JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 139.28.49.232

139.28.49.232 was found in our database!

This IP was reported 24 times. Confidence of Abuse is 67%: ?

67%

ISP	Telecom SY
Usage Type	Fixed Line ISP
ASN	AS216472
Domain Name	highspeed-sy.com
Country	🇸🇾 Syrian Arab Republic
City	Aleppo, Aleppo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 139.28.49.232

Whois 139.28.49.232

IP Abuse Reports for 139.28.49.232:

This IP address has been reported a total of 24 times from 21 distinct sources. 139.28.49.232 was first reported on May 27th 2026, and the most recent report was 18 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 kosada.com	2026-08-25 10:25:50 (18 hours ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-08-22 06:54:06 (3 days ago)	(mod_security) mod_security (id:210730) triggered by 139.28.49.232 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 139.28.49.232 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 02:53:57.795315 2026] [security2:error] [pid 32199:tid 32199] [client 139.28.49.232:56344] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|bsa1688.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "bsa1688.com"] [uri "/[email protected]"] [unique_id "aolHhcJ9wJQOwZ4YPWVBKwAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 el-brujo	2026-08-21 09:44:05 (4 days ago)	Cloudflare WAF: Request Path: / Request Query: ?4zxbMDSQF6 Host: foro.elhacker.net userAgent: Mozill ... show more Cloudflare WAF: Request Path: / Request Query: ?4zxbMDSQF6 Host: foro.elhacker.net userAgent: Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Safari/605.1.15 Action: block Source: l7ddos ASN Description: High Speed For Internet Services L.L.C Country: SY Method: GET Timestamp: 2026-08-21T09:44:05Z ruleId: cc5ac300fbc54ceda2944ca261bc58d5. Report generated by Cloudflare-WAF-to-AbuseIPDB. show less	Hacking SQL Injection Web App Attack
🇫🇷 Zkillu	2026-08-19 22:29:22 (6 days ago)	UDP flood (DDoS) vs AS215599: 1456 pkts / 2.08 MB to UDP 80/8443 across 505 dst IP(s), 2026-08-19 21 ... show more UDP flood (DDoS) vs AS215599: 1456 pkts / 2.08 MB to UDP 80/8443 across 505 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host
🇫🇷 dmallet	2026-08-19 22:29:22 (6 days ago)	UDP flood (DDoS) vs AS215599: 1456 pkts / 2.08 MB to UDP 80/8443 across 505 dst IP(s), 2026-08-19 21 ... show more UDP flood (DDoS) vs AS215599: 1456 pkts / 2.08 MB to UDP 80/8443 across 505 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host
🇪🇸 librebit	2026-08-18 14:24:18 (1 week ago)	Brute force	Brute-Force
🇻🇳 trung.fun	2026-08-18 03:33:36 (1 week ago)	DDoS, Hack, Brute Force, Web Attack ...	DDoS Attack Web Spam Hacking Brute-Force Web App Attack
🇺🇸 kosada.com	2026-08-12 11:22:13 (1 week ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇩🇪 _ArminS_	2026-08-11 22:46:06 (2 weeks ago)	WEB-Scan 52648:80 detected 2026.08.12 00:46:06 blocked until 2026.09.30 17:48:53	Port Scan
🇨🇭 backslash	2026-08-07 11:54:13 (2 weeks ago)	ddos-2026-08-07	DDoS Attack
🇵🇱 bmino.pl	2026-08-02 12:43:11 (3 weeks ago)	Autoban IP(2): 139.28.49.232 - Hostname: High Speed For Internet Services L.L.C - City: Aleppo - Reg ... show more Autoban IP(2): 139.28.49.232 - Hostname: High Speed For Internet Services L.L.C - City: Aleppo - Region: Aleppo Governorate - Country: Syria - Location: 36.2012,37.1612 - Organization: Telecom SY - failed attempts. show less	Web App Attack
🇫🇷 hghosting	2026-08-01 13:49:59 (3 weeks ago)	CrowdSec auto-report: crowdsecurity/nginx-req-limit-exceeded — 6 events	Brute-Force SSH
🇺🇸 kosada.com	2026-07-31 04:51:29 (3 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 COMPLEX	2026-07-28 19:41:24 (4 weeks ago)	Banned by Multi Agent · node …jrh1 · reason=SSH banner invalid / banner exchange invalid format · at ... show more Banned by Multi Agent · node …jrh1 · reason=SSH banner invalid / banner exchange invalid format · attempts=1 · SSH banner invalid / banner exchange invalid format show less	Brute-Force SSH
🇩🇪 Inamin	2026-07-28 03:05:08 (4 weeks ago)	139.28.49.232 - - [28/Jul/2026:05:09:39 +0800] "GET /index.php?days=30&from=20260516045319&hideanons ... show more 139.28.49.232 - - [28/Jul/2026:05:09:39 +0800] "GET /index.php?days=30&from=20260516045319&hideanons=1&hidebots=0&hideminor=1&hidemyself=1&title=%E7%89%B9%E6%AE%8A%3A%E8%BF%91%E6%9C%9F%E8%AE%8A%E5%8B%95&userExpLevel=unregistered HTTP/2.0" 403 153 "-" "Mozilla/5.0 (Windows; U; Windows NT 4.0) AppleWebKit/535.4.2 (KHTML, like Gecko) Version/4.0.4 Safari/535.4.2" ... show less	Brute-Force

Showing 1 to 15 of 24 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇴 181.59.3.9

🇭🇰 152.32.132.189

🇲🇾 47.254.253.14

🇨🇦 20.48.251.3

🇫🇷 2400:cb00:534:1000:aaff:b07a:2019:dd23

🇯🇴 212.34.22.9

🇧🇷 205.210.31.246

🇧🇪 198.235.24.156

🇲🇺 197.227.8.186

🇧🇷 191.190.172.14

🇫🇷 185.177.72.24

🇺🇾 167.63.181.37

🇧🇷 152.32.199.115

🇮🇳 106.51.84.91

🇫🇷 91.231.89.171

🇬🇧 81.19.219.216

🇹🇼 59.126.160.54

🇺🇸 34.182.176.203

🇺🇸 17.248.206.64

🇰🇷 14.49.131.77