JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

118.25.53.11

Neutral Activity

Abuse confidence score ?

0% Low Risk

27 reports

13 reporters · latest 5 years ago

ISP	Tencent Cloud Computing (Beijing) Co., Ltd
Usage Type	Data Center/Web Hosting/Transit
ASN	AS45090
Domain Name	tencentcloud.com
Country	🇨🇳 China
City	Shanghai, Shanghai

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

118.25.53.11 has been reported 27 times. The most recent report is from 5 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 118.25.53.11

Export CSV

This IP address has been reported a total of 27 times from 13 distinct sources. 118.25.53.11 was first reported on November 22nd 2020, and the most recent report was 5 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 leaf	2021-06-28 07:29:39 (5 years ago)	$f2bV_matches	Bad Web Bot Web App Attack
🇺🇸 leaf	2021-04-24 19:17:10 (5 years ago)	$f2bV_matches	Bad Web Bot Web App Attack
🇺🇸 leaf	2021-03-16 14:06:20 (5 years ago)	$f2bV_matches	Bad Web Bot Web App Attack
🇺🇸 leaf	2021-01-16 21:17:49 (5 years ago)	$f2bV_matches	Bad Web Bot Web App Attack
🇺🇸 leaf	2021-01-05 19:14:54 (5 years ago)	$f2bV_matches	Bad Web Bot Web App Attack
🇺🇸 leaf	2020-12-18 15:09:39 (5 years ago)	$f2bV_matches	Bad Web Bot Web App Attack
🇹🇭 Sawasdee	2020-12-13 10:21:27 (5 years ago)	Unwanted checking 80 or 443 port ...	Bad Web Bot
🇩🇪 ipcop.net	2020-12-13 01:31:09 (5 years ago)	2020/12/12 20:31:07 [error] 31558#31558: 4957853 open() "/usr/share/nginx/html/cgi-bin/php" failed ... show more 2020/12/12 20:31:07 [error] 31558#31558: 4957853 open() "/usr/share/nginx/html/cgi-bin/php" failed (2: No such file or directory), client: 118.25.53.11, server: _, request: "POST /cgi-bin/php?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%30+%2D%6E HTTP/1.1", host: "185.118.197.123" 2020/12/12 20:31:08 [error] 31558#31558: *4957853 open() "/usr/share/nginx/html/cgi-bin/php5" failed (2: No such file or directory), client: 118.25.53.11, server: _, request: "POST /cgi-bin/php5?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C show less	Fraud VoIP Brute-Force
🇧🇩 Unveil Technology	2020-12-12 22:53:04 (5 years ago)	Sun 13 09:53:04 [ServerName] WebAppAttack from 118.25.53.11 port 80 http	Web App Attack
🇺🇸 TheMadBeaker	2020-12-12 05:13:16 (5 years ago)	Port Scan: TCP/888	Port Scan
🇰🇷 gjan.info	2020-12-12 00:01:03 (5 years ago)	Auto Detect Rule! proto TCP (SYN), 118.25.53.11:23191->gjan.info:8080, len 52	Port Scan
Anonymous	2020-12-10 15:31:18 (5 years ago)	T: f2b 404 5x	Web App Attack
🇮🇪 RoboSOC	2020-12-06 12:43:24 (5 years ago)	Joomla HTTP User Agent Object Injection Vulnerability , PTR: PTR record not found	Exploited Host
🇰🇿 Greg	2020-12-03 05:34:39 (5 years ago)	118.25.53.11 - - \[03/Dec/2020:16:33:37 +0600\] "GET /joomla/ HTTP/1.1" 301 184 "-" "Mozilla/5.0 $W ... show more 118.25.53.11 - - \[03/Dec/2020:16:33:37 +0600\] "GET /joomla/ HTTP/1.1" 301 184 "-" "Mozilla/5.0 \(Windows NT 6.1\; Win64\; x64\; rv:58.0$ Gecko/20100101 Firefox/58.0"118.25.53.11 - - \[03/Dec/2020:16:33:37 +0600\] "GET /Joomla/ HTTP/1.1" 301 184 "-" "Mozilla/5.0 $Windows NT 6.1\; Win64\; x64\; rv:58.0$ Gecko/20100101 Firefox/58.0"118.25.53.11 - - \[03/Dec/2020:16:33:38 +0600\] "GET / HTTP/1.1" 301 184 "-" "Mozilla/5.0 $Windows NT 6.1\; Win64\; x64\; rv:58.0$ Gecko/20100101 Firefox/58.0"118.25.53.11 - - \[03/Dec/2020:16:33:39 +0600\] "GET /d7.php HTTP/1.1" 301 184 "-" "Mozilla/5.0 $Windows NT 6.1\; Win64\; x64\; rv:58.0$ Gecko/20100101 Firefox/58.0"118.25.53.11 - - \[03/Dec/2020:16:33:39 +0600\] "GET /rxr.php HTTP/1.1" 301 184 "-" "Mozilla/5.0 $Windows NT 6.1\; Win64\; x64\; rv:58.0$ Gecko/20100101 Firefox/58.0"118.25.53.11 - - \[03/Dec/2020:16:33:40 +0600\] "GET /1x.php HTTP/1.1" 301 184 "-" "Mozilla/5.0 $Windows NT 6.1\; Win64\; x64\; rv:58.0$ Gecko/20100101 Firefox/58.0"1 ... show less	Hacking Brute-Force Web App Attack SSH
🇫🇷 security.rdmc.fr	2020-12-01 18:24:03 (5 years ago)	Automatic report - Banned IP Access	Web App Attack

Showing 1 to 15 of 27 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.218.206.93

🇳🇱 45.148.10.141

🇺🇸 206.189.170.17

🇵🇱 194.180.49.73

🇺🇸 185.8.106.223

🇺🇸 185.8.106.139

🇹🇷 176.236.127.114

🇿🇼 143.105.37.187

🇰🇷 20.194.96.114

🇺🇸 206.81.2.201

🇺🇸 185.180.141.106

🇺🇦 176.103.5.201

🇮🇳 150.107.19.15

🇻🇳 113.172.118.186

🇩🇪 104.140.188.18

🇮🇩 103.121.18.13

🇩🇪 69.5.169.207

🇳🇱 109.160.32.155

🇺🇸 72.17.34.38

🇮🇷 2.180.36.41