JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 150.251.225.1

150.251.225.1 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 71%: ?

71%

ISP	KrugerCorp Holding ApS
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Domain Name	krugercorp.dk
Country	🇦🇹 Austria
City	Vienna, State of Vienna

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 150.251.225.1

Whois 150.251.225.1

IP Abuse Reports for 150.251.225.1:

This IP address has been reported a total of 13 times from 13 distinct sources. 150.251.225.1 was first reported on June 13th 2026, and the most recent report was 19 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-07-07 21:05:59 (19 hours ago)	Blocked by UFW (TCP on 61041) Source port: 28685 TTL: 45 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 61041) Source port: 28685 TTL: 45 Packet length: 60 TOS: 0x08 This report (for 150.251.225.1) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 nationaleventpros.com	2026-07-07 18:51:22 (21 hours ago)	WordPress login attempt	Brute-Force
🇺🇸 integrantservices.com	2026-07-07 17:52:41 (22 hours ago)	(wordpress) Failed wordpress login from 150.251.225.1 (AT/Austria/-)	Brute-Force
🇨🇦 electronico	2026-07-07 08:38:19 (1 day ago)	2026-07-07T19:37:51.065652+11:00 mail postfix/submission/smtpd[558776]: warning: unknown[150.251.225 ... show more 2026-07-07T19:37:51.065652+11:00 mail postfix/submission/smtpd[558776]: warning: unknown[150.251.225.1]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=serveur@host 2026-07-07T19:38:00.213870+11:00 mail postfix/submission/smtpd[558776]: warning: unknown[150.251.225.1]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=serveur 2026-07-07T19:38:19.073879+11:00 mail postfix/submission/smtpd[558776]: warning: unknown[150.251.225.1]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=serveur@host ... show less	Brute-Force Email Spam
🇫🇮 notelseit	2026-07-07 08:12:49 (1 day ago)	2026-07-07T10:12:44.816962+02:00 mail postfix/submission/smtpd[1176009]: NOQUEUE: reject: RCPT from ... show more 2026-07-07T10:12:44.816962+02:00 mail postfix/submission/smtpd[1176009]: NOQUEUE: reject: RCPT from unknown[150.251.225.1]: 450 4.7.25 Client host rejected: cannot find your hostname, [150.251.225.1]; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<DvxMOiD> 2026-07-07T10:12:49.168822+02:00 mail postfix/submission/smtpd[1176009]: warning: unknown[150.251.225.1]: SASL LOGIN authentication failed: (reason unavailable), [email protected] 2026-07-07T10:12:49.377174+02:00 mail postfix/submission/smtpd[1176009]: disconnect from unknown[150.251.225.1] ehlo=2 starttls=1 auth=0/1 commands=3/4 ... show less	Brute-Force Email Spam
🇫🇷 UM3	2026-07-07 08:09:27 (1 day ago)	Exim Auth Failed	Brute-Force
🇧🇷 SvrAdmin	2026-07-07 08:04:13 (1 day ago)	[101] (smtpauth) Failed SMTP AUTH login from 150.251.225.1 (AT/Austria/-): 5 in the last 3600 secs; ... show more [101] (smtpauth) Failed SMTP AUTH login from 150.251.225.1 (AT/Austria/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-07-07 05:02:21 dovecot_login authenticator failed for H=(Ag6xEC5J) [150.251.225.1]:49429: 535 Incorrect authentication data ([email protected]) 2026-07-07 05:02:31 dovecot_login authenticator failed for H=(vHBKOOAgo) [150.251.225.1]:36426: 535 Incorrect authentication data (set_id=imoveis) 2026-07-07 05:02:49 dovecot_login authenticator failed for H=(LM1Brd) [150.251.225.1]:11884: 535 Incorrect authentication data ([email protected]) 2026-07-07 05:02:55 dovecot_login authenticator failed for H=(aviX3J) [150.251.225.1]:49079: 535 Incorrect authentication data (set_id=imoveis) 2026-07-07 05:04:08 dovecot_login authenticator failed for H=(CxFAwj0IW) [150.251.225.1]:12069: 535 Incorrect authentication data ([email protected]) show less	Port Scan Hacking Brute-Force Exploited Host
🇫🇷 matthieul.dev	2026-07-01 23:35:20 (6 days ago)	Blocked by os-abuseipdb; 17 hits, proto=tcp,udp, ports=2442	Port Scan Brute-Force
Anonymous	2026-06-29 13:50:02 (1 week ago)	...	Brute-Force
🇨🇿 unhfree.net	2026-06-29 13:43:33 (1 week ago)	Jun 29 15:43:24 canopus postfix/smtpd[4003332]: NOQUEUE: reject: RCPT from unknown[150.251.225.1]: 5 ... show more Jun 29 15:43:24 canopus postfix/smtpd[4003332]: NOQUEUE: reject: RCPT from unknown[150.251.225.1]: 554 5.7.1 <[email protected]>: Sender address rejected: Access denied; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<joGvWpFnH> Jun 29 15:43:26 canopus postfix/smtpd[4003332]: NOQUEUE: reject: RCPT from unknown[150.251.225.1]: 554 5.7.1 <[email protected]>: Sender address rejected: Access denied; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<wJFQDew> Jun 29 15:43:28 canopus postfix/smtpd[4003332]: NOQUEUE: reject: RCPT from unknown[150.251.225.1]: 554 5.7.1 <[email protected]>: Sender address rejected: Access denied; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<R4mbbTino> Jun 29 15:43:30 canopus postfix/smtpd[4003332]: NOQUEUE: reject: RCPT from unknown[150.251.225.1]: 554 5.7.1 <[email protected]>: Sender address rejected: Access denied; from=<[email protected]> to=<[email protected]> proto=E ... show less	Brute-Force Exploited Host
🇮🇹 VHosting	2026-06-29 11:29:56 (1 week ago)	Detected mail brute force attack from 4 different servers	Brute-Force
Anonymous	2026-06-17 00:03:43 (3 weeks ago)	150.251.225.1 detected on srv01	Port Scan
🇺🇸 TPI-Abuse	2026-06-13 23:16:23 (3 weeks ago)	(mod_security) mod_security (id:210801) triggered by 150.251.225.1 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210801) triggered by 150.251.225.1 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 19:16:17.007018 2026] [security2:error] [pid 9169:tid 9169] [client 150.251.225.1:58097] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "paros" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "17"] [id "210801"] [rev "2"] [msg "COMODO WAF: Request Indicates a Security Scanner Scanned the Site\|\|rsrtelecom.net\|F\|2"] [data "mozilla/5.0 (windows nt 5.1; rv:22.0) gecko/20100101 firefox/22.0 paros/3.2.13"] [severity "CRITICAL"] [tag "CWAF"] [tag "Agents"] [hostname "rsrtelecom.net"] [uri "/license.txt"] [unique_id "ai3kwWUhE1LBV7y1q_eUDwAAABw"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 193.36.225.23

🇨🇳 218.23.95.14

🇳🇱 108.142.154.184

🇮🇩 103.52.115.76

🇳🇱 91.92.40.29

🇺🇸 64.62.156.88

🇮🇪 54.74.80.154

🇺🇸 34.123.134.194

🇸🇬 8.222.147.121

🇸🇬 8.219.213.228

🇺🇸 3.91.151.163

🇺🇸 216.108.231.34

🇺🇸 195.184.76.116

🇺🇸 184.105.247.231

🇨🇳 171.217.73.205

🇫🇷 167.86.82.167

🇬🇧 138.68.156.207

🇮🇳 113.11.231.104

🇳🇱 91.92.40.237

🇨🇦 51.222.155.186