JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 183.199.180.249

183.199.180.249 was found in our database!

This IP was reported 7 times. Confidence of Abuse is 5%: ?

ISP	China Mobile Communications Corporation
Usage Type	Fixed Line ISP
ASN	AS24547
Domain Name	chinamobile.com
Country	🇨🇳 China
City	Shanghai, Shanghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 183.199.180.249

Whois 183.199.180.249

IP Abuse Reports for 183.199.180.249:

This IP address has been reported a total of 7 times from 1 distinct source. 183.199.180.249 was first reported on February 23rd 2026, and the most recent report was 14 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-03 21:09:14 (14 hours ago)	(mod_security) mod_security (id:210831) triggered by 183.199.180.249 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210831) triggered by 183.199.180.249 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 17:09:07.102593 2026] [security2:error] [pid 13050:tid 13050] [client 183.199.180.249:8102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.myappliancehero.pro\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.myappliancehero.pro"] [uri "/"] [unique_id "akgk86XbM70p7zd9omzaRgAAAAo"], referer: http://www.myappliancehero.pro/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-03 04:47:19 (1 day ago)	(mod_security) mod_security (id:210831) triggered by 183.199.180.249 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210831) triggered by 183.199.180.249 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 00:47:12.507643 2026] [security2:error] [pid 20233:tid 20233] [client 183.199.180.249:7873] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|windtime.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "windtime.com"] [uri "/"] [unique_id "akc-0EtH8IGyNkvxHccw9wAAACw"], referer: http://windtime.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-27 23:29:37 (6 days ago)	(mod_security) mod_security (id:210831) triggered by 183.199.180.249 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210831) triggered by 183.199.180.249 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 19:29:29.845801 2026] [security2:error] [pid 5703:tid 5724] [client 183.199.180.249:8016] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.nordicatrio.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.nordicatrio.com"] [uri "/"] [unique_id "akBc2VoNYtFjYNKYv0p8dwAAAJI"], referer: https://www.nordicatrio.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-31 20:06:06 (1 month ago)	(mod_security) mod_security (id:210831) triggered by 183.199.180.249 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210831) triggered by 183.199.180.249 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 31 16:06:02.298838 2026] [security2:error] [pid 10090:tid 10090] [client 183.199.180.249:14420] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|rblep.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "rblep.com"] [uri "/"] [unique_id "ahyUqmG3HOrwqqxHlhgtNgAAAB4"], referer: http://rblep.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-16 21:18:38 (1 month ago)	(mod_security) mod_security (id:210831) triggered by 183.199.180.249 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210831) triggered by 183.199.180.249 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 16 17:18:34.438202 2026] [security2:error] [pid 31728:tid 31728] [client 183.199.180.249:14673] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.anxo.org\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.anxo.org"] [uri "/erro.html"] [unique_id "agjfKnXm5r6wGpSrJX_bwwAAAB4"], referer: http://www.anxo.org/erro.html show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-11 19:23:54 (1 month ago)	(mod_security) mod_security (id:210831) triggered by 183.199.180.249 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210831) triggered by 183.199.180.249 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 11 15:23:48.802413 2026] [security2:error] [pid 20506:tid 20506] [client 183.199.180.249:14744] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.ags-ga.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.ags-ga.com"] [uri "/"] [unique_id "agIsxONo4okmPd4cS1fy0AAAAAY"], referer: http://www.ags-ga.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-23 21:03:36 (4 months ago)	(mod_security) mod_security (id:210831) triggered by 183.199.180.249 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210831) triggered by 183.199.180.249 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 23 16:03:27.899567 2026] [security2:error] [pid 7610:tid 7610] [client 183.199.180.249:13550] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|blue-attitude.net\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "blue-attitude.net"] [uri "/"] [unique_id "aZzAnx-6iIPZQEvuqiHl0AAAABE"], referer: http://blue-attitude.net/ show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 7 of 7 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 92.205.210.56

🇰🇷 222.118.170.177

🇩🇪 213.209.159.11

🇻🇳 103.200.22.154

🇰🇿 89.218.247.234

🇺🇸 34.148.150.157

🇺🇸 20.106.49.209

🇷🇴 2.57.121.112

🇰🇷 1.214.214.114

🇯🇵 164.52.120.14

🇺🇸 162.216.149.116

🇺🇸 136.109.108.131

🇨🇳 112.86.225.211

🇨🇳 106.75.237.200

🇺🇸 104.28.201.73

🇺🇸 103.4.21.108

🇷🇴 92.118.39.14

🇨🇳 223.199.168.206

🇩🇪 128.14.225.164

🇸🇬 103.187.146.90