JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 223.73.27.252

223.73.27.252 was found in our database!

This IP was reported 6 times. Confidence of Abuse is 4%: ?

ISP	China Mobile Communications Corporation
Usage Type	Fixed Line ISP
ASN	AS9808
Domain Name	chinamobile.com
Country	🇨🇳 China
City	Jiaxing, Zhejiang

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 223.73.27.252

Whois 223.73.27.252

IP Abuse Reports for 223.73.27.252:

This IP address has been reported a total of 6 times from 2 distinct sources. 223.73.27.252 was first reported on December 18th 2025, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-27 22:49:18 (5 days ago)	(mod_security) mod_security (id:210831) triggered by 223.73.27.252 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 223.73.27.252 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 18:49:11.011053 2026] [security2:error] [pid 12416:tid 12444] [client 223.73.27.252:12324] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.cityofmiddleton.org\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.cityofmiddleton.org"] [uri "/"] [unique_id "akBTZ2CZNOOtyI2SLFIOXAAAAI8"], referer: http://www.cityofmiddleton.org/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-13 20:08:31 (1 month ago)	(mod_security) mod_security (id:210831) triggered by 223.73.27.252 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 223.73.27.252 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 13 16:08:24.579305 2026] [security2:error] [pid 10601:tid 10601] [client 223.73.27.252:4302] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|angelachawkins.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "angelachawkins.com"] [uri "/index.html"] [unique_id "agTaONE2mr6zwFMnH_QI9gAAABU"], referer: http://angelachawkins.com/index.html show less	Brute-Force Bad Web Bot Web App Attack
🇨🇳 ThreatBook.io	2026-04-03 02:28:51 (2 months ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/223.73.27.252 2026-04- ... show more ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/223.73.27.252 2026-04-02 20:10:17 /config.json show less	Web App Attack
🇺🇸 TPI-Abuse	2026-02-18 22:08:47 (4 months ago)	(mod_security) mod_security (id:210831) triggered by 223.73.27.252 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 223.73.27.252 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 17:08:40.925438 2026] [security2:error] [pid 1429463:tid 1429510] [client 223.73.27.252:2060] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|accrediteddegree.org\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "accrediteddegree.org"] [uri "/"] [unique_id "aZY4aEBJfRSn7qLy2QPp8wAAAYw"], referer: https://accrediteddegree.org/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-01-29 21:56:47 (5 months ago)	(mod_security) mod_security (id:210831) triggered by 223.73.27.252 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 223.73.27.252 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 29 16:56:43.858848 2026] [security2:error] [pid 2956953:tid 2956953] [client 223.73.27.252:15495] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|markgiffin.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "markgiffin.com"] [uri "/"] [unique_id "aXvXmyBMlV9i-g_Aw2vbFwAAACE"], referer: http://markgiffin.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇳 ThreatBook.io	2025-12-18 00:56:50 (6 months ago)	ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/223.73.27.252 2025-12-17 03 ... show more ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/223.73.27.252 2025-12-17 03:49:26 /sitemap.xml show less	Web App Attack

Showing 1 to 6 of 6 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇦 85.217.149.55

🇺🇸 64.62.197.121

🇮🇪 18.203.84.1

🇮🇪 2a05:d018:10df:d401:a678:c705:68f9:3168

🇺🇸 216.218.206.69

🇬🇧 193.32.209.233

🇺🇸 193.26.115.137

🇺🇸 162.216.150.16

🇫🇮 147.185.133.94

🇸🇬 145.223.131.134

🇻🇳 103.61.123.132

🇧🇷 69.6.221.248

🇺🇸 68.198.212.235

🇺🇸 64.225.9.143

🇫🇷 51.159.110.167

🇧🇷 45.164.32.144

🇮🇪 34.241.244.22

🇮🇱 31.154.107.212

🇻🇳 14.248.83.33

🇮🇪 2a05:d018:10df:d400:5a65:4acf:d87:eab5