JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

150.5.133.187

Recent Activity

Abuse Confidence Score

38% Elevated

80 reports

27 reporters · latest 1 day ago

ISP: BYTEPLUS
Usage Type: Data Center/Web Hosting/Transit
ASN: AS150436
Domain Name: bytedance.com
Country: 🇭🇰 Hong Kong
City: Hong Kong

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

80 from 27 distinct reporters

First reported

March 23rd 2026

Most recent report

1 day ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 4 🇩🇪 Germany 3 🇫🇷 France 2

Most common categories DDoS Attack 6 Web App Attack 5 Bad Web Bot 4 Exploited Host 1

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Tilellit.PRO	2026-11-10 00:48:38 UTC · (1 day ago)	PrestaShop faceted search filter flooding attempt	DDoS Attack Bad Web Bot
🇺🇸 ersei.net	2026-11-09 01:11:46 UTC · (2 days ago)	Web app exploiting	Web App Attack
🇺🇸 ersei.net	2026-11-07 07:51:30 UTC · (3 days ago)	Web app exploiting	Web App Attack
🇩🇪 milcraft.nl	2026-11-04 23:50:49 UTC · (6 days ago)	Suspicious WooCommerce query combination detected. Not default available on websites. Matched combi patterns: filter_, add-to-cart=, orderby=, product_count=. Activity is consistent with high-volume request abuse.	DDoS Attack Web App Attack
🇺🇸 pixelmemory.us	2026-10-22 03:56:20 UTC · (2 weeks ago)	2026-10-22T03:53:16 150.5.133.187 GET /Photos/Vacation/2013-05%20Japan/raw/IMG_5165.CR2 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 ...	Bad Web Bot
🇫🇷 Tilellit.PRO	2026-10-22 02:50:15 UTC · (2 weeks ago)	WooCommerce YITH AJAX Filder product_cat filter flood attempt with taxonomies	DDoS Attack Bad Web Bot
🇨🇭 ALPHANET	2026-10-20 20:10:03 UTC · (3 weeks ago)	Botnet or web spider not respecting robots.txt	DDoS Attack Exploited Host
🇺🇸 kosada.com	2026-10-10 11:51:16 UTC · (1 month ago)	Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B0%5D=65&topics%5B2%5D=44&topics%5B3%5D=48 GET /[redacted]?topics%5B0%5D=65&topics%5B2%5D=44&topics%5B3%5D=48 (HTTP/1.1 port 443, user agent: "Mozilla/5.0 ... show more Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B0%5D=65&topics%5B2%5D=44&topics%5B3%5D=48 GET /[redacted]?topics%5B0%5D=65&topics%5B2%5D=44&topics%5B3%5D=48 (HTTP/1.1 port 443, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36") show less	DDoS Attack Bad Web Bot
🇩🇪 LRob	2026-09-27 11:07:55 UTC · (1 month ago)	This address is taking part in a large-scale, distributed L7 DDoS against an online shop: automated requests to the shop's search, filter and sort pages — the most expensive pages to serve — sent with no referer and with no page asset loaded, so no b ... show more This address is taking part in a large-scale, distributed L7 DDoS against an online shop: automated requests to the shop's search, filter and sort pages — the most expensive pages to serve — sent with no referer and with no page asset loaded, so no browser is behind them. Each participating address sends only one or two such requests, but we count them by the million: a botnet, compromised devices, or abused proxies. The address is blocked. An investigation into what exactly sends these requests from your network (malware, an open proxy, a rented device) would help stop the attack at its source. \| path: /7-velo-electrique-ville \| query: order=product.position.asc&productListView=grid&productListView=list&q=Taille-L \| 2026-09-27 11:07 UTC show less	DDoS Attack Web App Attack
🇩🇪 Phenix Info	2026-09-13 14:20:46 UTC · (1 month ago)	SmallGuard.fr/Prestashop Massive 403	Web App Attack
🇺🇸 SX Communications	2026-09-02 10:06:12 UTC · (2 months ago)	Blocked abusive HTTP application-layer DoS / botnet traffic from 150.5.133.187: traffic from this address continues high-cost dynamic page and feed requests at abusive rates via TCP/HTTPS despite edge block responses. Likely compromised end-user host ... show more Blocked abusive HTTP application-layer DoS / botnet traffic from 150.5.133.187: traffic from this address continues high-cost dynamic page and feed requests at abusive rates via TCP/HTTPS despite edge block responses. Likely compromised end-user host. show less	DDoS Attack Bad Web Bot Exploited Host
Anonymous	2026-08-30 05:29:02 UTC · (2 months ago)	WEB attack	Brute-Force
🇫🇷 Tilellit.PRO	2026-08-23 02:15:15 UTC · (2 months ago)	WooCommerce YITH AJAX Filder product_cat filter flood attempt with taxonomies	DDoS Attack Bad Web Bot
🇨🇭 4server	2026-08-16 13:38:14 UTC · (2 months ago)	[SunAug1615:38:11.4004142026][security2:error][pid3139234:tid3139522][client150.5.133.187:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?i\)\(10\\\\\\\\.\\\\\\\\d{1\,3}\\\\\\\\.\\\\\\\\d{1\,3}\\\\\\\\.\\\\\\\\d{1\,3}\\|192\\\\\\\\.1 ... show more [SunAug1615:38:11.4004142026][security2:error][pid3139234:tid3139522][client150.5.133.187:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?i\)\(10\\\\\\\\.\\\\\\\\d{1\,3}\\\\\\\\.\\\\\\\\d{1\,3}\\\\\\\\.\\\\\\\\d{1\,3}\\|192\\\\\\\\.168\\\\\\\\.\\\\\\\\d{1\,3}\\\\\\\\.\\\\\\\\d{1\,3}\\|172\\\\\\\\.\(1[6-9]\\|2[0-9]\\|3[0-1]\)\\\\\\\\.\\\\\\\\d{1\,3}\\\\\\\\.\\\\\\\\d{1\,3}\\|fe80::\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"25\"][id\"990004\"][msg\"SSRFattempttoprivate/internalnetworkdetected\"][hostname\"whatsdecor.ch\"][uri\"/negozio/cart\"][unique_id\"aoG9Q7UmhIMNnoHCGuR0ywAAAU8\"] show less	Hacking Web App Attack
🇫🇷 Tilellit.PRO	2026-08-07 06:17:49 UTC · (3 months ago)	WooCommerce YITH AJAX Filder product_cat filter flood attempt with taxonomies	DDoS Attack Bad Web Bot

Showing 1 to 15 of 80 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 200.138.46.19

🇬🇧 35.203.211.70

🇺🇸 216.152.153.88

🇨🇷 190.61.110.246

🇮🇳 168.144.27.51

🇯🇵 111.238.174.6

🇲🇾 103.91.67.125

🇫🇷 91.196.152.139

🇸🇬 68.183.225.196

🇺🇸 66.132.159.90

🇨🇳 47.113.195.222

🇬🇧 35.203.211.125

🇵🇰 223.123.8.188

🇺🇸 209.207.187.74

🇸🇬 188.166.233.47

🇺🇸 187.55.32.165

🇺🇸 162.216.150.224

🇮🇩 103.159.199.43

🇧🇩 103.42.228.178

🇧🇪 35.206.183.251