AbuseIPDB » 150.251.225.4
150.251.225.4
This IP was reported 6 times. Confidence of
Abuse
is 22% : ?
ISP
KrugerCorp Holding ApS
Usage Type
Data Center/Web Hosting/Transit
ASN
AS212238
Domain Name
krugercorp.dk
Country
🇦🇹
Austria
City
Vienna, State of Vienna
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 150.251.225.4 :
This IP address has been reported a total of
6
times from
3 distinct
sources.
150.251.225.4 was first reported on
June 13th 2026 , and the most recent report was
1 day ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇳🇱
hostmach
2026-06-18 08:05:46
(1 day ago)
(PERMBLOCK) 150.251.225.4 (AT/Austria/-) has had more than 4 temp blocks in the last 86400 secs; Por ...
show more
(PERMBLOCK) 150.251.225.4 (AT/Austria/-) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs:
show less
Port Scan
🇩🇪
baltic-lab.com
2026-06-17 00:08:22
(2 days ago)
Firewall Detection, DE, Either a port scan or continued brute-force attack by a previously blocked o ...
show more
Firewall Detection, DE, Either a port scan or continued brute-force attack by a previously blocked offender
...
show less
Brute-Force
Port Scan
🇺🇸
TPI-Abuse
2026-06-13 20:24:56
(6 days ago)
(mod_security) mod_security (id:210801) triggered by 150.251.225.4 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210801) triggered by 150.251.225.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 16:24:48.747119 2026] [security2:error] [pid 2046:tid 2046] [client 150.251.225.4:57241] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "paros" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "17"] [id "210801"] [rev "2"] [msg "COMODO WAF: Request Indicates a Security Scanner Scanned the Site||poltorak.net|F|2"] [data "mozilla/5.0 (windows nt 5.1; rv:22.0) gecko/20100101 firefox/22.0 paros/3.2.13"] [severity "CRITICAL"] [tag "CWAF"] [tag "Agents"] [hostname "poltorak.net"] [uri "/license.txt"] [unique_id "ai28kP5aZ_gfrtRRe9wDyAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-13 16:21:02
(6 days ago)
(mod_security) mod_security (id:210801) triggered by 150.251.225.4 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210801) triggered by 150.251.225.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 12:20:58.100768 2026] [security2:error] [pid 10138:tid 10173] [client 150.251.225.4:37165] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "paros" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "17"] [id "210801"] [rev "2"] [msg "COMODO WAF: Request Indicates a Security Scanner Scanned the Site||www.biblewriter.com|F|2"] [data "mozilla/5.0 (windows nt 5.1; rv:22.0) gecko/20100101 firefox/22.0 paros/3.2.13"] [severity "CRITICAL"] [tag "CWAF"] [tag "Agents"] [hostname "www.biblewriter.com"] [uri "/license.txt"] [unique_id "ai2Danf6QvVGxbWBCUF3FAAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-13 13:00:30
(6 days ago)
(mod_security) mod_security (id:210801) triggered by 150.251.225.4 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210801) triggered by 150.251.225.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 09:00:23.246319 2026] [security2:error] [pid 14814:tid 14824] [client 150.251.225.4:49473] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "paros" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "17"] [id "210801"] [rev "2"] [msg "COMODO WAF: Request Indicates a Security Scanner Scanned the Site||earthtravel.net|F|2"] [data "mozilla/5.0 (windows nt 5.1; rv:22.0) gecko/20100101 firefox/22.0 paros/3.2.13"] [severity "CRITICAL"] [tag "CWAF"] [tag "Agents"] [hostname "earthtravel.net"] [uri "/license.txt"] [unique_id "ai1UZ-JBjlR6LqLsdQcr9QAAAQc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-13 10:57:52
(6 days ago)
(mod_security) mod_security (id:210801) triggered by 150.251.225.4 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210801) triggered by 150.251.225.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 06:57:44.593631 2026] [security2:error] [pid 27387:tid 27387] [client 150.251.225.4:56591] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "paros" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "17"] [id "210801"] [rev "2"] [msg "COMODO WAF: Request Indicates a Security Scanner Scanned the Site||www.axiomemail.net|F|2"] [data "mozilla/5.0 (windows nt 5.1; rv:22.0) gecko/20100101 firefox/22.0 paros/3.2.13"] [severity "CRITICAL"] [tag "CWAF"] [tag "Agents"] [hostname "www.axiomemail.net"] [uri "/license.txt"] [unique_id "ai03qKPN7IeJMN2ji2nMAgAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Showing 1 to
6
of 6 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: