JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 150.251.225.101

150.251.225.101 was found in our database!

This IP was reported 9 times. Confidence of Abuse is 11%: ?

11%

ISP	KrugerCorp Holding ApS
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Domain Name	krugercorp.dk
Country	🇦🇹 Austria
City	Vienna, State of Vienna

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 150.251.225.101

Whois 150.251.225.101

IP Abuse Reports for 150.251.225.101:

This IP address has been reported a total of 9 times from 2 distinct sources. 150.251.225.101 was first reported on June 13th 2026, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-13 20:43:58 (2 weeks ago)	(mod_security) mod_security (id:210801) triggered by 150.251.225.101 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210801) triggered by 150.251.225.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 16:43:54.894716 2026] [security2:error] [pid 27452:tid 27452] [client 150.251.225.101:64703] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "paros" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "17"] [id "210801"] [rev "2"] [msg "COMODO WAF: Request Indicates a Security Scanner Scanned the Site\|\|cmcnow.net\|F\|2"] [data "mozilla/5.0 (windows nt 5.1; rv:22.0) gecko/20100101 firefox/22.0 paros/3.2.13"] [severity "CRITICAL"] [tag "CWAF"] [tag "Agents"] [hostname "cmcnow.net"] [uri "/license.txt"] [unique_id "ai3BCnpDT2I90rPq9kWkGQAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-13 15:49:06 (2 weeks ago)	(mod_security) mod_security (id:210801) triggered by 150.251.225.101 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210801) triggered by 150.251.225.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 11:49:01.447504 2026] [security2:error] [pid 7041:tid 7041] [client 150.251.225.101:48069] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "paros" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "17"] [id "210801"] [rev "2"] [msg "COMODO WAF: Request Indicates a Security Scanner Scanned the Site\|\|www.desdier.com\|F\|2"] [data "mozilla/5.0 (windows nt 5.1; rv:22.0) gecko/20100101 firefox/22.0 paros/3.2.13"] [severity "CRITICAL"] [tag "CWAF"] [tag "Agents"] [hostname "www.desdier.com"] [uri "/license.txt"] [unique_id "ai177cPqxW2cWQ5drXMq1QAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-13 14:39:22 (2 weeks ago)	(mod_security) mod_security (id:210801) triggered by 150.251.225.101 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210801) triggered by 150.251.225.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 10:39:17.156346 2026] [security2:error] [pid 6743:tid 6743] [client 150.251.225.101:35909] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "paros" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "17"] [id "210801"] [rev "2"] [msg "COMODO WAF: Request Indicates a Security Scanner Scanned the Site\|\|nextstepplus.net\|F\|2"] [data "mozilla/5.0 (windows nt 5.1; rv:22.0) gecko/20100101 firefox/22.0 paros/3.2.13"] [severity "CRITICAL"] [tag "CWAF"] [tag "Agents"] [hostname "nextstepplus.net"] [uri "/license.txt"] [unique_id "ai1rlSp9PhJYmclesmmGMAAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-13 09:28:14 (2 weeks ago)	(mod_security) mod_security (id:210801) triggered by 150.251.225.101 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210801) triggered by 150.251.225.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 05:28:09.377784 2026] [security2:error] [pid 29711:tid 29711] [client 150.251.225.101:53133] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "paros" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "17"] [id "210801"] [rev "2"] [msg "COMODO WAF: Request Indicates a Security Scanner Scanned the Site\|\|ictsl.net\|F\|2"] [data "mozilla/5.0 (windows nt 5.1; rv:22.0) gecko/20100101 firefox/22.0 paros/3.2.13"] [severity "CRITICAL"] [tag "CWAF"] [tag "Agents"] [hostname "ictsl.net"] [uri "/license.txt"] [unique_id "ai0iqVUOsvlRIE6wWHPNGAAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-13 07:50:40 (2 weeks ago)	(mod_security) mod_security (id:210801) triggered by 150.251.225.101 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210801) triggered by 150.251.225.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 03:50:36.057761 2026] [security2:error] [pid 7602:tid 7602] [client 150.251.225.101:61639] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "paros" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "17"] [id "210801"] [rev "2"] [msg "COMODO WAF: Request Indicates a Security Scanner Scanned the Site\|\|koolstra.net\|F\|2"] [data "mozilla/5.0 (windows nt 5.1; rv:22.0) gecko/20100101 firefox/22.0 paros/3.2.13"] [severity "CRITICAL"] [tag "CWAF"] [tag "Agents"] [hostname "koolstra.net"] [uri "/license.txt"] [unique_id "ai0LzAY-GrU5GKekarYbBQAAAB4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-13 07:06:15 (2 weeks ago)	(mod_security) mod_security (id:210801) triggered by 150.251.225.101 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210801) triggered by 150.251.225.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 03:06:09.164620 2026] [security2:error] [pid 1815:tid 1815] [client 150.251.225.101:55767] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "paros" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "17"] [id "210801"] [rev "2"] [msg "COMODO WAF: Request Indicates a Security Scanner Scanned the Site\|\|anus.net\|F\|2"] [data "mozilla/5.0 (windows nt 5.1; rv:22.0) gecko/20100101 firefox/22.0 paros/3.2.13"] [severity "CRITICAL"] [tag "CWAF"] [tag "Agents"] [hostname "anus.net"] [uri "/license.txt"] [unique_id "ai0BYcN8tFC9xMj85wAMowAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Charlesiv	2026-06-13 02:58:57 (2 weeks ago)	Triggered Cloudflare WAF (firewallCustom) from AT. Action taken: BLOCK ASN: 212238 (Datacamp Limited ... show more Triggered Cloudflare WAF (firewallCustom) from AT. Action taken: BLOCK ASN: 212238 (Datacamp Limited) Protocol: HTTP/1.1 (GET method) Endpoint: /license.txt Timestamp: 2026-06-13T00:49:32Z Ray ID: a0ad18914ecc5b5d UA: Mozilla/5.0 (Windows NT 5.1; rv:22.0) Gecko/20100101 Firefox/22.0 Paros/3.2.13 show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-06-13 02:43:01 (2 weeks ago)	(mod_security) mod_security (id:210801) triggered by 150.251.225.101 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210801) triggered by 150.251.225.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 22:42:56.959795 2026] [security2:error] [pid 10546:tid 10546] [client 150.251.225.101:60685] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "paros" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "17"] [id "210801"] [rev "2"] [msg "COMODO WAF: Request Indicates a Security Scanner Scanned the Site\|\|todddavis.net\|F\|2"] [data "mozilla/5.0 (windows nt 5.1; rv:22.0) gecko/20100101 firefox/22.0 paros/3.2.13"] [severity "CRITICAL"] [tag "CWAF"] [tag "Agents"] [hostname "todddavis.net"] [uri "/license.txt"] [unique_id "aizDsMmq6Om_U-eiQd98rQAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-13 00:09:41 (2 weeks ago)	(mod_security) mod_security (id:210801) triggered by 150.251.225.101 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210801) triggered by 150.251.225.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 20:09:36.387491 2026] [security2:error] [pid 29450:tid 29457] [client 150.251.225.101:53961] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "paros" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "17"] [id "210801"] [rev "2"] [msg "COMODO WAF: Request Indicates a Security Scanner Scanned the Site\|\|lisabees.net\|F\|2"] [data "mozilla/5.0 (windows nt 5.1; rv:22.0) gecko/20100101 firefox/22.0 paros/3.2.13"] [severity "CRITICAL"] [tag "CWAF"] [tag "Agents"] [hostname "lisabees.net"] [uri "/license.txt"] [unique_id "aiyfwP_2jm1FKVBoKl6yKQAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 9 of 9 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇱🇹 81.30.98.62

🇩🇪 47.254.152.129

🇲🇽 201.149.53.243

🇧🇷 189.26.120.237

🇩🇪 172.111.80.107

🇺🇸 147.185.132.161

🇨🇳 120.209.186.110

🇺🇸 91.230.168.183

🇮🇩 43.157.224.197

🇳🇱 31.14.32.8

🇺🇸 20.168.125.66

🇺🇸 151.246.219.2

🇺🇸 98.97.107.58

🇷🇴 92.118.39.74

🇱🇹 45.227.254.170

🇨🇭 45.143.200.246

🇰🇷 222.232.176.7

🇩🇪 185.242.3.195

🇳🇱 185.223.235.18

🇺🇸 162.216.150.160