JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 175.24.248.212

175.24.248.212 was found in our database!

This IP was reported 24 times. Confidence of Abuse is 0%: ?

ISP	Tencent cloud computing (Beijing) Co., Ltd.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS45090
Domain Name	tencentcloud.com
Country	🇨🇳 China
City	Shanghai, Shanghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 175.24.248.212

Whois 175.24.248.212

IP Abuse Reports for 175.24.248.212:

This IP address has been reported a total of 24 times from 5 distinct sources. 175.24.248.212 was first reported on April 19th 2025, and the most recent report was 4 months ago.

Old Reports: The most recent abuse report for this IP address is from 4 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-04-27 20:38:56 (4 months ago)	(mod_security) mod_security (id:210730) triggered by 175.24.248.212 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 175.24.248.212 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 27 16:38:50.859224 2026] [security2:error] [pid 22362:tid 22362] [client 175.24.248.212:8552] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|gamepart.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gamepart.com"] [uri "/home/tancedi1/gamepart.com"] [unique_id "ae_JWlKL6ysmNOHjXJ4vjAAAAAc"], referer: https://gamepart.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-23 01:44:44 (4 months ago)	(mod_security) mod_security (id:217291) triggered by 175.24.248.212 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:217291) triggered by 175.24.248.212 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 22 21:44:40.105352 2026] [security2:error] [pid 3515136:tid 3515136] [client 175.24.248.212:16050] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(\\\\n\|\\\\r)" at ARGS_NAMES:tngneedres\\r\\n1f40\\r\\nults. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "145"] [id "217291"] [rev "2"] [msg "HTTP Header Injection Attack via payload (CR/LF detected)\|\|kountz.org\|F\|2"] [data "Matched Data: \\x0d found within ARGS_NAMES:tngneedres\\x5cr\\x5cn1f40\\x5cr\\x5cnults: tngneedres\\x0d\\x0a1f40\\x0d\\x0aults"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "kountz.org"] [uri "/anniversaries.php"] [unique_id "ael5iKRS0zeYrxlQBdXUGwAAAAc"], referer: https://kountz.org/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-08 03:11:57 (8 months ago)	(mod_security) mod_security (id:217291) triggered by 175.24.248.212 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:217291) triggered by 175.24.248.212 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 22:11:51.163672 2025] [security2:error] [pid 9451:tid 9451] [client 175.24.248.212:41338] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(\\\\n\|\\\\r)" at ARGS_NAMES:\\r\\n1f40\\r\\namp;tngmonth. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "145"] [id "217291"] [rev "2"] [msg "HTTP Header Injection Attack via payload (CR/LF detected)\|\|kountz.org\|F\|2"] [data "Matched Data: \\x0d found within ARGS_NAMES:\\x5cr\\x5cn1f40\\x5cr\\x5cnamp;tngmonth: \\x0d\\x0a1f40\\x0d\\x0aamp;tngmonth"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "kountz.org"] [uri "/anniversaries.php"] [unique_id "aTZB90X4Ds9Hm2_E6gV-fAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 botreporter	2025-11-13 08:29:52 (9 months ago)	botnet ignoring robots.txt	Bad Web Bot
🇩🇪 botreporter	2025-11-05 22:52:43 (9 months ago)	botnet ignoring robots.txt	Bad Web Bot
🇩🇪 botreporter	2025-10-21 13:14:37 (10 months ago)	botnet ignoring robots.txt	Bad Web Bot
🇩🇪 botreporter	2025-10-19 09:32:47 (10 months ago)	botnet ignoring robots.txt	Bad Web Bot
🇩🇪 botreporter	2025-10-06 18:36:32 (10 months ago)	botnet ignoring robots.txt	Bad Web Bot
🇺🇸 TPI-Abuse	2025-10-06 12:02:05 (10 months ago)	(mod_security) mod_security (id:217291) triggered by 175.24.248.212 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:217291) triggered by 175.24.248.212 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 06 08:02:00.944625 2025] [security2:error] [pid 4175:tid 4175] [client 175.24.248.212:64411] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(\\\\n\|\\\\r)" at ARGS_NAMES:\\r\\n3\\r\\nm. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "145"] [id "217291"] [rev "2"] [msg "HTTP Header Injection Attack via payload (CR/LF detected)\|\|kountz.org\|F\|2"] [data "Matched Data: \\x0d found within ARGS_NAMES:\\x5cr\\x5cn3\\x5cr\\x5cnm: \\x0d\\x0a3\\x0d\\x0am"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "kountz.org"] [uri "/calendar.php"] [unique_id "aOOvuCfsgHpIX_QG121NVQAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 botreporter	2025-10-05 13:58:31 (10 months ago)	botnet ignoring robots.txt	Bad Web Bot
🇺🇸 bigscoots-staff	2025-09-25 17:13:51 (11 months ago)	Reported via Slack bot	Bad Web Bot
🇩🇪 botreporter	2025-09-24 02:06:44 (11 months ago)	botnet ignoring robots.txt	Bad Web Bot
🇩🇪 botreporter	2025-09-11 02:28:35 (11 months ago)	botnet ignoring robots.txt	Bad Web Bot
🇩🇪 botreporter	2025-09-09 23:13:26 (11 months ago)	botnet ignoring robots.txt	Bad Web Bot
🇺🇸 TPI-Abuse	2025-08-25 19:14:53 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 175.24.248.212 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 175.24.248.212 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 25 15:14:44.646019 2025] [security2:error] [pid 6885:tid 6885] [client 175.24.248.212:8308] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|glassclublake.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "glassclublake.com"] [uri "/[email protected]"] [unique_id "aKy2JCge5FsU2VkFbnqcQAAAABA"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 24 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 206.189.206.241

🇺🇸 206.55.187.146

🇮🇹 194.113.91.230

🇷🇺 188.93.215.200

🇮🇳 182.70.255.242

🇺🇸 38.141.62.5

🇺🇸 35.229.112.10

🇻🇪 200.90.8.90

🇫🇷 185.202.238.70

🇬🇧 159.253.63.187

🇭🇰 152.32.130.191

🇷🇺 83.220.67.118

🇺🇸 74.101.237.252

🇺🇸 44.195.147.130

🇺🇸 20.25.151.120

🇨🇳 218.25.89.208

🇰🇷 211.43.139.142

🇵🇱 178.216.139.35

🇵🇱 178.216.139.16

🇨🇳 106.13.104.49