JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

180.131.145.76

Recent Activity

Abuse confidence score ?

100% Critical

37 reports

33 reporters · latest 11 hours ago

ISP	REGXA LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16276
Domain Name	regxa.com
Country	🇺🇸 United States of America
City	Hillsboro, Oregon

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 180.131.145.76

Export CSV

This IP address has been reported a total of 37 times from 33 distinct sources. 180.131.145.76 was first reported on October 26th 2026, and the most recent report was 11 hours ago. In the last 60 days, the top reporter locations were: United States of America with 6 reports; Switzerland with 4 reports; France with 4 reports. The most common categories in these recent reports were: Web App Attack 22 times; SQL Injection 17 times; Hacking 13 times; Brute-Force 2 times; Port Scan 2 times; Other 3 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 thetomtaylor.co.uk	2026-10-27 19:57:02 (11 hours ago)	Fail2Ban - [WAF]ModSecurity rule violation on modsecurity ... [wa02]	Hacking SQL Injection Web App Attack
Anonymous	2026-10-27 19:22:33 (11 hours ago)	Web Attack	Web App Attack
🇺🇸 fortypoundhead	2026-10-27 12:05:50 (19 hours ago)	SQL Injection Attempt	SQL Injection Web App Attack
🇦🇺 Bay13	2026-10-27 10:27:55 (20 hours ago)	CrowdSec:custom/webshell-scan	Web App Attack
🇮🇪 RoboSOC	2026-10-27 10:08:02 (21 hours ago)	HTTP SQL Injection Attempt , PTR: PTR record not found	SQL Injection
Anonymous	2026-10-27 09:19:11 (21 hours ago)	[Tue Oct 27 11:10:32.726524 2026] [:error] [pid 2762799:tid 140068521985792] [client 180.131.145.76: ... show more [Tue Oct 27 11:10:32.726524 2026] [:error] [pid 2762799:tid 140068521985792] [client 180.131.145.76:62729] [client 180.131.145.76] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/opt/owasp-crs-4.26.0/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [ver "OWASP_CRS/4.26.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "ims.forth.gr"] [uri "/en/project/department"] [unique_id "auBqiHljFxEBAg4w5UDE9QAAAI0"] [Tue Oct 27 11:19:11.054445 2026] [:error] [pid 2762799:tid 140068699911936] [client 180.131.145.76:54680] [client 180.131.145.76] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/opt/owasp-crs-4.26.0/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 20)"] [ver "OWASP_CRS/4.26.0"] [tag ... show less	Hacking Web App Attack
🇫🇷 conseilgouz	2026-10-27 07:43:08 (23 hours ago)	ame-12 : Block return, carriage return, ... characters=>/manifestations/programme-2017/ceremonie-du- ... show more ame-12 : Block return, carriage return, ... characters=>/manifestations/programme-2017/ceremonie-du-souvenir-2017?view=%27nvOpzp;%20AND%201=1%20OR%20(%3C%27%22%3EiKO)),&id=%27nvOpzp;%20AND%201=1%20OR%20(%3C%27%22%3EiKO)),&catid=%27nvOpzp;%20AND%201=1%20OR%20(%3C%27%22%3EiKO)),(>) show less	Hacking
🇨🇭 Ribeye375	2026-10-27 07:31:55 (23 hours ago)	HIPS apache-modsecurity - Block tcp/http,https	Web App Attack
🇫🇷 claude CALVET	2026-10-27 07:09:55 (23 hours ago)	gee-12 : Block return, carriage return, ... characters=>/index.php?view=%27nvOpzp;%20AND%201=1%20OR% ... show more gee-12 : Block return, carriage return, ... characters=>/index.php?view=%27nvOpzp;%20AND%201=1%20OR%20(%3C%27%22%3EiKO)),&id=%27nvOpzp;%20AND%201=1%20OR%20(%3C%27%22%3EiKO)),&modjemcal_id=%27nvOpzp;%20AND%201=1%20OR%20(%3C%27%22%3EiKO)),&modjemcal_month=%27nvOpzp;%20AND%201=1%20OR%20(%3C%27%22%3EiKO)),&modjemcal_year=%27nvOpzp;%20AND%201=...(>) show less	Hacking
🇺🇸 gu-alvareza	2026-10-27 05:06:20 (1 day ago)	HTTP.URI.SQL.Injection	SQL Injection Web App Attack
🇺🇸 francelink.fr	2026-10-27 01:35:30 (1 day ago)	Azure WAF blocked a request. Rule: 949110. Observed at: 2026-10-26T17:17:22.000Z.	Web App Attack
🇹🇼 kk_it_man	2026-10-27 00:26:02 (1 day ago)	hack	Hacking
🇲🇽 mcabanas	2026-10-27 00:25:26 (1 day ago)	[ARKAND Sentinel Security Engine] Hostile activity detected & blocked at Linux kernel (iptables). Ta ... show more [ARKAND Sentinel Security Engine] Hostile activity detected & blocked at Linux kernel (iptables). Target: gecoerp.com. Reason: ARKAND AI NPU (ARKAND-PromptShield-v4.1): RCE_COMMAND_INJECTION (Confianza 99.7%). TLS JA3: 095a9cdf6fceacc9c38736015b7d1ec4. show less	Port Scan Hacking Web App Attack
🇲🇽 mcabanas	2026-10-26 23:57:18 (1 day ago)	[ARKAND Sentinel Security Engine] Hostile activity detected & blocked at Linux kernel (iptables). Ta ... show more [ARKAND Sentinel Security Engine] Hostile activity detected & blocked at Linux kernel (iptables). Target: gecoerp.com. Reason: ARKAND AI NPU (ARKAND-PromptShield-v4.1): RCE_COMMAND_INJECTION (Confianza 99.7%). TLS JA3: 095a9cdf6fceacc9c38736015b7d1ec4. Path: GET /event?tags=%27nvOpzp;%20AND%201=1%20OR%20(%3C%27%22%3EiKO)),&date=%27nvOpzp. show less	Port Scan Hacking Web App Attack
🇫🇷 COMAITE	2026-10-26 23:54:46 (1 day ago)	SQL injection attempt from 180.131.145.76.	Web App Attack

Showing 1 to 15 of 37 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 217.119.20.70

🇯🇵 216.226.78.20

🇺🇸 216.218.206.117

🇦🇷 200.59.88.196

🇨🇴 181.63.24.186

🇺🇸 165.154.182.174

🇮🇩 103.155.46.254

🇳🇱 82.39.86.153

🇺🇸 76.148.197.64

🇱🇹 62.60.130.252

🇺🇦 46.150.78.88

🇹🇷 45.87.174.253

🇧🇪 34.38.63.188

🇺🇸 8.8.8.8

🇨🇳 223.109.252.233

🇰🇷 221.158.100.113

🇳🇱 200.138.46.181

🇳🇱 195.178.110.26

🇺🇦 194.24.237.243

🇦🇷 191.102.248.60