JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

183.240.211.198

Neutral Activity

Abuse Confidence Score

0% Low Risk

16 reports

9 reporters · latest 1 year ago

ISP: China Mobile Communications Corporation
Usage Type: Fixed Line ISP
ASN: AS56040
Domain Name: chinamobile.com
Country: 🇨🇳 China
City: Shanghai, Shanghai

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

183.240.211.198 has been reported 16 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

16 from 9 distinct reporters

First reported

May 3rd 2025

Most recent report

1 year ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 marzzzello	2025-11-01 00:17:10 UTC · (1 year ago)	Ports: 26x 23765	Port Scan
🇺🇸 xmission.com	2025-10-31 03:49:01 UTC · (1 year ago)	Blocked by UFW (ICMP on ) Source port: TTL: 44 Packet length: 104 TOS: 0x00 This report (for 183.240.211.198) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan
🇨🇳 ThreatBook.io	2025-10-25 22:28:23 UTC · (1 year ago)	ThreatBook Intelligence: Scanner,Gateway more details on https://threatbook.io/ip/183.240.211.198 2025-10-25 18:44:37 /config.json	Web App Attack
🇨🇳 ThreatBook.io	2025-10-23 22:39:44 UTC · (1 year ago)	ThreatBook Intelligence: Scanner,Gateway more details on https://threatbook.io/ip/183.240.211.198 2025-10-23 02:15:13 /config.json	Web App Attack
🇺🇸 xmission.com	2025-10-01 04:43:22 UTC · (1 year ago)	Blocked by UFW (ICMP on ) Source port: TTL: 39 Packet length: 104 TOS: 0x08 This report (for 183.240.211.198) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan
🇫🇷 bigorre.org	2025-09-22 15:03:52 UTC · (1 year ago)	Unidentified crawling: not a self-announced bot in user-agent	Bad Web Bot
🇺🇸 TPI-Abuse	2025-09-16 04:41:34 UTC · (1 year ago)	(mod_security) mod_security (id:210350) triggered by 183.240.211.198 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 16 00:41:22.247858 2025] [security2:error] [pid 5730:tid 5730] [client 183.240.211.198:53984] ... show more (mod_security) mod_security (id:210350) triggered by 183.240.211.198 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 16 00:41:22.247858 2025] [security2:error] [pid 5730:tid 5730] [client 183.240.211.198:53984] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.renju.net\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.renju.net"] [uri "/game/56454/"] [unique_id "aMjqckXBksh-Q3jJrzCYfAAAAAE"], referer: https://www.renju.net/game/56454 show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 xmission.com	2025-09-16 00:29:41 UTC · (1 year ago)	Blocked by UFW (ICMP on ) Source port: TTL: 44 Packet length: 104 TOS: 0x00 This report (for 183.240.211.198) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan
🇺🇸 kosada.com	2025-09-15 18:01:14 UTC · (1 year ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
Anonymous	2025-09-15 04:54:42 UTC · (1 year ago)	Unauthorized connection attempt on Port 23	Port Scan Hacking Exploited Host
🇺🇸 TPI-Abuse	2025-09-13 10:28:24 UTC · (1 year ago)	(mod_security) mod_security (id:210350) triggered by 183.240.211.198 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 13 06:28:11.134064 2025] [security2:error] [pid 1917:tid 1917] [client 183.240.211.198:52309] ... show more (mod_security) mod_security (id:210350) triggered by 183.240.211.198 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 13 06:28:11.134064 2025] [security2:error] [pid 1917:tid 1917] [client 183.240.211.198:52309] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.renju.net\|F\|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.renju.net"] [uri "/tournament/1007/game/99001"] [unique_id "aMVHO80qBB37rLVzmL9cWwAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-09-08 08:30:53 UTC · (1 year ago)	(mod_security) mod_security (id:210350) triggered by 183.240.211.198 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 08 04:29:40.946258 2025] [security2:error] [pid 14214:tid 14214] [client 183.240.211.198:4650 ... show more (mod_security) mod_security (id:210350) triggered by 183.240.211.198 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 08 04:29:40.946258 2025] [security2:error] [pid 14214:tid 14214] [client 183.240.211.198:46504] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.renju.net\|F\|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.renju.net"] [uri "/game/138643"] [unique_id "aL6T9JXWRGh2UXYvZxkkGAAAACs"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-08-04 15:03:12 UTC · (1 year ago)	Infected user bad webscan	Exploited Host
🇩🇪 Maike	2025-06-14 10:30:55 UTC · (1 year ago)	ports, 445/24H:1/7D:1	Port Scan
🇨🇳 ThreatBook.io	2025-06-02 23:08:18 UTC · (1 year ago)	ThreatBook Intelligence: Scanner,Spam more details on https://threatbook.io/ip/183.240.211.198 2025-06-02 14:58:41 /sitemap.xml	Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 96.9.207.136

🇩🇪 69.5.169.111

🇺🇸 34.139.197.96

🇲🇾 14.192.212.255

🇳🇱 213.209.159.236

🇨🇱 190.100.239.250

🇺🇦 109.104.183.35

🇺🇸 107.146.156.220

🇮🇳 103.130.90.169

🇮🇳 66.116.224.33

🇹🇼 59.127.153.74

🇴🇲 38.199.43.168

🇺🇸 216.25.89.79

🇳🇱 192.253.248.223

🇨🇱 190.5.48.14

🇺🇸 172.236.228.197

🇳🇱 109.160.32.167

🇲🇦 105.155.197.155

🇺🇸 98.206.59.169

🇮🇱 95.35.178.66