JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 1.86.246.52

1.86.246.52

Neutral Activity

9 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

CHINANET SHAANXI PROVINCE NETWORK

Usage Type

Fixed Line ISP

ASN

AS4134

Domain Name

xa.sn.cn

Country

🇨🇳 China

City

Xi'an, Shaanxi

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

1.86.246.52 has been reported 9 times. The most recent report is from 2 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 1.86.246.52:

This IP address has been reported a total of 9 times from 4 distinct sources. 1.86.246.52 was first reported on July 6th 2026, and the most recent report was 2 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇱 spd.co.il	2026-07-08 18:01:33 (2 months ago)	Web application attack detected	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-07-07 03:50:38 (2 months ago)	(mod_security) mod_security (id:211190) triggered by 1.86.246.52 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:211190) triggered by 1.86.246.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 23:50:31.946052 2026] [security2:error] [pid 3749:tid 3749] [client 1.86.246.52:11296] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt\|\|isaacrivas.com\|F\|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /?C=/etc/passwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "isaacrivas.com"] [uri "/"] [unique_id "akx3hwkcN8u5Za9bt6M-RgAAAAk"], referer: http://isaacrivas.com/?C=/etc/passwd show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-07 02:53:34 (2 months ago)	(mod_security) mod_security (id:211190) triggered by 1.86.246.52 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:211190) triggered by 1.86.246.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 22:53:27.690600 2026] [security2:error] [pid 15000:tid 15000] [client 1.86.246.52:9936] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt\|\|drrw.net\|F\|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /?C=/etc/passwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "drrw.net"] [uri "/"] [unique_id "akxqJ-gPPC5jKqsZIKD4_QAAAA0"], referer: http://drrw.net/?C=/etc/passwd show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-07 02:43:22 (2 months ago)	suspicious behavior	SQL Injection Web App Attack
🇫🇷 dynamix	2026-07-07 00:45:43 (2 months ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-07-06 23:33:20 (2 months ago)	(mod_security) mod_security (id:211190) triggered by 1.86.246.52 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:211190) triggered by 1.86.246.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 19:33:15.512693 2026] [security2:error] [pid 28360:tid 28360] [client 1.86.246.52:11368] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt\|\|neff.family.name\|F\|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /unwiki/doku.php?id=/etc/passwd&do="] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "neff.family.name"] [uri "/unwiki/doku.php"] [unique_id "akw7O54bHS5SAHKGktvHfAAAAA0"], referer: https://neff.family.name/unwiki/doku.php?id=/etc/passwd&do= show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-06 20:42:54 (2 months ago)	(mod_security) mod_security (id:211190) triggered by 1.86.246.52 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:211190) triggered by 1.86.246.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 16:42:48.652464 2026] [security2:error] [pid 18040:tid 18044] [client 1.86.246.52:12412] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt\|\|www.financialcertified.com\|F\|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /?lr=/etc/passwd&siteid=certpmcatg_1"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.financialcertified.com"] [uri "/"] [unique_id "akwTSF3QykseHPrlElLbmgAAAQE"], referer: https://www.financialcertified.com/?lr=/etc/passwd&siteid=certpmcatg_1 show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-06 15:34:24 (2 months ago)	(mod_security) mod_security (id:211190) triggered by 1.86.246.52 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:211190) triggered by 1.86.246.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 11:34:17.232618 2026] [security2:error] [pid 20054:tid 20054] [client 1.86.246.52:12493] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt\|\|albertrealtyltd.com\|F\|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /?C=/etc/passwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "albertrealtyltd.com"] [uri "/"] [unique_id "akvK-aKsP0PKKfUwi6La6wAAAAc"], referer: http://albertrealtyltd.com/?C=/etc/passwd show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-06 02:41:09 (2 months ago)	(mod_security) mod_security (id:211190) triggered by 1.86.246.52 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:211190) triggered by 1.86.246.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 22:41:03.950117 2026] [security2:error] [pid 1564:tid 1564] [client 1.86.246.52:11622] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt\|\|lamariposagallery.com\|F\|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /?C=/etc/passwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lamariposagallery.com"] [uri "/"] [unique_id "aksVv8yGEjF9TZMcXyM5uQAAAAA"], referer: http://lamariposagallery.com/?C=/etc/passwd show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 9 of 9 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 216.226.76.10

🇧🇷 200.95.221.12

🇦🇷 186.60.203.160

🇺🇸 172.174.17.234

🇰🇷 218.155.106.83

🇳🇱 195.178.110.30

🇪🇨 157.100.61.39

🇺🇸 151.245.35.142

🇺🇸 143.110.155.67

🇷🇴 92.118.39.50

🇦🇷 38.183.91.147

🇬🇧 35.203.210.69

🇧🇪 35.187.117.84

🇸🇬 34.142.158.75

🇩🇪 34.32.107.244

🇦🇷 190.225.124.56

🇪🇬 156.217.78.245

🇨🇳 114.66.1.193

🇮🇳 103.174.28.90

🇧🇬 78.128.114.174