JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 180.139.127.11

180.139.127.11 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 5%: ?

ISP	CHINANET GUANGXI PROVINCE NETWORK
Usage Type	Fixed Line ISP
ASN	AS4134
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Nanning, Guangxi

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 180.139.127.11

Whois 180.139.127.11

IP Abuse Reports for 180.139.127.11:

This IP address has been reported a total of 13 times from 2 distinct sources. 180.139.127.11 was first reported on November 27th 2025, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-03 20:16:59 (1 hour ago)	(mod_security) mod_security (id:210831) triggered by 180.139.127.11 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210831) triggered by 180.139.127.11 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 16:16:55.390608 2026] [security2:error] [pid 3474:tid 3474] [client 180.139.127.11:21770] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.eric-grant.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.eric-grant.com"] [uri "/"] [unique_id "akgYt5kpw4MPLUR0RvPmwAAAAAI"], referer: http://www.eric-grant.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-02 11:22:28 (1 day ago)	(mod_security) mod_security (id:210831) triggered by 180.139.127.11 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210831) triggered by 180.139.127.11 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 07:22:22.587245 2026] [security2:error] [pid 31356:tid 31356] [client 180.139.127.11:22760] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.artbyrt.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.artbyrt.com"] [uri "/"] [unique_id "akZJ7sdNEj0_pILI_YtfOwAAAB0"], referer: http://www.artbyrt.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-27 19:29:11 (6 days ago)	(mod_security) mod_security (id:210831) triggered by 180.139.127.11 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210831) triggered by 180.139.127.11 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 15:29:07.599341 2026] [security2:error] [pid 15032:tid 15032] [client 180.139.127.11:23439] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.arts4health.org\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.arts4health.org"] [uri "/"] [unique_id "akAkgxGCMbhsX2uvFF7PiAAAAAc"], referer: http://www.arts4health.org/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇳 ThreatBook.io	2026-04-27 23:58:53 (2 months ago)	ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/180.139.127.11 2026-04-27 0 ... show more ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/180.139.127.11 2026-04-27 06:24:45 /dfdfd 2026-04-27 02:29:34 /dfdfd show less	Web App Attack
🇨🇳 ThreatBook.io	2026-04-12 23:43:47 (2 months ago)	ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/180.139.127.11 2026-04-12 1 ... show more ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/180.139.127.11 2026-04-12 10:48:22 /dfdfd 2026-04-12 07:38:20 /dfdfd 2026-04-12 06:49:09 /dfdfd 2026-04-12 02:48:26 /dfdfd 2026-04-12 03:34:28 /dfdfd show less	Web App Attack
🇨🇳 ThreatBook.io	2026-04-11 23:32:52 (2 months ago)	ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/180.139.127.11 2026-04-11 0 ... show more ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/180.139.127.11 2026-04-11 06:47:18 /dfdfd 2026-04-11 03:35:46 /dfdfd 2026-04-11 07:33:45 /dfdfd 2026-04-11 10:46:13 /dfdfd 2026-04-11 02:48:56 /dfdfd show less	Web App Attack
🇨🇳 ThreatBook.io	2026-04-10 23:37:34 (2 months ago)	ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/180.139.127.11 2026-04-10 0 ... show more ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/180.139.127.11 2026-04-10 06:45:18 /dfdfd 2026-04-10 10:45:59 /dfdfd 2026-04-10 07:30:45 /dfdfd 2026-04-10 02:46:37 /dfdfd 2026-04-10 03:31:54 /dfdfd show less	Web App Attack
🇨🇳 ThreatBook.io	2026-04-09 23:34:24 (2 months ago)	ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/180.139.127.11 2026-04-09 1 ... show more ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/180.139.127.11 2026-04-09 10:44:44 /dfdfd 2026-04-09 02:45:46 /dfdfd 2026-04-09 07:27:07 /dfdfd 2026-04-09 03:31:20 /dfdfd 2026-04-09 06:40:45 /dfdfd show less	Web App Attack
🇨🇳 ThreatBook.io	2026-03-15 23:32:05 (3 months ago)	ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/180.139.127.11 2026-03-15 0 ... show more ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/180.139.127.11 2026-03-15 00:53:43 /dfdfd 2026-03-15 13:00:29 /dfdfd 2026-03-15 17:00:03 /dfdfd 2026-03-15 05:05:41 /dfdfd 2026-03-15 09:00:44 /dfdfd show less	Web App Attack
🇨🇳 ThreatBook.io	2026-03-13 23:41:13 (3 months ago)	ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/180.139.127.11 2026-03-13 1 ... show more ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/180.139.127.11 2026-03-13 16:55:21 /dfdfd 2026-03-13 00:53:55 /dfdfd 2026-03-13 04:59:43 /dfdfd 2026-03-13 09:01:00 /dfdfd 2026-03-13 12:59:32 /dfdfd show less	Web App Attack
🇨🇳 ThreatBook.io	2026-03-11 00:26:00 (3 months ago)	ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/180.139.127.11 2026-03-10 1 ... show more ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/180.139.127.11 2026-03-10 12:58:29 /dfdfd 2026-03-10 16:55:57 /dfdfd 2026-03-10 05:05:14 /dfdfd 2026-03-10 08:56:44 /dfdfd 2026-03-10 01:00:40 /dfdfd show less	Web App Attack
🇨🇳 ThreatBook.io	2025-12-09 23:00:46 (6 months ago)	ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/180.139.127.11 2025-12-09 2 ... show more ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/180.139.127.11 2025-12-09 22:03:34 /dfdfd show less	Web App Attack
🇨🇳 ThreatBook.io	2025-11-27 00:36:37 (7 months ago)	ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/180.139.127.11 2025-11-26 2 ... show more ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/180.139.127.11 2025-11-26 21:05:37 / 2025-11-26 21:05:38 /tomcat.svg 2025-11-26 21:13:35 /dfdfd show less	Web App Attack

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 205.210.31.206

🇺🇸 193.148.63.132

🇺🇸 185.180.142.144

🇫🇷 185.177.72.11

🇧🇴 181.188.176.242

🇫🇮 178.20.210.208

🇫🇮 147.185.133.182

🇨🇳 122.96.28.85

🇸🇬 104.233.35.237

🇱🇹 45.227.254.170

🇩🇪 45.3.43.250

🇹🇼 198.235.24.101

🇲🇽 187.230.85.160

🇨🇳 183.200.111.255

🇪🇸 158.49.70.49

🇹🇭 117.121.214.50

🇹🇭 1.20.154.195

🇺🇸 216.73.216.72

🇻🇳 203.205.37.233

🇹🇳 197.5.145.150