JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 118.193.47.245

118.193.47.245 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 1%: ?

ISP	UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED
Usage Type	Data Center/Web Hosting/Transit
ASN	AS135377
Domain Name	ucloud.cn
Country	🇭🇰 Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 118.193.47.245

Whois 118.193.47.245

IP Abuse Reports for 118.193.47.245:

This IP address has been reported a total of 16 times from 12 distinct sources. 118.193.47.245 was first reported on June 9th 2024, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-05-31 21:30:04 (3 weeks ago)	\| [Dangerous/Hong Kong] Aggressive IP 118.193.47.245 (~30 hits). Type: DoS Defender- Web server 400 ... show more \| [Dangerous/Hong Kong] Aggressive IP 118.193.47.245 (~30 hits). Type: DoS Defender- Web server 400 error code show less	Web App Attack Hacking SQL Injection
🇺🇸 PulseServers	2024-11-07 05:17:33 (1 year ago)	Malicious Web Traffic - Exploit probing, request floods, etc. on a server hosted by PulseServers.com ... show more Malicious Web Traffic - Exploit probing, request floods, etc. on a server hosted by PulseServers.com - ISUS1 ... show less	DDoS Attack Exploited Host
🇬🇧 PulseServers	2024-11-07 04:30:30 (1 year ago)	Malicious Web Traffic - Exploit probing, request floods, etc. on a server hosted by PulseServers.com ... show more Malicious Web Traffic - Exploit probing, request floods, etc. on a server hosted by PulseServers.com - ISUK2 ... show less	DDoS Attack Exploited Host
🇩🇪 Packets-Decreaser.NET	2024-10-31 21:44:54 (1 year ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇩🇪 CommanderRoot	2024-07-26 05:33:08 (1 year ago)	HTTP request flood, even after hitting rate limiting	DDoS Attack Web Spam
🇲🇹 Malta	2024-07-22 00:07:35 (1 year ago)	118.193.47.245 - - [22/Jul/2024:02:07:34 +0200] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (Macintosh; ... show more 118.193.47.245 - - [22/Jul/2024:02:07:34 +0200] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.60 Safari/537.36" Brute-force password attempt show less	Hacking Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2024-07-21 14:56:42 (1 year ago)	(mod_security) mod_security (id:240335) triggered by 118.193.47.245 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 118.193.47.245 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 21 10:56:33.678812 2024] [security2:error] [pid 9847:tid 9847] [client 118.193.47.245:47038] [client 118.193.47.245] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 118.193.47.245 (+1 hits since last alert)\|arsenalfordemocracy.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "arsenalfordemocracy.com"] [uri "/xmlrpc.php"] [unique_id "Zp0hoXKDMI2NwN8D41BQFgAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-07-21 01:59:00 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2024-07-20 13:51:02 (1 year ago)	Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/1.1, GET /xmlrpc.php HTTP/1.1	Hacking Web App Attack
🇺🇸 TPI-Abuse	2024-07-20 13:09:11 (1 year ago)	(mod_security) mod_security (id:240335) triggered by 118.193.47.245 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240335) triggered by 118.193.47.245 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 20 09:09:03.284098 2024] [security2:error] [pid 32708:tid 32708] [client 118.193.47.245:36778] [client 118.193.47.245] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 118.193.47.245 (+1 hits since last alert)\|newcitypark.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "newcitypark.com"] [uri "/xmlrpc.php"] [unique_id "Zpu27xehBD1xY18Y_ln9oQAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 bittiguru.fi	2024-07-20 12:47:21 (1 year ago)	118.193.47.245 - [20/Jul/2024:15:47:18 +0300] "POST /xmlrpc.php HTTP/1.1" 200 235 "-" "Mozilla/5.0 ( ... show more 118.193.47.245 - [20/Jul/2024:15:47:18 +0300] "POST /xmlrpc.php HTTP/1.1" 200 235 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.60 Safari/537.36" "1.86" 118.193.47.245 - [20/Jul/2024:15:47:20 +0300] "POST /xmlrpc.php HTTP/1.1" 200 235 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.60 Safari/537.36" "1.86" ... show less	Hacking Brute-Force Web App Attack
🇩🇪 Marc	2024-07-20 10:50:24 (1 year ago)		Brute-Force
Anonymous	2024-07-20 00:54:43 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇪🇸 10dencehispahard SL	2024-07-19 22:00:50 (1 year ago)	Unauthorized login attempts [ wordpress-xmlrpc, wordpress]	Brute-Force Web App Attack
🇺🇸 MHuiG	2024-06-10 04:10:35 (2 years ago)	The IP has triggered Cloudflare WAF. action: block source: firewallCustom clientAsn: 135377 clientAS ... show more The IP has triggered Cloudflare WAF. action: block source: firewallCustom clientAsn: 135377 clientASNDescription: UCLOUD-HK-AS-AP UCLOUD INFORMATION TECHNOLOGY HK LIMITED clientCountryName: HK clientIP: 118.193.47.245 clientRequestHTTPHost: bot-trap.mhuig.top clientRequestHTTPMethodName: GET clientRequestHTTPProtocol: HTTP/1.1 clientRequestPath: /favicon.ico clientRequestQuery: datetime: 2024-06-10T02:47:27Z rayName: 8916096abfbc84c4 ruleId: 62370dc6b7504b8c983f836ea0faec20 userAgent: Mozilla/5.0 (Linux; Android 11; vivo 1906; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/87.0.4280.141 Mobile Safari/537.36 VivoBrowser/8.9.0.0 uni-app Html5Plus/1.0. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Open Proxy VPN IP Port Scan Hacking SQL Injection Bad Web Bot Exploited Host Web App Attack

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 64.62.197.42

🇺🇸 2607:f8b0:4002:c03::122

🇨🇳 220.194.168.247

🇰🇷 211.62.96.42

🇨🇳 175.30.48.129

🇨🇳 121.196.157.119

🇨🇳 101.126.147.62

🇩🇪 69.72.244.59

🇺🇸 66.132.195.83

🇧🇪 35.187.44.3

🇺🇸 216.180.246.84

🇺🇸 195.184.76.183

🇳🇱 185.242.226.33

🇮🇪 162.158.230.137

🇪🇸 162.158.122.86

🇭🇰 103.100.211.71

🇧🇬 79.124.58.102

🇺🇸 64.188.169.184

🇹🇭 45.150.130.97

🇺🇸 45.3.36.108