AbuseIPDB » 119.28.58.248
119.28.58.248
This IP was reported 4 times. Confidence of
Abuse
is 0% : ?
ISP
Tencent cloud computing (Beijing) Co., Ltd.
Usage Type
Data Center/Web Hosting/Transit
ASN
AS132203
Domain Name
tencent.com
Country
🇭🇰
Hong Kong
City
Hong Kong
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 119.28.58.248 :
This IP address has been reported a total of
4
times from
4 distinct
sources.
119.28.58.248 was first reported on
February 25th 2026 , and the most recent report was
3 months ago
Old Reports:
The most recent abuse report for this IP address is from
3 months ago
Reporter
IoA Timestamp (UTC)
Comment
Categories
2026-03-03 05:08:00
(3 months ago)
Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to ...
show more
Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to bypass firewall/robots.txt restrictions in printer-friendly.asp
show less
Exploited Host
Bad Web Bot
🇺🇸
TPI-Abuse
2026-03-01 18:26:36
(3 months ago)
(mod_security) mod_security (id:210730) triggered by 119.28.58.248 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 119.28.58.248 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 01 13:26:28.762249 2026] [security2:error] [pid 30151:tid 30151] [client 119.28.58.248:40226] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||gdpeters.com|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gdpeters.com"] [uri "/fiction/NewFiles/WS_FTP.LOG"] [unique_id "aaSE1N4adsCg2kHlmDhuwAAAACE"], referer: https://gdpeters.com/fiction/NewFiles/WS_FTP.LOG
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
ipoac.nl
2026-02-27 16:26:16
(3 months ago)
git.-.nl:443 119.28.58.248 - - [27/Feb/2026:17:26:14 +0100] git.-.nl "GET /-/ziggo-kicker/commits/co ...
show more
git.-.nl:443 119.28.58.248 - - [27/Feb/2026:17:26:14 +0100] git.-.nl "GET /-/ziggo-kicker/commits/commit/cd6332486f262f033bcb669cbb8bb483e0ac67c5/modem-reset.sh HTTP/2.0" 403 2376 "https://git.-.nl/-/ziggo-kicker/commits/commit/cd6332486f262f033bcb669cbb8bb483e0ac67c5/modem-reset.sh" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
show less
Bad Web Bot
🇬🇧
adnscom.net
2026-02-25 19:36:48
(3 months ago)
IPS trigger: Brute force WebApp/CMS scanning/attack
Brute-Force
Web App Attack
Showing 1 to
4
of 4 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: