JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 183.207.48.155

183.207.48.155 was found in our database!

This IP was reported 71 times. Confidence of Abuse is 31%: ?

31%

ISP	China Mobile Communications Corporation
Usage Type	Mobile ISP
ASN	AS9808
Domain Name	chinamobile.com
Country	🇨🇳 China
City	Shanghai, Shanghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 183.207.48.155

Whois 183.207.48.155

IP Abuse Reports for 183.207.48.155:

This IP address has been reported a total of 71 times from 7 distinct sources. 183.207.48.155 was first reported on December 13th 2024, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 4server	2026-07-06 16:13:47 (5 hours ago)	[MonJul0618:13:41.8159022026][security2:error][pid204847:tid204954][client183.207.48.155:0]ModSecuri ... show more [MonJul0618:13:41.8159022026][security2:error][pid204847:tid204954][client183.207.48.155:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"parrocchiaditesserete.ch\"][uri\"/\"][unique_id\"akvUNQomH4L0tQ43swAkWwAAAMw\"] show less	Port Scan Brute-Force Web App Attack
🇦🇺 dyln	2026-06-27 17:14:29 (1 week ago)	Dyls honeypot brute-force: proto8 (1 total hits)	Brute-Force
🇩🇪 barbarella	2026-06-23 21:39:07 (1 week ago)	Illegal http header (GET /)	Hacking Web App Attack
🇺🇸 cwytech	2026-06-13 00:07:18 (3 weeks ago)	Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/wordpress-geofence-sus.	Bad Web Bot Web App Attack
🇨🇭 4server	2026-06-06 16:01:40 (1 month ago)	[SatJun0618:01:36.6155172026][security2:error][pid2880842:tid2882517][client183.207.48.155:0]ModSecu ... show more [SatJun0618:01:36.6155172026][security2:error][pid2880842:tid2882517][client183.207.48.155:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"www.shakary.com\"][uri\"/\"][unique_id\"aiREYO_BSn0mdYl73_jVagAAARY\"] show less	Hacking Web App Attack
🇨🇭 4server	2026-06-02 17:23:03 (1 month ago)	[TueJun0219:22:59.7962222026][security2:error][pid2940512:tid2940795][client183.207.48.155:0]ModSecu ... show more [TueJun0219:22:59.7962222026][security2:error][pid2940512:tid2940795][client183.207.48.155:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"www.filarmonicaagno.ch\"][uri\"/\"][unique_id\"ah8Rc0t5vPa91eUEXZ1z5gAAAQ4\"] show less	Hacking Web App Attack
🇩🇪 barbarella	2026-05-28 17:21:10 (1 month ago)	Illegal http header (GET /)	Hacking Web App Attack
🇩🇪 4server	2026-05-28 17:02:59 (1 month ago)	[ThuMay2819:02:52.8662122026][security2:error][pid934375:tid934448][client183.207.48.155:0]ModSecuri ... show more [ThuMay2819:02:52.8662122026][security2:error][pid934375:tid934448][client183.207.48.155:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"archi-box.ch\"][uri\"/\"][unique_id\"ahh1PORWF9FhUKBIAO5zygAAAIE\"] show less	Port Scan Brute-Force Web App Attack
🇨🇭 4server	2026-05-20 05:37:32 (1 month ago)	[WedMay2007:37:28.7307302026][security2:error][pid1124445:tid1124490][client183.207.48.155:0]ModSecu ... show more [WedMay2007:37:28.7307302026][security2:error][pid1124445:tid1124490][client183.207.48.155:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"filarmonicaagno.ch\"][uri\"/\"][unique_id\"ag1ImNCnH-uevzJdkdZpnwAAAVg\"] show less	Hacking Web App Attack
🇨🇳 ThreatBook.io	2026-05-17 23:18:19 (1 month ago)	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/183.207.48.155 2 ... show more ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/183.207.48.155 2026-05-17 13:29:01 / show less	Web App Attack
🇨🇳 ThreatBook.io	2026-05-16 23:25:33 (1 month ago)	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/183.207.48.155 2 ... show more ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/183.207.48.155 2026-05-16 13:50:17 / show less	Web App Attack
🇨🇳 ThreatBook.io	2026-05-12 23:40:58 (1 month ago)	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/183.207.48.155 2 ... show more ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/183.207.48.155 2026-05-12 04:16:51 / show less	Web App Attack
🇦🇺 trentwiles.com	2026-05-12 03:21:55 (1 month ago)	Unauthorized connection attempt detected from IP address 183.207.48.155 to port 80 [SYD]	Port Scan
🇨🇳 ThreatBook.io	2026-05-11 23:28:56 (1 month ago)	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/183.207.48.155 2 ... show more ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/183.207.48.155 2026-05-11 06:26:03 / show less	Web App Attack
🇩🇪 4server	2026-05-11 04:04:43 (1 month ago)	[MonMay1106:04:36.0324642026][security2:error][pid1966763:tid1966843][client183.207.48.155:0]ModSecu ... show more [MonMay1106:04:36.0324642026][security2:error][pid1966763:tid1966843][client183.207.48.155:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"www.specialfood.ch\"][uri\"/\"][unique_id\"agFVVPj4t4CDJYN2KKca8wAAAME\"] show less	Port Scan Brute-Force Web App Attack

Showing 1 to 15 of 71 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 195.184.76.192

🇱🇹 194.165.16.164

🇧🇷 45.4.179.4

🇨🇳 36.140.29.110

🇺🇸 216.73.216.208

🇺🇸 195.184.76.188

🇺🇸 195.184.76.186

🇺🇸 195.184.76.184

🇹🇼 110.25.112.152

🇨🇳 39.74.90.207

🇨🇳 218.81.180.21

🇺🇸 195.184.76.180

🇺🇸 195.184.76.178

🇺🇸 195.184.76.176

🇺🇸 195.184.76.174

🇨🇦 172.105.106.93

🇬🇧 172.71.26.132

🇯🇵 172.64.213.60

🇭🇰 165.154.6.75

🇩🇪 140.248.75.156