JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 180.153.197.50

180.153.197.50 was found in our database!

This IP was reported 79 times. Confidence of Abuse is 77%: ?

77%

ISP	CHINANET SHANGHAI PROVINCE NETWORK
Usage Type	Fixed Line ISP
ASN	AS4811
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Shanghai, Shanghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 180.153.197.50

Whois 180.153.197.50

IP Abuse Reports for 180.153.197.50:

This IP address has been reported a total of 79 times from 38 distinct sources. 180.153.197.50 was first reported on September 9th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Sklurk	2026-08-27 15:36:33 (1 day ago)	Web App Attack	Web App Attack
🇩🇪 Admins@FBN	2026-08-27 13:34:24 (1 day ago)	FW-PortScan: Traffic Blocked srcport=34288 dstport=80	Port Scan
🇪🇸 librebit	2026-08-26 00:41:37 (2 days ago)	Brute force	Brute-Force
🇨🇳 my meibu	2026-08-25 10:42:03 (3 days ago)	[T-0102] Banned unverified browser cluster: 180.153.197.50 url=/ip cluster_size=4	Web App Attack Bad Web Bot
🇦🇺 FireGuard Server	2026-08-24 18:00:40 (3 days ago)	Blocked by os-abuseipdb; 6 hits, proto=tcp, ports=443	Port Scan Hacking
🇺🇸 nodepile	2026-08-22 21:22:26 (5 days ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/static/version1775170088/fr ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/static/version1775170088/frontend/Smartwave/porto/en_US/Magento_Ui/templates/modal/modal-popup.html ua='Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36') show less	Web App Attack Exploited Host
🇺🇸 SX Communications	2026-08-22 16:56:41 (5 days ago)	Web vulnerability scanning / probing from 180.153.197.50: automated requests for CMS admin paths, lo ... show more Web vulnerability scanning / probing from 180.153.197.50: automated requests for CMS admin paths, login endpoints, xmlrpc, and common scanner fingerprints over HTTPS. 1 hits; paths: /ip. show less	Port Scan Hacking Web App Attack
🇺🇸 SX Communications	2026-08-22 16:56:41 (5 days ago)	HTTP application-layer DoS / botnet traffic from 180.153.197.50: repeated high-cost dynamic page and ... show more HTTP application-layer DoS / botnet traffic from 180.153.197.50: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host. show less	DDoS Attack Bad Web Bot Exploited Host
🇻🇳 trung.fun	2026-08-19 03:08:00 (1 week ago)	DDoS, Hack, Brute Force, Web Attack ...	DDoS Attack Web Spam Hacking Brute-Force Web App Attack
🇺🇸 omc	2026-08-15 10:40:39 (1 week ago)	Banned IP [QN]. GET /ip [Q4]. Layer 7 burst [QF]. Endpoint attack [QS].	Bad Web Bot Web App Attack
🇯🇵 Short-legs-Spider	2026-08-15 01:35:04 (1 week ago)	Test on existence -- [15/Aug/2026:10:35:04 +0900] "GET /ip HTTP/1.1" 403 76 "-" "Mozilla/5.0 (Maci ... show more Test on existence -- [15/Aug/2026:10:35:04 +0900] "GET /ip HTTP/1.1" 403 76 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" show less	Web App Attack
🇺🇸 SX Communications	2026-08-13 09:06:27 (2 weeks ago)	Web vulnerability scanning / probing from 180.153.197.50: automated requests for CMS admin paths, lo ... show more Web vulnerability scanning / probing from 180.153.197.50: automated requests for CMS admin paths, login endpoints, xmlrpc, and common scanner fingerprints over HTTPS. 1 hits; paths: /ip. show less	Port Scan Hacking Web App Attack
🇺🇸 SX Communications	2026-08-13 09:06:27 (2 weeks ago)	HTTP application-layer DoS / botnet traffic from 180.153.197.50: repeated high-cost dynamic page and ... show more HTTP application-layer DoS / botnet traffic from 180.153.197.50: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host. show less	DDoS Attack Bad Web Bot Exploited Host
🇭🇺 bcsaba	2026-08-10 05:05:23 (2 weeks ago)	No IP: 180.153.197.50 - - [10/Aug/2026:07:05:10 +0200] "GET /ip HTTP/1.1" 404 1499 "-" "Mozilla/5.0 ... show more No IP: 180.153.197.50 - - [10/Aug/2026:07:05:10 +0200] "GET /ip HTTP/1.1" 404 1499 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" show less	Web App Attack
🇨🇦 1gz	2026-08-09 08:46:16 (2 weeks ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /anash/janullatos-ne-gjendje-te-rende-spahiu-i-lutemi-zotit-per-sherimin-e-tij-te-shpejte-e-te-plote/762974 UA: Mozilla/5.0 (iPhone; CPU iPhone OS 17_5 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot

Showing 1 to 15 of 79 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 186.235.48.167

🇮🇩 180.248.87.101

🇵🇭 118.193.73.8

🇺🇸 45.194.67.44

🇬🇧 5.226.140.112

🇱🇹 213.176.26.182

🇨🇳 183.230.155.13

🇨🇳 118.196.27.115

🇸🇬 47.241.174.254

🇳🇱 45.148.10.151

🇺🇸 35.222.30.14

🇦🇹 150.251.225.196

🇻🇳 116.99.170.6

🇳🇱 45.148.10.141

🇺🇸 34.148.196.32

🇺🇸 34.136.143.213

🇺🇸 32.195.68.148

🇮🇳 2406:b400:71:95ce:8e70:5aff:fe0b:eb7c

🇹🇼 211.75.198.217

🇧🇷 200.150.254.155