JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 183.207.48.162

183.207.48.162 was found in our database!

This IP was reported 37 times. Confidence of Abuse is 47%: ?

47%

ISP	China Mobile Communications Corporation
Usage Type	Mobile ISP
ASN	AS9808
Domain Name	chinamobile.com
Country	🇨🇳 China
City	Shanghai, Shanghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 183.207.48.162

Whois 183.207.48.162

IP Abuse Reports for 183.207.48.162:

This IP address has been reported a total of 37 times from 17 distinct sources. 183.207.48.162 was first reported on February 8th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 taivas.nl	2026-07-18 04:32:34 (1 day ago)	Many_bad_calls	Web App Attack
🇺🇸 TPI-Abuse	2026-07-18 01:05:14 (1 day ago)	(mod_security) mod_security (id:210730) triggered by 183.207.48.162 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 183.207.48.162 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 21:05:08.370030 2026] [security2:error] [pid 7467:tid 7467] [client 183.207.48.162:39863] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.aaaBfT.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.aaabft.com"] [uri "/[email protected]"] [unique_id "alrRRHVuUBKH60Ef6QrQkAAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 taivas.nl	2026-07-17 09:02:12 (2 days ago)	Bad_requests	Bad Web Bot
🇩🇪 ghostwarriors	2026-07-17 07:50:03 (2 days ago)	Attempts against non-existent wp-login	Brute-Force Web App Attack
🇮🇹 madaello	2026-07-14 02:46:42 (5 days ago)	183.207.48.162 - - [14/Jul/2026:04:46:37 +0200] "GET / HTTP/1.1" 301 623 "-" "Mozilla/5.0 (Windows N ... show more 183.207.48.162 - - [14/Jul/2026:04:46:37 +0200] "GET / HTTP/1.1" 301 623 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36" 183.207.48.162 - - [14/Jul/2026:04:46:38 +0200] "GET /js/grids.min.js HTTP/1.1" 301 653 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36" 183.207.48.162 - - [14/Jul/2026:04:46:39 +0200] "GET /js/bootstrap-400.min.js HTTP/1.1" 301 669 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36" 183.207.48.162 - - [14/Jul/2026:04:46:41 +0200] "GET /js/popper-1.12.9.min.js HTTP/1.1" 301 669 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36" ... show less	Hacking
🇦🇺 aranguren.org	2026-07-10 18:21:39 (1 week ago)	183.207.48.162 - - [11/Jul/2026:04:21:31 +1000] "GET /ipv6 HTTP/1.1" 404 986 "-" "Mozilla/5.0 (Windo ... show more 183.207.48.162 - - [11/Jul/2026:04:21:31 +1000] "GET /ipv6 HTTP/1.1" 404 986 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36" 183.207.48.162 - - [11/Jul/2026:04:21:31 +1000] "GET /ipv4 HTTP/1.1" 404 986 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36" 183.207.48.162 - - [11/Jul/2026:04:21:32 +1000] "GET /rutorrent/ HTTP/1.1" 403 990 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36" 183.207.48.162 - - [11/Jul/2026:04:21:36 +1000] "GET /cgi-bin/dsc-grapher.pl HTTP/1.1" 401 1235 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36" 183.207.48.162 - - [11/Jul/2026:04:21:37 +1000] "GET /nagios/ HTTP/1.1" 401 1220 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537. ... show less	Bad Web Bot
Anonymous	2026-07-06 12:02:15 (1 week ago)	Web attack	Bad Web Bot Web App Attack
🇺🇸 mnsf	2026-06-11 22:05:42 (1 month ago)	Request Overload (110)	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-10 15:48:31 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 183.207.48.162 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 183.207.48.162 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 11:48:22.999552 2026] [security2:error] [pid 20062:tid 20081] [client 183.207.48.162:30581] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.aafm.us\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.aafm.us"] [uri "/http/charteredfinancialmanager.com"] [unique_id "aimHRgGwdu0-q9CFefnKJgAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 SYSMarshal	2026-06-09 12:16:06 (1 month ago)	SYSMarshal detection: Port Scanning, Web Application Attack, DDoS Attack, DNS Attack, Bad Bot [Port: ... show more SYSMarshal detection: Port Scanning, Web Application Attack, DDoS Attack, DNS Attack, Bad Bot [Port:80, Proto:TCP, EventID:5152] show less	Port Scan Web App Attack Bad Web Bot
🇺🇸 donarev419	2026-06-04 02:35:57 (1 month ago)	Connection to port 80 with data transfer. Data preview: GET / HTTP/1.1 User-Agent: Mozilla/5.0 (Win ... show more Connection to port 80 with data transfer. Data preview: GET / HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, lik show less	Port Scan Hacking
🇫🇮 YF	2026-05-27 02:04:03 (1 month ago)	WordPress content enumeration	Web App Attack
🇺🇸 TPI-Abuse	2026-05-05 06:56:34 (2 months ago)	(mod_security) mod_security (id:225170) triggered by 183.207.48.162 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 183.207.48.162 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 05 02:56:25.015637 2026] [security2:error] [pid 21535:tid 21598] [client 183.207.48.162:13857] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.greaternorthmiamihistory.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.greaternorthmiamihistory.org"] [uri "/wp-json/wp/v2/users/1"] [unique_id "afmUmaceTbIY4RrHb38TAQAAAIQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-17 17:51:08 (3 months ago)	(mod_security) mod_security (id:210730) triggered by 183.207.48.162 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 183.207.48.162 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 17 13:51:03.742839 2026] [security2:error] [pid 2333647:tid 2333647] [client 183.207.48.162:42873] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|techspertnet.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "techspertnet.com"] [uri "/[email protected]"] [unique_id "aeJzBzcMz_SECB_dhENCJAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 myagent.site	2026-04-10 23:58:07 (3 months ago)	Blocking for trying to access an exploit file: /myagent.site	Hacking

Showing 1 to 15 of 37 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 187.251.123.104

🇬🇧 185.152.39.211

🇳🇬 102.88.21.215

🇬🇧 206.189.18.100

🇳🇱 206.189.13.123

🇳🇱 206.189.5.249

🇳🇱 206.189.5.100

🇩🇪 167.94.146.72

🇳🇱 91.92.40.217

🇫🇷 85.217.140.39

🇲🇽 46.250.175.53

🇺🇸 45.39.115.21

🇵🇱 31.76.87.27

🇭🇰 23.141.84.33

🇺🇸 205.210.31.96

🇺🇸 205.210.31.75

🇺🇸 205.210.31.66

🇺🇸 205.210.31.59

🇳🇱 204.76.203.49

🇳🇱 160.119.76.10