AbuseIPDB » 117.139.165.186
117.139.165.186 was found in our database!
This IP was reported 4 times. Confidence of
Abuse
is 0% : ?
ISP
China Mobile Communications Corporation
Usage Type
Mobile ISP
ASN
AS9808
Domain Name
chinamobile.com
Country
๐จ๐ณ
China
City
Chengdu, Sichuan
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 117.139.165.186 :
This IP address has been reported a total of
4
times from
3 distinct
sources.
117.139.165.186 was first reported on
August 20th 2025 , and the most recent report was
10 months ago .
Old Reports:
The most recent abuse report for this IP address is from
10 months ago
. It is possible that this IP is no longer involved in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
๐บ๐ธ
TPI-Abuse
2025-09-13 10:44:37
(10 months ago)
(mod_security) mod_security (id:210350) triggered by 117.139.165.186 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210350) triggered by 117.139.165.186 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 13 06:44:28.816251 2025] [security2:error] [pid 24339:tid 24339] [client 117.139.165.186:23487] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.renju.net|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.renju.net"] [uri "/tournament/196/game/129528/"] [unique_id "aMVLDGhhLTF4CveBp8zmeQAAACE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2025-09-09 11:07:05
(10 months ago)
(mod_security) mod_security (id:210350) triggered by 117.139.165.186 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210350) triggered by 117.139.165.186 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 09 07:06:46.591562 2025] [security2:error] [pid 5442:tid 5442] [client 117.139.165.186:23092] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.renju.net|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.renju.net"] [uri "/tournament/1920/game/76278"] [unique_id "aMAKRsw2dmY9YxpXemn1lQAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
kosada.com
2025-09-09 05:39:59
(10 months ago)
Web bot: DDoS
DDoS Attack
Bad Web Bot
๐ฉ๐ช
host.tugatech.com.pt
2025-08-20 08:31:52
(11 months ago)
(PERMBLOCK) 117.139.165.186 (CN/China/-) has had more than 4 temp blocks in the last 604800 secs; Po ...
show more
(PERMBLOCK) 117.139.165.186 (CN/China/-) has had more than 4 temp blocks in the last 604800 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs:
show less
Port Scan
Showing 1 to
4
of 4 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ
Recently Reported IPs: