JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 183.56.221.139

183.56.221.139 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 41%: ?

41%

ISP	CHINANET Guangdong province network
Usage Type	Fixed Line ISP
ASN	AS135089
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Shenzhen, Guangdong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 183.56.221.139

Whois 183.56.221.139

IP Abuse Reports for 183.56.221.139:

This IP address has been reported a total of 11 times from 6 distinct sources. 183.56.221.139 was first reported on June 25th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Teufel100	2026-06-30 09:16:12 (1 day ago)	ModSecurity rejected a query	Brute-Force Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-06-30 08:37:29 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 183.56.221.139 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 183.56.221.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 30 04:37:21.527147 2026] [security2:error] [pid 20429:tid 20429] [client 183.56.221.139:53715] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.randomgroovemusic.com.englishmagic.us"] [uri "/.env.local"] [unique_id "akOAQU8T1vbWuBR_X89XdAAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 paissangroup	2026-06-30 08:24:36 (1 day ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-06-30 06:46:40 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 183.56.221.139 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 183.56.221.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 30 02:46:35.399157 2026] [security2:error] [pid 7883:tid 7883] [client 183.56.221.139:39654] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "secureonebank.net"] [uri "/.env.bak"] [unique_id "akNmS55Zma35gFqzgy8QQgAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-28 23:59:08 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 183.56.221.139 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 183.56.221.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 28 19:58:58.281482 2026] [security2:error] [pid 1388:tid 1462] [client 183.56.221.139:43494] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.barkdullit.com.ceol.us"] [uri "/.env"] [unique_id "akG1Qm9G7YPEwoIDSiEsjwAAAEU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-28 14:01:13 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 183.56.221.139 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 183.56.221.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 28 10:01:04.800076 2026] [security2:error] [pid 22127:tid 22127] [client 183.56.221.139:57455] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mahjongcouture.com"] [uri "/.env"] [unique_id "akEpIFmvtmgPQffEKsv18wAAABs"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-06-26 22:03:12 (5 days ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-25. show less	Web App Attack SSH Hacking
🇳🇱 homeshowdomain.nl	2026-06-25 22:01:06 (6 days ago)	Auto-ban: >3000 req/min op 2026-06-25	Web App Attack SSH Hacking
🇨🇭 flaus	2026-06-25 21:42:04 (6 days ago)	$f2bV_matches	Hacking Bad Web Bot Web App Attack
🇧🇪 voormedia	2026-06-25 17:17:37 (6 days ago)	Accessed trap at '/.env'	Web App Attack
🇺🇸 TPI-Abuse	2026-06-25 15:46:10 (6 days ago)	(mod_security) mod_security (id:210492) triggered by 183.56.221.139 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 183.56.221.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 11:46:03.647239 2026] [security2:error] [pid 30289:tid 30301] [client 183.56.221.139:45202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "georgementz.com"] [uri "/.env"] [unique_id "aj1NO77KY_21dD8Ec6Y9hAAAAQc"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 198.235.24.215

🇧🇬 195.80.151.242

🇺🇸 66.132.186.141

🇨🇳 58.255.236.114

🇬🇭 45.222.48.8

🇳🇱 45.148.10.157

🇦🇺 209.38.80.75

🇺🇸 205.210.31.53

🇮🇩 202.145.0.61

🇦🇷 181.44.252.12

🇺🇸 147.185.132.133

🇹🇼 111.242.97.87

🇨🇳 101.71.38.210

🇺🇸 45.194.67.120

🇳🇱 45.148.10.200

🇧🇪 34.156.168.216

🇺🇸 20.169.105.44

🇺🇸 2001:470:1:332::181

🇦🇷 181.117.13.118

🇳🇱 176.65.131.192