JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

218.76.101.13

Neutral Activity

Abuse Confidence Score

0% Low Risk

7 reports

5 reporters · latest 2 months ago

ISP: CHINANET-HN Zhangjiajie node network
Usage Type: Fixed Line ISP
ASN: AS4134
Domain Name: hntelecom.net.cn
Country: 🇨🇳 China
City: Zhangjiajie, Hunan

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

218.76.101.13 has been reported 7 times. The most recent report is from 2 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

7 from 5 distinct reporters

First reported

March 13th 2025

Most recent report

2 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 kosada.com	2026-08-09 02:12:38 UTC · (2 months ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇯🇵 jay hung	2026-05-11 03:18:41 UTC · (5 months ago)	2026-05-11T03:18:40.703764+00:00 quarktech kernel: [765371.288734] [UFW BLOCK] IN=eth0 OUT= MAC=22:00:92:2e:84:93:fe:ff:ff:ff:ff:ff:08:00 SRC=218.76.101.13 DST=172.237.20.248 LEN=133 TOS=0x00 PREC=0x00 TTL=40 ID=25082 PROTO=UDP SPT=18626 DPT=37810 LE ... show more 2026-05-11T03:18:40.703764+00:00 quarktech kernel: [765371.288734] [UFW BLOCK] IN=eth0 OUT= MAC=22:00:92:2e:84:93:fe:ff:ff:ff:ff:ff:08:00 SRC=218.76.101.13 DST=172.237.20.248 LEN=133 TOS=0x00 PREC=0x00 TTL=40 ID=25082 PROTO=UDP SPT=18626 DPT=37810 LEN=113 ... show less	Port Scan
🇺🇸 TPI-Abuse	2025-09-18 05:02:51 UTC · (1 year ago)	(mod_security) mod_security (id:210350) triggered by 218.76.101.13 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 18 01:02:43.123643 2025] [security2:error] [pid 10356:tid 10356] [client 218.76.101.13:60484] M ... show more (mod_security) mod_security (id:210350) triggered by 218.76.101.13 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 18 01:02:43.123643 2025] [security2:error] [pid 10356:tid 10356] [client 218.76.101.13:60484] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.renju.net\|F\|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.renju.net"] [uri "/game/45316/"] [unique_id "aMuScwKyEkjW4_FYuKzY1QAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-09-07 20:30:57 UTC · (1 year ago)	(mod_security) mod_security (id:210350) triggered by 218.76.101.13 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 07 16:29:53.451907 2025] [security2:error] [pid 25770:tid 25770] [client 218.76.101.13:42939] M ... show more (mod_security) mod_security (id:210350) triggered by 218.76.101.13 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 07 16:29:53.451907 2025] [security2:error] [pid 25770:tid 25770] [client 218.76.101.13:42939] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.renju.net\|F\|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.renju.net"] [uri "/game/132881"] [unique_id "aL3rQSTfQznT6hnS2aQY-QAAAEA"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇳 ThreatBook.io	2025-03-27 22:11:30 UTC · (1 year ago)	ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/218.76.101.13 2025-03-27 10:24:13 /cc.gif 2025-03-27 10:24:23 /cc.gif 2025-03-27 10:24:07 /cc.gif	Web App Attack
🇨🇳 ThreatBook.io	2025-03-19 22:13:03 UTC · (1 year ago)	ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/218.76.101.13 2025-03-19 14:17:22 /cc.gif	Web App Attack
🇨🇳 killian mei	2025-03-13 22:22:25 UTC · (1 year ago)	ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/218.76.101.13 2025-03-13 10:43:12 /cc.gif 2025-03-13 17:27:44 /cc.gif	Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇬🇧 217.146.80.116

🇺🇸 216.25.89.95

🇻🇳 210.245.30.140

🇳🇱 192.253.248.226

🇩🇪 167.94.145.29

🇻🇳 124.158.13.141

🇷🇴 92.118.39.71

🇳🇱 77.239.124.68

🇺🇸 52.248.42.207

🇺🇸 47.251.186.250

🇿🇦 41.181.156.205

🇷🇴 2.57.122.150

🇨🇳 118.196.118.181

🇨🇳 115.190.54.14

🇮🇩 103.235.74.118

🇷🇴 80.94.95.245

🇮🇳 202.164.149.101

🇮🇩 182.10.98.75

🇺🇸 162.216.150.73

🇮🇳 117.203.78.175