JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 183.87.99.120

183.87.99.120 was found in our database!

This IP was reported 22 times. Confidence of Abuse is 36%: ?

36%

ISP	Huawei-Cloud-HK
Usage Type	Data Center/Web Hosting/Transit
ASN	AS136907
Domain Name	huawei.com
Country	🇭🇰 Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 183.87.99.120

Whois 183.87.99.120

IP Abuse Reports for 183.87.99.120:

This IP address has been reported a total of 22 times from 6 distinct sources. 183.87.99.120 was first reported on April 5th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 kosada.com	2026-07-06 07:25:55 (1 hour ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇫🇷 bigorre.org	2026-07-06 06:33:57 (2 hours ago)	unidentified crawl, no bot reference in user agent	Bad Web Bot
🇺🇸 kosada.com	2026-07-03 07:25:55 (3 days ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-07-03 03:25:45 (3 days ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
Anonymous	2026-06-30 07:50:23 (6 days ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇺🇸 kosada.com	2026-06-29 11:41:11 (6 days ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-06-29 06:55:53 (1 week ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-06-26 01:04:41 (1 week ago)	(mod_security) mod_security (id:210350) triggered by 183.87.99.120 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 183.87.99.120 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 21:04:36.893484 2026] [security2:error] [pid 26968:tid 26968] [client 183.87.99.120:35691] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|socialstudiesforkids.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "socialstudiesforkids.com"] [uri "/articles/worldhistory/leonardo2.htm"] [unique_id "aj3QJJQWfsZNXfl_EjTdCgAAAAg"], referer: https://socialstudiesforkids.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-06-25 22:26:05 (1 week ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-06-25 06:53:06 (1 week ago)	(mod_security) mod_security (id:210350) triggered by 183.87.99.120 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 183.87.99.120 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 02:52:58.816283 2026] [security2:error] [pid 22913:tid 22913] [client 183.87.99.120:27304] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|mavikalem.org\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "mavikalem.org"] [uri "/2026/04/03/kadin-carki-donsun-hatayda-kadinlarin-ekonomik-guclendirilmesi"] [unique_id "ajzQSjvMOskiMaUb1QozqgAAABA"], referer: https://mavikalem.org/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-25 05:35:00 (1 week ago)	(mod_security) mod_security (id:210350) triggered by 183.87.99.120 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 183.87.99.120 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 01:34:52.869042 2026] [security2:error] [pid 788:tid 788] [client 183.87.99.120:33937] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|arsenalfordemocracy.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/privacy-policy"] [unique_id "ajy9_HN41SW2dh__FiF1DAAAABg"], referer: https://arsenalfordemocracy.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-06-20 13:57:09 (2 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-06-20 05:44:08 (2 weeks ago)	(mod_security) mod_security (id:210350) triggered by 183.87.99.120 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 183.87.99.120 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 20 01:44:05.355572 2026] [security2:error] [pid 26000:tid 26000] [client 183.87.99.120:13554] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|billhoy.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "billhoy.com"] [uri "/"] [unique_id "ajYopfR1jVtvnj023j_UVgAAAAk"], referer: https://billhoy.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-18 23:58:15 (2 weeks ago)	(mod_security) mod_security (id:210350) triggered by 183.87.99.120 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 183.87.99.120 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 19:58:08.573560 2026] [security2:error] [pid 1764:tid 1764] [client 183.87.99.120:54135] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|airtechconsulting.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "airtechconsulting.com"] [uri "/"] [unique_id "ajSGEKJ_LXhxBCQK7fFr1AAAABo"], referer: https://www.chromeheartsofficial.shop/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-17 18:28:27 (2 weeks ago)	(mod_security) mod_security (id:210350) triggered by 183.87.99.120 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 183.87.99.120 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 14:28:20.224642 2026] [security2:error] [pid 2556:tid 2566] [client 183.87.99.120:58947] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.icecc.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.icecc.com"] [uri "/"] [unique_id "ajLnRAm-wxk6sel81dMvNwAAAIg"], referer: http://www.icecc.com/ show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.178.110.137

🇺🇸 170.89.87.50

🇯🇵 160.251.140.254

🇮🇩 140.213.51.110

🇩🇪 116.203.188.87

🇨🇳 115.191.61.164

🇺🇿 95.130.227.33

🇺🇸 91.242.95.238

🇺🇸 91.242.95.193

🇺🇸 91.242.95.67

🇫🇷 51.68.111.242

🇹🇷 213.146.165.15

🇺🇸 172.168.12.93

🇺🇸 166.253.2.185

🇮🇩 160.25.37.242

🇸🇬 114.119.151.128

🇺🇸 103.103.98.60

🇺🇸 91.242.95.116

🇺🇸 91.242.73.242

🇺🇸 91.242.73.83