AbuseIPDB » 183.199.121.64
183.199.121.64 was found in our database!
This IP was reported 6 times. Confidence of
Abuse
is 4% : ?
ISP
China Mobile Communications Corporation
Usage Type
Fixed Line ISP
ASN
AS24547
Domain Name
chinamobile.com
Country
๐จ๐ณ
China
City
Shanghai, Shanghai
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 183.199.121.64 :
This IP address has been reported a total of
6
times from
6 distinct
sources.
183.199.121.64 was first reported on
April 14th 2024 , and the most recent report was
1 day ago .
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
๐บ๐ธ
TPI-Abuse
2026-07-07 18:18:26
(1 day ago)
(mod_security) mod_security (id:210831) triggered by 183.199.121.64 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210831) triggered by 183.199.121.64 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 07 14:18:21.138999 2026] [security2:error] [pid 6932:tid 6932] [client 183.199.121.64:14601] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||tijuanabible.org|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "tijuanabible.org"] [uri "/"] [unique_id "ak1C7aZCqAKi8WzeggtBJQAAAAg"], referer: https://tijuanabible.org/
show less
Brute-Force
Bad Web Bot
Web App Attack
๐จ๐ณ
ThreatBook.io
2025-09-20 23:52:10
(9 months ago)
ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/183.199.121.64
2025-09-20 0 ...
show more
ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/183.199.121.64
2025-09-20 05:13:46 /sitemap.xml
show less
Web App Attack
๐บ๐ธ
thefoofighter
2024-04-15 23:33:29
(2 years ago)
[Mon Apr 15 23:33:21.028306 2024] [:error] [pid 1918113] [client 183.199.121.64:43140] [client 183.1 ...
show more
[Mon Apr 15 23:33:21.028306 2024] [:error] [pid 1918113] [client 183.199.121.64:43140] [client 183.199.121.64] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "aislingmcnally.com"] [uri "/comeonin/admin-ajax.php"] [unique_id "Zh25QcpGXLPk2baWoJh6FwAAAAA"]
[Mon Apr 15 23:33:28.464034 2024] [:error] [pid 1918113] [client 183.199.121.64:43140] [client 183.199.121.64] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICA
...
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
mnsf
2024-04-15 05:04:58
(2 years ago)
Request Overload (104)
Brute-Force
Web App Attack
๐ฑ๐น
juozaspo
2024-04-14 19:26:32
(2 years ago)
Automatic Report: Ignores robots.txt, visited bot-trap page linked through a hidden link, auto-banne ...
show more
Automatic Report: Ignores robots.txt, visited bot-trap page linked through a hidden link, auto-banned
show less
Bad Web Bot
๐จ๐ญ
backslash
2024-04-14 00:10:50
(2 years ago)
block ruleset 43A7B4C84F1C495B355A170A3ABE0D75374A5E0D
Bad Web Bot
Showing 1 to
6
of 6 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ
Recently Reported IPs: