JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 183.207.48.149

183.207.48.149 was found in our database!

This IP was reported 60 times. Confidence of Abuse is 3%: ?

ISP	China Mobile Communications Corporation
Usage Type	Mobile ISP
ASN	AS9808
Domain Name	chinamobile.com
Country	🇨🇳 China
City	Shanghai, Shanghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 183.207.48.149

Whois 183.207.48.149

IP Abuse Reports for 183.207.48.149:

This IP address has been reported a total of 60 times from 25 distinct sources. 183.207.48.149 was first reported on June 20th 2024, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 consul.to	2026-07-22 02:40:19 (6 days ago)	Web attack/malicious scanning detected	Web App Attack
🇫🇮 stinpriza	2026-05-10 09:18:55 (2 months ago)	Web App Attack	Web App Attack
Anonymous	2026-04-30 23:31:04 (2 months ago)	Bot / scanning and/or hacking attempts: GET /wp-includes/js/jquery/ui/autocomplete.min.js?ver=1.13.3 ... show more Bot / scanning and/or hacking attempts: GET /wp-includes/js/jquery/ui/autocomplete.min.js?ver=1.13.3 HT, GET /tarieven HTTP/1.1, GET /wp-content/uploads/2021/01/2010_Tripadvisor.png HTTP/1.1, GET /wp-content/uploads/2021/01/2009_FACEBOOK_RECENSIES.png HTT, GET /feestjes/ HTTP/1.1, GET /tarieven/ HTTP/1.1, GET /wp-content/uploads/2026/04/KidsZoo-menukaart-1.pdf HTTP/1., GET /xmlrpc.php HTTP/1.1, GET /wp-content/uploads/2021/02/strippenkaart-700x440.png HTTP/, GET /wp-content/uploads/2021/01/2008_Google.png HTTP/1.1, GET /wp-content/themes/bridge/style.css?ver=6.8.5 HTTP/1.1, GET /wp-content/uploads/2021/01/Logo-KidsZoo-DEF-e1610633443762, GET /wp-content/uploads/2026/04/KZ-menukaart.png HTTP/1.1, GET /activiteiten/ HTTP/1.1 show less	Hacking Web App Attack
Anonymous	2026-04-26 14:40:07 (3 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇨🇳 ThreatBook.io	2026-04-23 23:13:31 (3 months ago)	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/183.207.48.149 2 ... show more ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/183.207.48.149 2026-04-23 18:23:03 / 2026-04-23 18:23:04 /docs/realm-howto.html 2026-04-23 18:23:03 /docs/deployer-howto.html 2026-04-23 18:23:03 /tomcat.css 2026-04-23 18:23:04 /manager-howto.html 2026-04-23 18:23:04 /docs/jndi-datasource-examples-howto.html 2026-04-23 18:23:03 /docs/changelog.html 2026-04-23 18:23:03 /favicon.ico 2026-04-23 18:23:04 /docs/RELEASE-NOTES.txt 2026-04-23 18:23:03 /docs/api/index.html show less	Web App Attack
Anonymous	2026-04-19 15:07:02 (3 months ago)	Malicious activity detected	Hacking Web App Attack
🇺🇸 myagent.site	2026-04-13 14:23:11 (3 months ago)	Blocking for trying to access an exploit file: /myagent.site	Hacking
Anonymous	2026-04-08 20:40:07 (3 months ago)	\| [Dangerous/China] Aggressive IP 183.207.48.149 (~30 hits). Type: DoS Defender- Web server 400 erro ... show more \| [Dangerous/China] Aggressive IP 183.207.48.149 (~30 hits). Type: DoS Defender- Web server 400 error code show less	Web App Attack Hacking SQL Injection
Anonymous	2026-04-08 19:17:45 (3 months ago)	183.207.48.149 - - [09/Apr/2026:03:17:45 +0800] "GET /xmlrpc.php?rsd HTTP/1.1" 200 834 "-" "Mozilla/ ... show more 183.207.48.149 - - [09/Apr/2026:03:17:45 +0800] "GET /xmlrpc.php?rsd HTTP/1.1" 200 834 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇺🇸 myagent.site	2026-04-07 00:04:19 (3 months ago)	Blocking for trying to access an exploit file: /myagent.site	Hacking
🇺🇸 TPI-Abuse	2026-04-06 18:10:36 (3 months ago)	(mod_security) mod_security (id:210730) triggered by 183.207.48.149 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 183.207.48.149 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 14:10:29.910525 2026] [security2:error] [pid 440017:tid 440017] [client 183.207.48.149:25605] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.silvermoonherbals.com\|F\|2"] [data ".moongoth.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.silvermoonherbals.com"] [uri "/www.moongoth.com"] [unique_id "adP3FeWlIDGWVaMP0y3zrAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 big-cloud.nl	2026-04-04 11:20:11 (3 months ago)	Try to access /xmlrpc.php?rsd	Web App Attack
🇺🇸 myagent.site	2026-04-02 13:10:30 (3 months ago)	Blocking for trying to access an exploit file: /myagent.site	Hacking
🇷🇺 russian-kurort.ru	2026-04-01 03:21:00 (3 months ago)	SYN flood	DDoS Attack Hacking
🇺🇸 myagent.site	2026-03-27 05:22:09 (4 months ago)	Blocking for trying to access an exploit file: /myagent.site	Hacking

Showing 1 to 15 of 60 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇦 201.225.73.7

🇬🇧 134.122.96.249

🇨🇦 106.49.60.24

🇺🇸 72.234.16.75

🇺🇸 45.156.129.127

🇺🇸 195.184.76.114

🇦🇷 181.93.122.232

🇺🇸 147.182.241.81

🇺🇸 142.252.53.80

🇺🇸 136.66.127.231

🇨🇳 111.21.105.250

🇺🇸 91.230.168.214

🇺🇸 3.19.209.83

🇫🇷 2a02:c207:2325:6198::1

🇺🇸 2607:f8b0:4001:c12::123

🇭🇰 199.45.154.123

🇦🇱 185.89.157.53

🇮🇳 182.18.161.165

🇺🇸 172.253.192.91

🇳🇱 146.190.233.22