from 150.241.206.248 port 53052 Oct 18 02:11:04 do1 sshd[299691]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.241.206.248 Oct 18 02:11:07 do1 sshd[299691]: Failed password for invalid user ntp from 150.241.206.248 port 53052 ssh2 Oct 18 02:11:07 do1 sshd[299691]: Connection closed by invalid user ntp 150.241.206.248 port 53052 [preauth] ... show less	Brute-Force SSH
🇳🇱 bontekoe.technology	2025-10-18 05:41:22 (8 months ago)	150.241.206.248 banned on rtr - Threshold reached: 5 failures	Web App Attack
🇺🇸 bigscoots.com	2025-10-18 05:20:09 (8 months ago)	(sshd) Failed SSH login from 150.241.206.248 (US/United States/-): 5 in the last 3600 secs; Ports: * ... show more (sshd) Failed SSH login from 150.241.206.248 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Oct 18 00:19:59 16386 sshd[29678]: Invalid user app from 150.241.206.248 port 60588 Oct 18 00:20:01 16386 sshd[29678]: Failed password for invalid user app from 150.241.206.248 port 60588 ssh2 Oct 18 00:20:01 16386 sshd[29680]: Invalid user admin from 150.241.206.248 port 49962 Oct 18 00:20:03 16386 sshd[29680]: Failed password for invalid user admin from 150.241.206.248 port 49962 ssh2 Oct 18 00:20:04 16386 sshd[29742]: Invalid user activemq from 150.241.206.248 port 49966 show less	Brute-Force SSH
🇺🇸 MPL	2025-10-18 05:10:43 (8 months ago)	tcp/2375 (3 or more attempts)	Port Scan

Showing 1 to 15 of 70 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 157.245.104.100

🇩🇪 156.236.31.85

🇨🇳 123.154.2.105

🇬🇧 83.136.251.36

🇵🇰 14.192.157.137

🇺🇸 173.8.207.1

🇳🇱 160.119.71.136

🇮🇳 122.187.237.122

🇨🇳 115.190.211.2

🇺🇸 66.132.172.233

🇲🇲 43.231.66.132

🇺🇸 24.119.52.56

🇨🇳 223.85.251.61

🇦🇷 186.62.100.46

🇧🇴 181.188.176.242

🇮🇳 20.219.91.90

🇭🇰 199.45.154.135

🇺🇸 162.216.149.31

🇳🇱 103.176.90.41

🇳🇱 45.148.10.141