JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 180.153.236.100

180.153.236.100 was found in our database!

This IP was reported 191 times. Confidence of Abuse is 42%: ?

42%

ISP	CHINANET SHANGHAI PROVINCE NETWORK
Usage Type	Fixed Line ISP
ASN	AS4811
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Shanghai, Shanghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 180.153.236.100

Whois 180.153.236.100

IP Abuse Reports for 180.153.236.100:

This IP address has been reported a total of 191 times from 23 distinct sources. 180.153.236.100 was first reported on September 25th 2025, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 NetShield-DE	2026-06-30 23:07:58 (4 hours ago)	Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-07-01T ... show more Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-07-01T01:07:02+0200. Last: 2026-07-01T01:07:02+0200. Samples: - 2026-06-28 09:59:35,636 fail2ban.actions [996924]: NOTICE [abuseipdb] Ban 180.153.236.100 show less	Web App Attack
🇩🇪 NetShield-DE	2026-06-30 19:08:03 (8 hours ago)	Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-06-30T ... show more Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-06-30T21:07:02+0200. Last: 2026-06-30T21:07:02+0200. Samples: - 2026-06-28 09:59:35,636 fail2ban.actions [996924]: NOTICE [abuseipdb] Ban 180.153.236.100 show less	Web App Attack
🇩🇪 NetShield-DE	2026-06-30 14:08:02 (13 hours ago)	Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-06-30T ... show more Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-06-30T16:07:01+0200. Last: 2026-06-30T16:07:01+0200. Samples: - 2026-06-28 09:59:35,636 fail2ban.actions [996924]: NOTICE [abuseipdb] Ban 180.153.236.100 show less	Web App Attack
🇺🇸 TPI-Abuse	2026-06-30 10:19:06 (17 hours ago)	(mod_security) mod_security (id:210831) triggered by 180.153.236.100 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210831) triggered by 180.153.236.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 30 06:19:00.030731 2026] [security2:error] [pid 27870:tid 27870] [client 180.153.236.100:46037] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.handi-finder.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.handi-finder.com"] [uri "/"] [unique_id "akOYFFv0DwIec8LzXaa6WwAAAAk"], referer: https://www.handi-finder.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 NetShield-DE	2026-06-30 09:08:04 (18 hours ago)	Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-06-30T ... show more Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-06-30T11:07:01+0200. Last: 2026-06-30T11:07:01+0200. Samples: - 2026-06-28 09:59:35,636 fail2ban.actions [996924]: NOTICE [abuseipdb] Ban 180.153.236.100 show less	Web App Attack
🇩🇪 NetShield-DE	2026-06-30 04:08:02 (23 hours ago)	Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-06-30T ... show more Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-06-30T06:07:01+0200. Last: 2026-06-30T06:07:01+0200. Samples: - 2026-06-28 09:59:35,636 fail2ban.actions [996924]: NOTICE [abuseipdb] Ban 180.153.236.100 show less	Web App Attack
🇩🇪 NetShield-DE	2026-06-29 23:08:01 (1 day ago)	Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-06-30T ... show more Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-06-30T01:07:01+0200. Last: 2026-06-30T01:07:01+0200. Samples: - 2026-06-28 09:59:35,636 fail2ban.actions [996924]: NOTICE [abuseipdb] Ban 180.153.236.100 show less	Web App Attack
🇩🇪 NetShield-DE	2026-06-29 19:08:08 (1 day ago)	Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-06-29T ... show more Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-06-29T21:07:02+0200. Last: 2026-06-29T21:07:02+0200. Samples: - 2026-06-28 09:59:35,636 fail2ban.actions [996924]: NOTICE [abuseipdb] Ban 180.153.236.100 show less	Web App Attack
🇺🇸 TPI-Abuse	2026-06-29 15:21:28 (1 day ago)	(mod_security) mod_security (id:210831) triggered by 180.153.236.100 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210831) triggered by 180.153.236.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 29 11:21:20.754808 2026] [security2:error] [pid 24968:tid 24968] [client 180.153.236.100:62439] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|workzoap.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "workzoap.com"] [uri "/"] [unique_id "akKNcGjBKFFAt-OEw8P0BAAAAAw"], referer: https://workzoap.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 NetShield-DE	2026-06-29 14:08:06 (1 day ago)	Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-06-29T ... show more Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-06-29T16:07:02+0200. Last: 2026-06-29T16:07:02+0200. Samples: - 2026-06-28 09:59:35,636 fail2ban.actions [996924]: NOTICE [abuseipdb] Ban 180.153.236.100 show less	Web App Attack
🇺🇸 TPI-Abuse	2026-06-29 12:46:23 (1 day ago)	(mod_security) mod_security (id:210831) triggered by 180.153.236.100 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210831) triggered by 180.153.236.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 29 08:46:15.524545 2026] [security2:error] [pid 20478:tid 20478] [client 180.153.236.100:40765] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|secureinitiatives.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "secureinitiatives.com"] [uri "/"] [unique_id "akJpF_akiV1MUN_bAiuXRgAAAAg"], referer: http://secureinitiatives.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-29 12:28:21 (1 day ago)	(mod_security) mod_security (id:210831) triggered by 180.153.236.100 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210831) triggered by 180.153.236.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 29 08:28:17.625040 2026] [security2:error] [pid 26346:tid 26346] [client 180.153.236.100:49251] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|deckmasterscompany.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "deckmasterscompany.com"] [uri "/"] [unique_id "akJk4U1JKBEtp0G9ahVlbQAAAAo"], referer: https://deckmasterscompany.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 NetShield-DE	2026-06-29 09:08:05 (1 day ago)	Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-06-29T ... show more Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-06-29T11:07:02+0200. Last: 2026-06-29T11:07:02+0200. Samples: - 2026-06-28 09:59:35,636 fail2ban.actions [996924]: NOTICE [abuseipdb] Ban 180.153.236.100 show less	Web App Attack
🇨🇦 Mediashaker	2026-06-29 06:42:08 (1 day ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 180.153.236.100 (CN/ ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 180.153.236.100 (CN/China/-) show less	Bad Web Bot
🇩🇪 NetShield-DE	2026-06-29 04:08:05 (1 day ago)	Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-06-29T ... show more Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-06-29T06:07:02+0200. Last: 2026-06-29T06:07:02+0200. Samples: - 2026-06-28 09:59:35,636 fail2ban.actions [996924]: NOTICE [abuseipdb] Ban 180.153.236.100 show less	Web App Attack

Showing 1 to 15 of 191 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 2a09:bac5:4e39:2719::3e5:c

🇺🇸 2001:470:1:c84::21a

🇨🇳 222.88.189.183

🇬🇧 193.163.125.192

🇧🇷 189.78.173.91

🇧🇷 189.62.47.93

🇺🇸 159.223.180.87

🇬🇧 87.236.176.247

🇳🇱 45.148.10.121

🇺🇸 2a09:bac5:638f:28::4:317

🇭🇰 199.45.154.180

🇧🇷 189.51.217.111

🇧🇷 189.45.197.252

🇧🇷 189.45.197.243

🇺🇸 157.245.141.140

🇺🇸 147.185.132.240

🇷🇺 95.181.213.141

🇷🇴 92.118.39.14

🇷🇺 91.185.75.244

🇳🇱 46.235.42.53