JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 175.24.248.53

175.24.248.53 was found in our database!

This IP was reported 28 times. Confidence of Abuse is 0%: ?

ISP	Tencent cloud computing (Beijing) Co., Ltd.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS45090
Domain Name	tencentcloud.com
Country	🇨🇳 China
City	Shanghai, Shanghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 175.24.248.53

Whois 175.24.248.53

IP Abuse Reports for 175.24.248.53:

This IP address has been reported a total of 28 times from 5 distinct sources. 175.24.248.53 was first reported on June 28th 2025, and the most recent report was 4 months ago.

Old Reports: The most recent abuse report for this IP address is from 4 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-04-27 20:28:45 (4 months ago)	(mod_security) mod_security (id:210730) triggered by 175.24.248.53 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 175.24.248.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 27 16:28:40.325773 2026] [security2:error] [pid 9949:tid 9949] [client 175.24.248.53:41861] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|gamepart.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gamepart.com"] [uri "/home/tancedi1/gamepart.com"] [unique_id "ae_G-PjtLqLCrlcVZwy1pQAAABU"], referer: https://gamepart.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-24 12:26:28 (4 months ago)	(mod_security) mod_security (id:217291) triggered by 175.24.248.53 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:217291) triggered by 175.24.248.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 24 08:26:20.323521 2026] [security2:error] [pid 975242:tid 975242] [client 175.24.248.53:65149] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(\\\\n\|\\\\r)" at ARGS_NAMES:\\r\\n117d\\r\\ntngdaymonth. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "145"] [id "217291"] [rev "2"] [msg "HTTP Header Injection Attack via payload (CR/LF detected)\|\|kountz.org\|F\|2"] [data "Matched Data: \\x0d found within ARGS_NAMES:\\x5cr\\x5cn117d\\x5cr\\x5cntngdaymonth: \\x0d\\x0a117d\\x0d\\x0atngdaymonth"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "kountz.org"] [uri "/anniversaries.php"] [unique_id "aethbGM0P2Ngob4D5Oxx6gAAAAw"], referer: https://kountz.org/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-06 17:32:58 (8 months ago)	(mod_security) mod_security (id:217291) triggered by 175.24.248.53 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:217291) triggered by 175.24.248.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 06 12:32:54.150199 2025] [security2:error] [pid 22572:tid 22572] [client 175.24.248.53:45252] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(\\\\n\|\\\\r)" at ARGS_NAMES:\\r\\n1b\\r\\nm. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "145"] [id "217291"] [rev "2"] [msg "HTTP Header Injection Attack via payload (CR/LF detected)\|\|kountz.org\|F\|2"] [data "Matched Data: \\x0d found within ARGS_NAMES:\\x5cr\\x5cn1b\\x5cr\\x5cnm: \\x0d\\x0a1b\\x0d\\x0am"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "kountz.org"] [uri "/calendar.php"] [unique_id "aTRoxvkGGtfLmMYZJ01TDQAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 botreporter	2025-11-02 22:15:24 (9 months ago)	botnet ignoring robots.txt	Bad Web Bot
🇩🇪 botreporter	2025-10-26 01:45:16 (10 months ago)	botnet ignoring robots.txt	Bad Web Bot
🇩🇪 botreporter	2025-10-21 10:03:31 (10 months ago)	botnet ignoring robots.txt	Bad Web Bot
🇩🇪 botreporter	2025-10-16 22:02:52 (10 months ago)	botnet ignoring robots.txt	Bad Web Bot
🇩🇪 botreporter	2025-10-12 04:28:20 (10 months ago)	botnet ignoring robots.txt	Bad Web Bot
🇩🇪 botreporter	2025-10-08 01:41:53 (10 months ago)	botnet ignoring robots.txt	Bad Web Bot
🇺🇸 TPI-Abuse	2025-10-06 16:10:22 (10 months ago)	(mod_security) mod_security (id:217291) triggered by 175.24.248.53 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:217291) triggered by 175.24.248.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 06 12:10:13.685173 2025] [security2:error] [pid 24717:tid 24717] [client 175.24.248.53:59037] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(\\\\n\|\\\\r)" at ARGS_NAMES:\\r\\n1a\\r\\nm. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "145"] [id "217291"] [rev "2"] [msg "HTTP Header Injection Attack via payload (CR/LF detected)\|\|kountz.org\|F\|2"] [data "Matched Data: \\x0d found within ARGS_NAMES:\\x5cr\\x5cn1a\\x5cr\\x5cnm: \\x0d\\x0a1a\\x0d\\x0am"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "kountz.org"] [uri "/calendar.php"] [unique_id "aOPp5aitHpnsHZ8Y7s14vQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 botreporter	2025-10-04 01:47:19 (10 months ago)	botnet ignoring robots.txt	Bad Web Bot
🇺🇸 bigscoots-staff	2025-09-25 17:13:44 (11 months ago)	Reported via Slack bot	Bad Web Bot
🇩🇪 botreporter	2025-09-20 23:31:21 (11 months ago)	botnet ignoring robots.txt	Bad Web Bot
🇩🇪 botreporter	2025-09-11 05:35:26 (11 months ago)	botnet ignoring robots.txt	Bad Web Bot
🇺🇸 TPI-Abuse	2025-09-08 17:32:02 (11 months ago)	(mod_security) mod_security (id:210730) triggered by 175.24.248.53 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 175.24.248.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 08 13:31:57.428457 2025] [security2:error] [pid 23047:tid 23047] [client 175.24.248.53:3618] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|digbie.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "digbie.com"] [uri "/[email protected]"] [unique_id "aL8TDSSRlaa8AmP0UHP8pQAAABs"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 28 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 2a06:4884:5000::61

🇬🇧 193.163.125.28

🇮🇳 186.242.162.94

🇳🇱 159.223.217.240

🇪🇬 156.215.58.55

🇮🇩 114.79.6.16

🇮🇩 114.10.39.69

🇱🇰 112.134.144.234

🇵🇰 111.92.155.199

🇳🇱 94.154.43.158

🇧🇬 91.191.209.98

🇸🇬 47.79.205.242

🇺🇦 46.201.18.85

🇹🇿 41.59.170.50

🇨🇳 39.88.3.202

🇹🇼 35.229.160.192

🇬🇧 31.14.254.107

🇺🇸 20.46.234.188

🇬🇧 5.226.140.98

🇺🇸 209.141.34.121