JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 183.207.48.131

183.207.48.131 was found in our database!

This IP was reported 86 times. Confidence of Abuse is 32%: ?

32%

ISP	China Mobile Communications Corporation
Usage Type	Mobile ISP
ASN	AS9808
Domain Name	chinamobile.com
Country	🇨🇳 China
City	Shanghai, Shanghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 183.207.48.131

Whois 183.207.48.131

IP Abuse Reports for 183.207.48.131:

This IP address has been reported a total of 86 times from 25 distinct sources. 183.207.48.131 was first reported on May 11th 2024, and the most recent report was 10 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 bruno28	2026-07-30 01:10:37 (10 hours ago)	bpw-Joomla User : try to access forms...	Hacking
🇺🇸 TPI-Abuse	2026-07-22 23:17:11 (1 week ago)	(mod_security) mod_security (id:210730) triggered by 183.207.48.131 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 183.207.48.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 22 19:17:04.537976 2026] [security2:error] [pid 3756262:tid 3756262] [client 183.207.48.131:37250] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.artfranz.com\|F\|2"] [data ".willowriver3.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.artfranz.com"] [uri "/webdesign/http/:www.willowriver3.com"] [unique_id "amFPcA5kL235BFwHb8LtnwAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mnsf	2026-07-22 19:05:17 (1 week ago)	Abuse Detected (9)	Brute-Force Web App Attack
🇺🇸 xxkodedxx	2026-07-09 01:22:57 (3 weeks ago)	[Zorvexus edge-defense] Edge-block (probe URI / bad UA / hostile vhost) Trigger: 1× edge-block in 10 ... show more [Zorvexus edge-defense] Edge-block (probe URI / bad UA / hostile vhost) Trigger: 1× edge-block in 10m window. Origin: CN / AS9808 China Mobile Active: 01:22:45 UTC Volume: 1 HTTP req Probed: / Status mix: 444×1 Vhost fishing: 67.217.240.72 UA: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36" Auto-banned 30d. zorvexus-banner. show less	Bad Web Bot Web App Attack
🇩🇪 ghostwarriors	2026-06-24 02:20:03 (1 month ago)	Attempts against non-existent wp-login	Brute-Force Web App Attack
🇩🇪 4server	2026-06-12 10:22:00 (1 month ago)	[FriJun1212:21:56.6124302026][security2:error][pid3535161:tid3535291][client183.207.48.131:0]ModSecu ... show more [FriJun1212:21:56.6124302026][security2:error][pid3535161:tid3535291][client183.207.48.131:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"www.restaurantgandria.ch\"][uri\"/xmlrpc.php\"][unique_id\"aivdxAl8UuXQpoRAq6JfZgAAAQ8\"] show less	Port Scan Brute-Force Web App Attack
🇧🇪 taivas.nl	2026-06-12 04:32:48 (1 month ago)	Many_bad_calls	Web App Attack
🇧🇪 taivas.nl	2026-06-12 04:02:09 (1 month ago)	Bad_requests	Bad Web Bot
🇫🇮 YF	2026-06-12 03:00:30 (1 month ago)	WordPress content enumeration	Web App Attack
Anonymous	2026-06-11 01:34:40 (1 month ago)		Bad Web Bot
🇩🇪 4server	2026-05-26 01:34:52 (2 months ago)	[TueMay2603:34:44.7571652026][security2:error][pid749022:tid749038][client183.207.48.131:0]ModSecuri ... show more [TueMay2603:34:44.7571652026][security2:error][pid749022:tid749038][client183.207.48.131:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"mgevents.ch\"][uri\"/xmlrpc.php\"][unique_id\"ahT4tJyGsim3ngQCQJyvqwAAAAU\"] show less	Port Scan Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-04-13 03:49:39 (3 months ago)	(mod_security) mod_security (id:225170) triggered by 183.207.48.131 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 183.207.48.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 12 23:49:34.227080 2026] [security2:error] [pid 1242901:tid 1242901] [client 183.207.48.131:31055] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|talentstar2025.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "talentstar2025.com"] [uri "/wp-json/wp/v2/users/3"] [unique_id "adxnzrn9AUZNZabBiBwYkQAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 myagent.site	2026-04-05 15:43:09 (3 months ago)	Blocking for trying to access an exploit file: /myagent.site	Hacking
🇺🇸 myagent.site	2026-03-26 03:33:50 (4 months ago)	Blocking for trying to access an exploit file: /myagent.site	Hacking
🇩🇪 big-cloud.nl	2026-03-22 10:33:57 (4 months ago)	Try to access /xmlrpc.php?rsd	Web App Attack

Showing 1 to 15 of 86 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 185.93.89.167

🇦🇷 181.10.138.162

🇨🇴 179.33.186.150

🇮🇳 152.58.132.79

🇯🇵 103.214.68.93

🇪🇸 70.156.144.65

🇨🇳 61.155.106.101

🇫🇷 37.59.204.159

🇺🇸 35.199.154.6

🇶🇦 34.18.198.140

🇺🇸 20.83.32.170

🇺🇸 2602:80d:1007::38

🇷🇺 178.206.150.97

🇱🇰 112.134.187.98

🇨🇳 106.117.107.66

🇺🇸 104.210.140.129

🇳🇱 45.148.10.141

🇲🇽 38.254.16.61

🇨🇦 20.48.234.177

🇩🇪 185.171.98.248