JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 183.56.248.196

183.56.248.196 was found in our database!

This IP was reported 34 times. Confidence of Abuse is 74%: ?

74%

ISP	CHINANET Guangdong province network
Usage Type	Fixed Line ISP
ASN	AS135089
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Shenzhen, Guangdong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 183.56.248.196

Whois 183.56.248.196

IP Abuse Reports for 183.56.248.196:

This IP address has been reported a total of 34 times from 17 distinct sources. 183.56.248.196 was first reported on June 25th 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Site.eu	2026-07-18 08:04:42 (1 week ago)	Excessive multi-domain requests	Brute-Force
🇺🇸 TPI-Abuse	2026-07-17 17:06:54 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 183.56.248.196 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 183.56.248.196 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 13:06:45.660545 2026] [security2:error] [pid 31766:tid 31766] [client 183.56.248.196:46582] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "inmosantanora.com"] [uri "/.env.bak"] [unique_id "alphJZ-v9Sh99He4tUZ7zAAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 12:55:58 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 183.56.248.196 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 183.56.248.196 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 08:55:53.143624 2026] [security2:error] [pid 730840:tid 730840] [client 183.56.248.196:49801] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.instagenii.ficklepassionproductions.com"] [uri "/.env.dev"] [unique_id "alomWYz5uw8cV9zt7lm0OQAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 08:31:36 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 183.56.248.196 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 183.56.248.196 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 04:31:28.408171 2026] [security2:error] [pid 28005:tid 28005] [client 183.56.248.196:38257] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "admcolumbus.com"] [uri "/.env"] [unique_id "alnoYGpmgYCr2Jc-xdGj6wAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-07-17 08:12:57 (1 week ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 07:51:40 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 183.56.248.196 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 183.56.248.196 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 03:51:36.949241 2026] [security2:error] [pid 630761:tid 630761] [client 183.56.248.196:47283] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "waterjetsolutions.com"] [uri "/.env.prod"] [unique_id "alnfCFEy4Y1-sWsKAui3_AAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 07:35:05 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 183.56.248.196 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 183.56.248.196 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 03:34:57.964493 2026] [security2:error] [pid 431798:tid 431798] [client 183.56.248.196:43397] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "samcdevitt.com"] [uri "/.env.development"] [unique_id "alnbIcOTHLQPwTu63NmW8QAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 djboddington	2026-07-17 07:07:32 (1 week ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing	Web App Attack Hacking
🇩🇪 LRob	2026-07-17 05:30:14 (1 week ago)	CrowdSec: crowdsecurity/http-sensitive-files \| req: /env.json \| 5 distinct paths \| UA: Mozilla/5.0 ( ... show more CrowdSec: crowdsecurity/http-sensitive-files \| req: /env.json \| 5 distinct paths \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 (Silvy X Ran; +https://silvyxran.love; show less	Hacking
🇳🇱 Savvii	2026-07-17 04:47:59 (1 week ago)	21 attempts against mh_ha-misbehave-ban on tin	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 04:22:22 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 183.56.248.196 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 183.56.248.196 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 00:22:15.856782 2026] [security2:error] [pid 23953:tid 23953] [client 183.56.248.196:37676] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "plattlawgroup.com"] [uri "/.env"] [unique_id "almt90e3KZKDhD4RM0r_vQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇲🇾 Rizzy	2026-07-17 03:52:37 (1 week ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇺🇸 Sling	2026-07-17 03:26:16 (1 week ago)	Automated detection: IP accessed 2 sensitive endpoints within 30s on slingexe.com. Paths: /.env.exam ... show more Automated detection: IP accessed 2 sensitive endpoints within 30s on slingexe.com. Paths: /.env.example, /.env.sample. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 (Silvy X Ran; +https://silvyxran.love; +https://silver.inc). show less	Web App Attack Bad Web Bot Hacking
🇺🇸 TPI-Abuse	2026-07-17 03:10:20 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 183.56.248.196 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 183.56.248.196 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 23:10:15.351452 2026] [security2:error] [pid 18934:tid 18934] [client 183.56.248.196:46706] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.russiacoin.info"] [uri "/.env"] [unique_id "almdF6FuPmN-ag3eRXwYgAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇾 lns.bz	2026-07-17 03:04:46 (1 week ago)	Too many 404 requests [BY]	Web App Attack

Showing 1 to 15 of 34 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 198.235.24.40

🇬🇧 195.140.214.25

🇺🇸 66.132.195.77

🇬🇧 35.203.210.177

🇦🇷 200.50.155.117

🇧🇪 198.235.24.245

🇹🇼 198.235.24.59

🇳🇱 193.176.31.239

🇮🇩 182.253.123.9

🇪🇨 157.100.88.181

🇨🇳 123.117.153.173

🇺🇸 83.142.55.20

🇺🇸 66.132.186.251

🇺🇸 64.62.197.153

🇺🇸 13.223.57.40

🇬🇧 2a09:bac5:385e:23cd::391:6e

🇺🇿 213.230.93.36

🇧🇷 205.210.31.225

🇧🇪 198.235.24.243

🇧🇪 198.235.24.221