JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 119.28.105.166

119.28.105.166 was found in our database!

This IP was reported 186 times. Confidence of Abuse is 0%: ?

ISP	Tencent cloud computing (Beijing) Co., Ltd.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS132203
Domain Name	tencent.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 119.28.105.166

Whois 119.28.105.166

IP Abuse Reports for 119.28.105.166:

This IP address has been reported a total of 186 times from 24 distinct sources. 119.28.105.166 was first reported on July 3rd 2025, and the most recent report was 10 months ago.

Old Reports: The most recent abuse report for this IP address is from 10 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇷🇴 INTEQ	2025-09-14 04:09:31 (10 months ago)	Web attack from 119.28.105.166	Web App Attack
🇫🇷 Sklurk	2025-09-12 20:34:09 (10 months ago)	Web App Attack	Web App Attack
🇩🇪 stinpriza	2025-09-11 08:48:12 (10 months ago)	Web App Attack	Web App Attack
🇷🇴 INTEQ	2025-09-10 07:45:46 (10 months ago)	Web attack from 119.28.105.166	Web App Attack
🇫🇷 Sklurk	2025-09-10 01:26:34 (10 months ago)	Web App Attack	Web App Attack
🇸🇬 mypatricks	2025-09-09 02:25:49 (10 months ago)	119.28.105.166 \| Port: 58966 \| DNS: 119.28.105.166 2025-09-09T10:25:48+08:00 Asia/Singapore \| Bad Be ... show more 119.28.105.166 \| Port: 58966 \| DNS: 119.28.105.166 2025-09-09T10:25:48+08:00 Asia/Singapore \| Bad Behavior Activity \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36 HTTP/1.1 443 GET \| URL: /account/signin/?86443791794ed9d72c36b063c93993a6=1726402379&1726402379 \| Ref: - \| Country: SG/Singapore/+08:00 IP City: Singapore 97c33cb5bf0f3fbc-SIN/Singapore, Singapore 1 hits/0 secs Robots 3 show less	Web Spam Blog Spam Brute-Force Exploited Host Web App Attack
Anonymous	2025-09-08 09:56:10 (10 months ago)	Reported from Nginx log analysis 18. Log: 119.28.105.166 - - [08/Sep/2025:xx:xx:xx 0200] "GET /tag/ ... show more Reported from Nginx log analysis 18. Log: 119.28.105.166 - - [08/Sep/2025:xx:xx:xx 0200] "GET /tag/mohammed-bin-salman/ HTTP/1.1" xxx xxx "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36" "-" "SG Singapore Singapore" "AS132203" "Tencent Building, Kejizhongyi Avenue" show less	Port Scan Brute-Force SSH
🇷🇴 INTEQ	2025-09-08 05:48:26 (10 months ago)	Web attack from 119.28.105.166	Web App Attack
🇺🇸 TPI-Abuse	2025-09-07 00:52:19 (10 months ago)	(mod_security) mod_security (id:210730) triggered by 119.28.105.166 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 119.28.105.166 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 06 20:52:13.118546 2025] [security2:error] [pid 14208:tid 14234] [client 119.28.105.166:52486] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|batonrougegazette.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "batonrougegazette.com"] [uri "/uncategorized/brownsville-police-discuss-crash-that-killed-eight/creot-f10003.com"] [unique_id "aLzXPXsVi8MktSgyQY52ZAAAANg"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-09-06 21:56:17 (10 months ago)	Reported from Nginx log analysis 18. Log: 119.28.105.166 - - [06/Sep/2025:xx:xx:xx 0200] "GET /tag/ ... show more Reported from Nginx log analysis 18. Log: 119.28.105.166 - - [06/Sep/2025:xx:xx:xx 0200] "GET /tag/southafrica/ HTTP/1.1" xxx xxx "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" "-" "SG Singapore Singapore" "AS132203" "Tencent Building, Kejizhongyi Avenue" show less	Port Scan Brute-Force SSH
🇹🇷 rtbh.com.tr	2025-09-06 20:08:39 (10 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇺🇸 etu brutus	2025-09-06 10:13:56 (10 months ago)	119.28.105.166 Blocked by [Attack Vector List] ...	Hacking Brute-Force Exploited Host
🇹🇷 rtbh.com.tr	2025-09-06 00:08:37 (10 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇸🇬 mypatricks	2025-09-05 20:37:41 (10 months ago)	119.28.105.166 \| Port: 18416 \| DNS: 119.28.105.166 2025-09-06T04:37:40+08:00 Asia/Singapore \| Bad Be ... show more 119.28.105.166 \| Port: 18416 \| DNS: 119.28.105.166 2025-09-06T04:37:40+08:00 Asia/Singapore \| Bad Behavior Activity \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 HTTP/1.1 443 GET \| URL: /shop/favourite/?1737532502= \| Ref: - \| Country: SG/Singapore/+08:00 IP City: Singapore 97a886a168b0405f-SIN/Singapore, Singapore 1 hits/0 secs Robots 2 show less	Web Spam Blog Spam Brute-Force Exploited Host Web App Attack
🇹🇷 rtbh.com.tr	2025-09-05 20:08:37 (10 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force

Showing 1 to 15 of 186 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 204.9.37.1

🇺🇸 2a09:bac1:76a0:460::5e:6f

🇩🇪 213.209.159.108

🇦🇷 181.116.220.251

🇨🇳 153.36.138.88

🇭🇰 118.193.39.103

🇮🇩 103.98.176.164

🇦🇹 95.143.233.43

🇳🇱 45.148.10.152

🇬🇧 35.203.210.117

🇺🇸 35.87.22.98

🇺🇸 20.80.105.17

🇧🇷 191.6.25.239

🇹🇭 119.42.105.111

🇨🇳 106.37.72.234

🇮🇳 103.54.101.248

🇿🇲 41.63.63.211

🇨🇳 39.174.42.18

🇨🇳 36.151.68.7

🇨🇳 36.150.50.107