JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 118.193.38.85

118.193.38.85 was found in our database!

This IP was reported 462 times. Confidence of Abuse is 81%: ?

81%

ISP	UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED
Usage Type	Data Center/Web Hosting/Transit
ASN	AS135377
Domain Name	ucloud.cn
Country	🇭🇰 Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 118.193.38.85

Whois 118.193.38.85

IP Abuse Reports for 118.193.38.85:

This IP address has been reported a total of 462 times from 134 distinct sources. 118.193.38.85 was first reported on July 14th 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 as211431.net	2026-07-16 22:50:25 (1 week ago)	Triggered Cloudflare WAF (firewallCustom) from HK. Action taken: MANAGED_CHALLENGE Protocol: HTTP/2 ... show more Triggered Cloudflare WAF (firewallCustom) from HK. Action taken: MANAGED_CHALLENGE Protocol: HTTP/2 (GET method) Endpoint: / UA: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇦🇹 Pingger Shikkoken	2026-07-16 03:08:14 (1 week ago)	2026-07-16T03:08:14+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC ... show more 2026-07-16T03:08:14+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=118.193.38.85 DST=10.1.1.2 LEN=60 TOS=0x00 PREC=0x20 TTL=43 ID=26015 DF PROTO=TCP SPT=57510 DPT=80 WINDOW=1412 RES=0x00 SYN URGP=0 2026-07-16T03:08:15+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=118.193.38.85 DST=10.1.1.2 LEN=60 TOS=0x00 PREC=0x20 TTL=43 ID=26016 DF PROTO=TCP SPT=57510 DPT=80 WINDOW=1412 RES=0x00 SYN URGP=0 2026-07-16T03:08:17+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=118.193.38.85 DST=10.1.1.2 LEN=60 TOS=0x00 PREC=0x20 TTL=43 ID=26017 DF PROTO=TCP SPT=57510 DPT=80 WINDOW=1412 RES=0x00 SYN URGP=0 ... show less	Hacking Bad Web Bot
🇧🇪 cmbplf	2026-07-15 01:03:13 (1 week ago)	9.222 requests from abuseipdb.com blacklisted IP (1yr4mos3w)	Brute-Force Bad Web Bot
🇦🇹 Pingger Shikkoken	2026-07-14 00:36:25 (1 week ago)	2026-07-14T00:36:25+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC ... show more 2026-07-14T00:36:25+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=118.193.38.85 DST=10.1.1.2 LEN=60 TOS=0x00 PREC=0x20 TTL=40 ID=41088 DF PROTO=TCP SPT=61890 DPT=443 WINDOW=1412 RES=0x00 SYN URGP=0 2026-07-14T00:36:26+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=118.193.38.85 DST=10.1.1.2 LEN=60 TOS=0x00 PREC=0x20 TTL=40 ID=41089 DF PROTO=TCP SPT=61890 DPT=443 WINDOW=1412 RES=0x00 SYN URGP=0 2026-07-14T00:36:28+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=118.193.38.85 DST=10.1.1.2 LEN=60 TOS=0x00 PREC=0x20 TTL=40 ID=41090 DF PROTO=TCP SPT=61890 DPT=443 WINDOW=1412 RES=0x00 SYN URGP=0 ... show less	Hacking Bad Web Bot
🇸🇪 NordhTech	2026-07-13 11:45:18 (1 week ago)	More than 3 malicious connection attempts, trying port(s) 8002/tcp, then blocked from services ...	Port Scan Hacking
🇺🇸 cwytech	2026-07-13 08:43:57 (2 weeks ago)	Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/tpot-web-high.	Bad Web Bot Web App Attack
🇺🇸 anon333	2026-07-09 16:33:11 (2 weeks ago)	Hacker syslog review 1783614791	Hacking
🇺🇸 anon333	2026-07-09 16:06:04 (2 weeks ago)	Invalid probes to web server T1206	Hacking Exploited Host
🇺🇸 NeverBehave	2026-07-08 12:43:02 (2 weeks ago)	[fail2ban] service ocserv jail	Brute-Force Web App Attack
🇩🇪 marcel-knorr.de	2026-07-08 02:46:19 (2 weeks ago)	[MK-Root1] Blocked by UFW	Brute-Force Port Scan
🇵🇱 genokrad	2026-07-02 22:16:38 (3 weeks ago)	Direct ip access to website TCP 80/443 [Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like ... show more Direct ip access to website TCP 80/443 [Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gec]. show less	Port Scan Web App Attack
🇮🇩 hermawan	2026-07-02 21:49:46 (3 weeks ago)	1783028975.107470 118.193.38.85 103.166.156.58 1412_2-4-8-1-3_1412_9 2026-07-03 04:49:35 WIB ...	Email Spam Hacking
🇬🇧 thetomtaylor.co.uk	2026-07-02 21:06:02 (3 weeks ago)	Fail2Ban - [WAF]ModSecurity rule violation on modsecurity ... [ice01]	Hacking SQL Injection Web App Attack
🇺🇸 JonathanYoung2161	2026-07-02 05:30:09 (3 weeks ago)	Automated abuse blocked by fail2ban (jails: nginx-scanner) on a public web/SSH host. Reported by Ome ... show more Automated abuse blocked by fail2ban (jails: nginx-scanner) on a public web/SSH host. Reported by OmegaNet automated defense. show less	Bad Web Bot Web App Attack
🇫🇷 pm33	2026-07-01 20:49:44 (3 weeks ago)	Unauthorized connections HTTP 403	Web App Attack

Showing 1 to 15 of 462 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2a09:bac5:636c:323c::501:27

🇮🇳 152.59.202.35

🇺🇿 94.158.49.223

🇫🇮 2.27.42.28

🇹🇼 221.120.77.34

🇷🇺 213.177.101.147

🇮🇱 213.57.98.153

🇧🇷 205.210.31.206

🇵🇰 203.128.6.156

🇹🇭 202.29.220.106

🇺🇸 184.186.73.106

🇵🇹 176.78.108.200

🇺🇸 165.154.218.143

🇮🇳 139.59.6.237

🇧🇯 137.255.13.44

🇨🇳 106.15.237.207

🇮🇳 103.241.45.120

🇯🇵 101.36.104.242

🇳🇱 91.92.47.53

🇫🇮 80.66.83.43