JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 218.28.59.130

218.28.59.130 was found in our database!

This IP was reported 69 times. Confidence of Abuse is 0%: ?

ISP	Education Bureaux,
Usage Type	Fixed Line ISP
ASN	AS4837
Domain Name	zz.ha.cn
Country	🇨🇳 China
City	Zhengzhou, Henan

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 218.28.59.130

Whois 218.28.59.130

IP Abuse Reports for 218.28.59.130:

This IP address has been reported a total of 69 times from 24 distinct sources. 218.28.59.130 was first reported on April 27th 2021, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇳 ThreatBook.io	2025-04-02 22:40:50 (1 year ago)	ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/218.28.59.130 2025-04-02 08 ... show more ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/218.28.59.130 2025-04-02 08:22:45 /cc.gif show less	Web App Attack
🇨🇳 ThreatBook.io	2024-05-11 22:42:05 (2 years ago)	ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/218.28.59.130 2024-05-11 17 ... show more ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/218.28.59.130 2024-05-11 17:14:54 /cc.gif show less	Web App Attack
🇻🇳 trung.fun	2023-06-21 13:19:33 (3 years ago)	DDoS, Hack, Brute Force, Web Attack ...	DDoS Attack Web Spam Hacking Brute-Force Web App Attack
🇻🇳 Xuan Can	2023-06-20 10:13:20 (3 years ago)	(mod_security) mod_security (id:1900947723) triggered by 218.28.59.130 (CN/China/pc0.zz.ha.cn): 1 in ... show more (mod_security) mod_security (id:1900947723) triggered by 218.28.59.130 (CN/China/pc0.zz.ha.cn): 1 in the last 3600 secs; Ports: 80,443; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 20 17:13:15.123339 2023] [security2:error] [pid 8198:tid 47267837880064] [client 218.28.59.130:54745] [client 218.28.59.130] ModSecurity: Access denied with code 403 (phase 1). String match "/phpmyadmin" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "61"] [id "1900947723"] [msg "Deny phpMyAdmin"] [hostname "103.252.252.16"] [uri "/phpmyadmin/"] [unique_id "ZJF7u1v4nWfdtr1L0f1-RwAAAA0"], referer: https://103.252.252.16/ show less	Brute-Force SSH
🇻🇳 Xuan Can	2023-06-03 19:46:45 (3 years ago)	(mod_security) mod_security (id:1900947723) triggered by 218.28.59.130 (CN/China/pc0.zz.ha.cn): 1 in ... show more (mod_security) mod_security (id:1900947723) triggered by 218.28.59.130 (CN/China/pc0.zz.ha.cn): 1 in the last 3600 secs; Ports: 80,443; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 04 02:46:39.790317 2023] [security2:error] [pid 15312:tid 47260396807936] [client 218.28.59.130:43109] [client 218.28.59.130] ModSecurity: Access denied with code 403 (phase 1). String match "/phpmyadmin" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "61"] [id "1900947723"] [msg "Deny phpMyAdmin"] [hostname "103.252.252.16"] [uri "/phpmyadmin/"] [unique_id "ZHuYnxkC4-0JIBak4MwodQAAANM"], referer: https://103.252.252.16/ show less	Brute-Force SSH
🇨🇳 ThreatBook.io	2023-05-26 22:37:59 (3 years ago)	ThreatBook Intelligence: Edu,Scanner more details on https://threatbook.io/ip/218.28.59.130 2023-05- ... show more ThreatBook Intelligence: Edu,Scanner more details on https://threatbook.io/ip/218.28.59.130 2023-05-26 09:04:51 / show less	Web App Attack
🇻🇳 Xuan Can	2023-05-23 02:52:25 (3 years ago)	(mod_security) mod_security (id:1900947723) triggered by 218.28.59.130 (CN/China/pc0.zz.ha.cn): 1 in ... show more (mod_security) mod_security (id:1900947723) triggered by 218.28.59.130 (CN/China/pc0.zz.ha.cn): 1 in the last 3600 secs; Ports: 80,443; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 23 09:52:18.011832 2023] [security2:error] [pid 37412:tid 47435602794240] [client 218.28.59.130:28192] [client 218.28.59.130] ModSecurity: Access denied with code 403 (phase 1). String match "/phpmyadmin" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "61"] [id "1900947723"] [msg "Deny phpMyAdmin"] [hostname "tongdai.cloud"] [uri "/phpmyadmin/"] [unique_id "ZGwqYrGd7eHd_euCBfAghwAAAVg"], referer: https://tongdai.cloud/ show less	Brute-Force SSH
🇻🇳 trung.fun	2023-05-20 19:45:51 (3 years ago)	DDoS, Hack, Brute Force, Web Attack ...	DDoS Attack Web Spam Hacking Brute-Force Web App Attack
🇹🇭 Sawasdee	2023-05-15 07:44:21 (3 years ago)	Port Scan ...	Port Scan
🇸🇪 QUADEMU Abuse Dpt	2023-05-13 12:43:13 (3 years ago)	[New] Noxious/Nuisible/вредоносный Host.	DDoS Attack
🇯🇵 stfw	2023-05-05 13:25:50 (3 years ago)	81/tcp 81/tcp 81/tcp... [2023-04-27/05-05]8pkt,1pt.(tcp)	Port Scan
🇯🇵 stfw	2023-04-27 18:23:38 (3 years ago)	81/tcp 81/tcp [2023-04-27]2pkt	Port Scan
🇹🇭 Sawasdee	2023-04-23 06:55:01 (3 years ago)	Port Scan ...	Port Scan
🇸🇪 QUADEMU Abuse Dpt	2023-04-22 23:53:10 (3 years ago)	[New] Noxious/Nuisible/вредоносный Host.	DDoS Attack
🇺🇸 ZaneTheOperator	2023-04-21 20:34:57 (3 years ago)	1682109296 - 04/21/2023 16:34:56 Host: pc0.zz.ha.cn/218.28.59.130 Port: 81 TCP Blocked	Port Scan

Showing 1 to 15 of 69 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 122.181.101.55

🇳🇱 45.148.10.13

🇲🇽 187.230.20.46

🇨🇷 186.26.125.125

🇻🇳 180.93.32.33

🇧🇷 179.51.132.42

🇵🇱 176.53.159.198

🇺🇸 173.239.213.18

🇺🇸 173.239.213.16

🇧🇷 167.250.160.139

🇬🇧 134.209.185.145

🇵🇱 109.205.211.203

🇺🇸 103.196.9.93

🇮🇳 103.152.158.112

🇺🇸 51.81.110.93

🇺🇸 47.251.171.144

🇩🇪 46.101.100.197

🇸🇬 43.134.57.143

🇺🇸 43.130.62.16

🇺🇸 35.245.81.86