JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 183.197.80.119

183.197.80.119 was found in our database!

This IP was reported 7 times. Confidence of Abuse is 5%: ?

ISP	China Mobile Communications Corporation
Usage Type	Fixed Line ISP
ASN	AS24547
Domain Name	chinamobile.com
Country	🇨🇳 China
City	Shanghai, Shanghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 183.197.80.119

Whois 183.197.80.119

IP Abuse Reports for 183.197.80.119:

This IP address has been reported a total of 7 times from 2 distinct sources. 183.197.80.119 was first reported on October 12th 2025, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-19 21:17:42 (1 hour ago)	(mod_security) mod_security (id:210831) triggered by 183.197.80.119 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210831) triggered by 183.197.80.119 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 17:17:36.688633 2026] [security2:error] [pid 25727:tid 25727] [client 183.197.80.119:28986] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|wryemusings.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "wryemusings.com"] [uri "/index.html"] [unique_id "ajWx8J8mDRqZB05ys-uTDAAAAAU"], referer: http://wryemusings.com/index.html show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-12 02:06:41 (1 week ago)	(mod_security) mod_security (id:210831) triggered by 183.197.80.119 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210831) triggered by 183.197.80.119 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 22:06:35.071904 2026] [security2:error] [pid 13448:tid 13543] [client 183.197.80.119:29131] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.veralogistica.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.veralogistica.com"] [uri "/"] [unique_id "aitpqwuRIud72dJ5j51tIwAAAQo"], referer: http://www.veralogistica.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-09 05:30:20 (1 week ago)	(mod_security) mod_security (id:210831) triggered by 183.197.80.119 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210831) triggered by 183.197.80.119 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 01:30:10.309686 2026] [security2:error] [pid 26007:tid 26007] [client 183.197.80.119:28794] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|marshallcurry.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "marshallcurry.com"] [uri "/"] [unique_id "aiek4us3dHDL-jGsEQXn4wAAAAU"], referer: http://marshallcurry.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-05 23:06:42 (1 week ago)	(mod_security) mod_security (id:210831) triggered by 183.197.80.119 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210831) triggered by 183.197.80.119 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 19:06:34.669030 2026] [security2:error] [pid 30853:tid 30853] [client 183.197.80.119:29047] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.dryprodrain.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.dryprodrain.com"] [uri "/"] [unique_id "aiNWek8L6_UHbFPr8NR3AQAAAC8"], referer: http://www.dryprodrain.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-04 21:04:24 (2 weeks ago)	(mod_security) mod_security (id:210831) triggered by 183.197.80.119 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210831) triggered by 183.197.80.119 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 17:04:18.204707 2026] [security2:error] [pid 24423:tid 24423] [client 183.197.80.119:28681] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.icaruscreativearts.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.icaruscreativearts.com"] [uri "/"] [unique_id "aiHoUrkFcAi75AVRcsIYcAAAABE"], referer: http://www.icaruscreativearts.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-24 22:10:42 (3 weeks ago)	(mod_security) mod_security (id:210831) triggered by 183.197.80.119 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210831) triggered by 183.197.80.119 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 24 18:10:35.618665 2026] [security2:error] [pid 14516:tid 14516] [client 183.197.80.119:28861] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.thesteeldrumman.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.thesteeldrumman.com"] [uri "/"] [unique_id "ahN3W6w60O7fdkY5vz9YFQAAAAM"], referer: https://www.thesteeldrumman.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇳 ThreatBook.io	2025-10-12 23:24:21 (8 months ago)	ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/183.197.80.119 2025-10-12 0 ... show more ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/183.197.80.119 2025-10-12 03:54:30 /sitemap.xml 2025-10-12 02:11:38 / show less	Web App Attack

Showing 1 to 7 of 7 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 203.132.56.167

🇷🇺 188.19.69.182

🇧🇷 186.233.118.22

🇺🇸 162.216.149.67

🇷🇺 5.128.121.101

🇩🇪 217.94.56.192

🇸🇽 190.185.91.12

🇳🇱 172.235.181.217

🇸🇬 159.223.47.8

🇳🇱 45.148.10.183

🇺🇸 44.244.244.139

🇸🇳 41.82.50.218

🇬🇧 35.203.211.155

🇭🇰 223.19.152.232

🇮🇩 182.2.43.141

🇲🇽 148.224.14.236

🇰🇷 103.233.184.121

🇩🇪 88.214.25.124

🇳🇱 81.19.216.114

🇸🇬 47.236.224.209